Pure-ftpd - does not work after new installation of Cyber Panel

softman · January 16, 2023, 5:40pm

Cyber Panel was installed few days ago from image in Google Cloud on new VM. Ubuntu 22.04

After install, i had some files and folders in: /etc/pure-ftpd but this service was not installed on machine.
I installed:

sudo apt-get purge --auto-remove pure-ftpd
sudo apt install pure-ftpd -y
systemctl stop pure-ftpd
getent group ftpgroup

ftpgroup:x:2001:
useradd -u 2001 -s /bin/false -d /bin/null -c “pureftpd user” -g ftpgroup ftpuser
useradd: user ‘ftpuser’ already exists
systemctl start pure-ftpd
systemctl status pure-ftpd
cp pure-ftpd.pem pure-ftpd.pem.org
openssl req -newkey rsa:1024 -new -nodes -x509 -days 3650 -subj “/C=US/ST=Denial/L=Springfield/O=Dis/CN=www.example.com” -keyout /etc/ssl/private/pure-ftpd.pem -out /etc/ssl/private/pure-ftpd.pem

rm -R /etc/pure-ftpd
mkdir /etc/pure-ftpd
cp /usr/local/CyberCP/install/pure-ftpd-one/* /etc/pure-ftpd/

but above i didnt find subfolders so i had to install it again.

I corrected mysql pass in pureftpd-mysql.conf from (/usr/local/CyberCP/CyberCP/settings.py under DATABASES =)

Finally i created some new user at:
https://xx.xx.44.xxx:8090/ftp/createFTPAccount
for example: puser

And later i try to login via FileZilla:

when generated new one pure-ftpd.pem file:
openssl req -newkey rsa:1024 -new -nodes -x509 -days 3650 -subj “/C=US/ST=Denial/L=Springfield/O=Dis/CN=example.com” -keyout /etc/ssl/private/pure-ftpd.pem -out /etc/ssl/private/pure-ftpd.pem

error:
00:21:08 Status: Resolving address of example.com
00:21:08 Status: Connecting to xx.xx.xxx.xxx:21…
00:21:08 Status: Connection attempt failed with “ECONNREFUSED - Connection refused by server”.
00:21:08 Error: Could not connect to server

when i used original pure-ftpd.pem file after Cyber Panel installation:

error:
Host: example.com:21 hostname does not match certificate

what can i do?

josephgodwinke · January 16, 2023, 5:59pm

Happy New Year @softman Happy you are here

Did you follow these instructions to reinstall FTP not working - 530 Login authentication failed - #8 by josephgodwinke before installing cyberpanel afresh?

softman · January 16, 2023, 6:08pm

Hi,

No, i followed this instructions after install new cyberpanel. So, should i to execute this instructions again and later install again cyberpanel?

regards

josephgodwinke · January 16, 2023, 6:11pm

If its a new installation I advice you install cyberpanel afresh and make sure its the stable branch you are using. The server has to be a clean os no apache no extra firewalls etc. I would recommend Ubuntu 20.04LTS 64 bit.

Access that server with sudo user or root and run commands here 01 - Installing CyberPanel - Docs - CyberPanel Community

softman · January 16, 2023, 6:16pm

But now we have Ubuntu 22.04 LTS, so what is the correct installation path for this? CP and pure-ftpd should work correctly or no ?

josephgodwinke · January 16, 2023, 6:25pm

I do not recommend this version

Using an ssh client such as Remmina, Bitvise log into your server using sudo user or root and make sure you are at root e.g.

# just logged in
root@vpsi1209:~$ cd ~/
root@vpsi1209:~$ sh <(curl https://cyberpanel.net/install.sh || wget -O - https://cyberpanel.net/install.sh)
# choose OLS or Litespeed if you got License
# choose a full installation - Power DNS etc
# Remote MySQL is set to No by default
# Watchdog stays as default Yes

# Reboot server
# setup FTP user and use your favourite FTP Client to log in

Do not do anything else. Post any issues here.

