FTP Passwords stop working randomly

[derekivey]

Hey guys,

I've run into this problem on my server where at random times the FTP server just stops letting any user in. It just gives me a 530 Login authentication failed error. When I reboot the server it seems to fix it, but restarting the ftp service doesn't fix it. Also if I just let it go and wait awhile it works fine again. Does anyone know what could be wrong? I also wanted to mention that all accounts are still able to login to cPanel fine during this time.

Thanks,

Derek

[andyaav]

Have you tried
WHM -> Synchronize FTP Passwords

If you are using pure-ftpd then switch to Proftpd.

Main >> Service Configuration >> FTP Configuration
Switch to Proftpd

hope it will help..

[derekivey]

Thanks for your reply. Yes, I have tried resynchronizing the passwords but that didn't fix it. I will try switching to proftpd and see if that fixes it.

Thanks,
Derek

[Spiral]

Have you tried
WHM -> Synchronize FTP Passwords

Yes, that is all that needs be done and restart FTP server process!

If you are using pure-ftpd then switch to Proftpd.

Main >> Service Configuration >> FTP Configuration
Switch to Proftpd

That is BAD ADVICE !!!!

Proftpd is not only a resource hog but it is also riddled
with hundreds of security vulnerabilities that still remain
despite numerous attempts by the manufacturer to close
some of those security holes.

Anyone running Proftpd may as well set their root password
to their server to "password" or "abc123" for all it's worth
because if you are running ProFTPd, then your server
has very serious open security issues!

[vincentg]

The cure is to switch to pro and then back to pure ftp

[derekivey]

I tried switching to proftpd and back to pureftpd and that didn't fix it .

I also synchronized the ftp passwords as well.

Any other ideas?

[duranduran]

Same problem here. I tried

/ftpup --force, upcp --force, chang to stable and back do release, chage to proftp and back to pureftp

This is more one of the mysterious problems of the cpanel updates. that is incredible.

I have 8 cpanel servers, all with the same FTP problem.
The cpanel is going me crazy.

This is the error:

C:\Documents and Settings\Alexandre>ftp 4every1.com.br
Conectado a 4every1.com.br.
220---------- Welcome to Pure-FTPd [TLS] ----------
220-You are user number 1 of 50 allowed.
220-Local time is now 00:37. Server port: 21.
220-This is a private system - No anonymous login
220-IPv6 connections are also welcome on this server.
220 You will be disconnected after 15 minutes of inactivity.
Usuário (XXXXXXnone)): XXXXX
331 User XXXX OK. Password required
Senha:
230-User capa has group access to: XXXX
230 OK. Current restricted directory is /
ftp> ls
200 PORT command successful
425 Could not open data connection to port 5001: Connection timed out
ftp>

[duranduran]

Well, this fix for me, maybe fix for others... In my case this is a APF/Monolithic kernel problem.

Try this, in the /etc/pure_ftpd.conf uncoment the line

#PassivePortRange 35000 35999

And save. In the /etc/apf.conf change the line:

SET_MONOKERN="1" to SET_MONOKERN="0"

and put the Passive Port Range in the line IG_TCP_CPORTS

Execute,

apf -r

and restart ftp server.

[derekivey]

Thanks! I will give that a try. That is probably the problem with mine too as a I believe I have APF set to monolithic kernel as well.

Derek

[strikinado]

Who has been fixed this bug?

I have tryed all in this post but nothing has been resolved.

Thanks

[outlaw web]

it's turning into a bloody joke.....

ftp passwords just stop working each time cpanel farts too hard....

OWM

[soundguy]

I've been fighting this BS for a couple of days now and manged to fix at least one account by modifying the zone file in the DNS records. It seems that some accounts were created with "ftp" pointing to an "A record" containing the IP address assigned to the account and others were created with cnames containing the FQDN instead.

I have a few hundred accounts spread across a dozen servers. Some are new and some are several years old. Many have been moved several times from server to server and a few date back to cPanel V9x and possibly earlier. I haven't paid that much attention so far, but what I'm seeing now is that the accounts with the random periods of unuseability are the ones that use cnames for FTP. I managed to "cure" one account yesterday by reinstalling bind on the host machine. That didn't fix all of the problem accounts though.


FWIW, I also had a DNSonly machine in my cluster up until a few minutes ago. It appears to have gotten some kind of 11.x version in the last day or so (it was on 10.x when this mess started) and now seems to be severely broken. It keeps reverting the whole cluster back to a set of records from last week every time a zone file is updated on one of the other machines in the cluster. I killed it and I'll be replacing that name server with one of my other machines that's already in the cluster. DNSonly is currently not ready for production use, it would seem.

[ipole]

I have started facing the same problem since today. However, I have noticed that if I ssh to the server and ftp to localhost, the user can log in just fine.

Only in case of remote FTP connections, the auth fails.

Any clues? I suspect some recent Cpanel updates has caused this problem.

Regards,
IPole

P.S. I have checked my zone files, and found that the FTP record is pointing to the IP and not CNAME.

[ipole]

Adding further to my diagnosis, I was able to get the FTP working when I switched to proftpd. On switching back to Pureftpd, it still continues to work fine as of now.

I dont know if the problem has got solved now, or will recur again though.

regards,
IPole

[Sanehouse]

Whenever my FTP client decides to be retarded, I just open My Computer and type into the address bar:

ftp://username@ftp.hostname

Example:

Username = test1
Hostname = test.com

It has never failed me yet, but my FTP clients always fail me now...