Tried it once for a client some technologies did not work as expected after a few days. I recommended the client to ditch it and they have never had any issues since then.

softman · January 18, 2023, 12:06pm

Thanks for your answers. First we have to diagnose what we have and what we can do.
I checked, so we have fresh installation this image:

image details:

OS: Ubuntu 22.04
package: Cyberpanel 2.3.2 , OpenLiteSpeed 1.7.16 , RainLoop 1.15.0 , MariaDB 10.4 , phpMyAdmin 5.1.0 , PowerDNS 4.2.1 , Postfix 3.4.13 ( * Auto SSL. * FTP Server… etc)

After this installation pure-ftpd has some files but was not installed, so i installed it. Now it work but i have problem with ftp login as i said in my first post.

So, is that image should work properly? What commands should we do to add correctly ftp users in CP and later login by this user from FileZilla ?

regards

josephgodwinke · January 18, 2023, 8:50pm

I do not understand this question

Go to https://SERVER_URL:8090/ftp/createFTPAccount and create a user

softman · January 18, 2023, 9:17pm

We installed CyberPanel from Image: “Google Cloud console” ( https :// console. cloud. google. com/marketplace/product/gc-image-pub/cyberpanel?project=top-sentinel-316706) - question is: why after this install ftp does not work correctly ?

josephgodwinke · January 18, 2023, 9:22pm

What errors do you have here https://<IP Address>:8090/serverlogs/ftplogs

softman · January 18, 2023, 9:51pm

As i said in first post, question is what option should I use:

And later i try to login via FileZilla:

when generated new one pure-ftpd.pem file:
openssl req -newkey rsa:1024 -new -nodes -x509 -days 3650 -subj “/C=US/ST=Denial/L=Springfield/O=Dis/CN=example.com” -keyout /etc/ssl/private/pure-ftpd.pem -out /etc/ssl/private/pure-ftpd.pem

error:
00:21:08 Status: Resolving address of example.com
00:21:08 Status: Connecting to xx.xx.xxx.xxx:21…
00:21:08 Status: Connection attempt failed with “ECONNREFUSED - Connection refused by server”.
00:21:08 Error: Could not connect to server

when i used original pure-ftpd.pem file after Cyber Panel installation:

error:
Host: example.com:21 hostname does not match certificate

1 or 2 ?

josephgodwinke · January 18, 2023, 9:55pm

Try either. Am curious cause option 2 should work but just give 1 a try

softman · January 18, 2023, 10:31pm

when generated new one pure-ftpd.pem file:
openssl req -newkey rsa:1024 -new -nodes -x509 -days 3650 -subj “/C=US/ST=Denial/L=Springfield/O=Dis/CN=example.com” -keyout /etc/ssl/private/pure-ftpd.pem -out /etc/ssl/private/pure-ftpd.pem

logs from ftp www:
Jan 18 22:20:08 localhost pure-ftpd: (?@unn-45-134-212-249.datapacket.com) [INFO] New connection from unn-45-134-212-249.datapacket.com
Jan 18 22:20:15 localhost pure-ftpd: (?@unn-45-134-212-249.datapacket.com) [WARNING] Authentication failed for user [testuser_ftp]
Jan 18 22:20:15 localhost pure-ftpd: (?@unn-45-134-212-249.datapacket.com) [INFO] Logout.
Jan 18 22:20:28 localhost postfix/anvil[128751]: statistics: max connection rate 1/60s for (smtp:xxx.98.11.53) at Jan 18 22:15:57
Jan 18 22:20:28 localhost postfix/anvil[128751]: statistics: max connection count 1 for (smtp:xxx.98.11.53) at Jan 18 22:15:57
Jan 18 22:20:28 localhost postfix/anvil[128751]: statistics: max cache size 1 at Jan 18 22:15:57

when i used original pure-ftpd.pem file after Cyber Panel installation:

logs from ftp www:
Jan 18 22:24:53 localhost postfix/smtpd[135194]: warning: hostname secua.poppopprision.com does not resolve to address xxx.98.11.54
Jan 18 22:24:53 localhost postfix/smtpd[135194]: connect from unknown[xxx.98.11.54]
Jan 18 22:24:55 localhost postfix/smtpd[135194]: warning: unknown[xxx.98.11.54]: SASL PLAIN authentication failed:
Jan 18 22:24:55 localhost postfix/smtpd[135194]: disconnect from unknown[xxx.98.11.54] ehlo=1 auth=0/1 quit=1 commands=2/3
Jan 18 22:25:05 localhost postfix/smtpd[135194]: connect from unknown[xxx.98.10.131]
Jan 18 22:25:07 localhost postfix/smtpd[135194]: warning: unknown[xxx.98.10.131]: SASL PLAIN authentication failed:
Jan 18 22:25:07 localhost postfix/smtpd[135194]: disconnect from unknown[xxx.98.10.131] ehlo=1 auth=0/1 quit=1 commands=2/3
Jan 18 22:25:08 localhost pure-ftpd: (?@unn-45-134-212-249.datapacket.com) [INFO] New connection from unn-45-134-212-249.datapacket.com
Jan 18 22:25:13 localhost postfix/smtpd[135194]: connect from unknown[xxx.98.10.106]
Jan 18 22:25:15 localhost pure-ftpd: (?@unn-45-134-212-249.datapacket.com) [WARNING] Authentication failed for user [testuser_ftp]
Jan 18 22:25:15 localhost pure-ftpd: (?@unn-45-134-212-249.datapacket.com) [INFO] Logout.
Jan 18 22:25:16 localhost postfix/smtpd[135194]: warning: unknown[xxx.98.10.106]: SASL PLAIN authentication failed:
Jan 18 22:25:16 localhost postfix/smtpd[135194]: disconnect from unknown[xxx.98.10.106] ehlo=1 auth=0/1 quit=1 commands=2/3

What is the correct step to use ftp after installation from google image ?

regards

josephgodwinke · January 19, 2023, 4:44am

Are you using the stable branch or a specific branch when you installed cyberpanel? I have seen another user just confirm the same and it threw me off

softman · January 19, 2023, 11:26am

Create ftpuser in command line - it was for test. We just created another user at the www Cyber Panel ftp
We want to connect by user created at www cyber panel: Authentication failed for user [testuser_ftp]

josephgodwinke · January 19, 2023, 12:13pm

Kindly answer this question

softman · January 19, 2023, 3:58pm

As i said above:
We installed CyberPanel Official [LiteSpeed Technologies] (Google Cloud console)

from Google Cloud (Google Cloud console)

I see link on this site to:

So, probably this is stable version (but i think its newest not like in this unactual probably link becouse we have with this image: * OS: Ubuntu 22.04

package: Cyberpanel 2.3.2 , OpenLiteSpeed 1.7.16 , RainLoop 1.15.0 , MariaDB 10.4 , phpMyAdmin 5.1.0 , PowerDNS 4.2.1 , Postfix 3.4.13 ( * Auto SSL. * FTP Server… etc)).

Maybe @nick.chomey and @usmannasir can help ?

softman · January 21, 2023, 10:29pm

do you have any update ? what about this image ?

softman · February 10, 2023, 10:48pm

@josephgodwinke can you answer my problem ?

mattish91 · October 7, 2023, 6:47pm

Got a similar issue, seams like pure-ftpd-mysql can’t read the users in the database. Connection seams to be fine (tested to set the wrong password on purpose to see the output and to be sure).

This is the stock pureftpd-mysql.conf:

the MySQL pw and user are missing from the image for obvious reasons… i Can asure you they are still there and working.

This is the stock pure-ftpd.conf:

This seams to be the problem today:

(that doesn’t seam to by IP either…)