[Case 45766] System FTP users cannot authenticate in Pure-FTPd w/o cPanel account

[gcphost]

Hello community

I have been using /scripts/ftpupdate to update cPanels FTPD accounts for YEARS, really, but recently It is no longer adding users to its ftp config files.

1. Add a user using 'adduser', ie 'adduser ftptest'
2. Set a password, 'passwd ftptest'
3. Run the script from cPanel '/scripts/ftpupdate'
4. Try to FTP, can you? We used to, not anymore!

I tried many steps including using cpanels adduser script - that didnt work either.


So I try something else

1. locate the user in the /etc/shadow file
2. copy their full line
3. paste it in /etc/proftpd/passwd.vhosts

I can then FTP no problem, great! But once 'ftpupdate' is ran BAM its gone!

What gives? Did cPanel really change? It looks that way to me, so how does one create a normal - adduser - account with FTP access these days?


Thank you for your assistance.


p.s

I tried: http://forums.cpanel.net/f5/can-we-create-accounts-using-shell-51910.html
And: http://www.sysadminguide.com/cp/cpanel/create-an-ftp-user-on-cpanel-server-from-backend-shell/

 

[cPanelDon]

Are you using a distribution of Linux or FreeBSD, and what is the OS version?

What is your version of cPanel&WHM? It will help if you could please provide us with the output from the following command, entered via root SSH access:

# grep -H '' /usr/local/cpanel/version /var/cpanel/envtype

Which FTP server software is being used? For example, are you using ProFTPD or Pure-FTPd? This can be found using the following command:

# /scripts/setupftpserver --current

Is there difficulty using the normal cPanel interface to create and manage FTP accounts? I'm not aware of the "ftpupdate" script having use as an aid in FTP account creation; is there a reason why this script is being used in the manner described?

 

[gcphost]

is there a reason why this script is being used in the manner described?

Users are manually created on the server using 'adduser' and those users need FTP access - the only way to get FTP access, in the past, on cPanel was to run the 'ftpupdate' script provided with the cPanel software.


I was under the impression ftpupdate was used to 'sync' the /etc/passwd accounts with the FTP file cPanel is using - in the past this was the case.

# grep -H '' /usr/local/cpanel/version /var/cpanel/envtype

/usr/local/cpanel/version:11.28.64-RELEASE_51024

/var/cpanel/envtype:standard
# /scripts/setupftpserver --current

Current FTP server type: pure-ftpd

OS is Centos 5.5 64bit

Are you able to do 'adduser' - add a user - and ftp to that user?

 

[spamthishard]

I need the same thing, to add users with 'adduser' and FTP to those accounts. Please, no workarounds or alternatives. All CPanel accounts and FTP users are based on /home partition and I need FTP access to a different partition (/backup) and to a system folder (/usr/lib/php), so symlinks, hardlinks and cpanel user accounts do not work in this case.

I have the same WHM, Centos, and pure-ftp version as above. This worked for me until the last WHM updates, when this manually-added-accounts could no longer authenticate trough FTP.

 

[OpenAreas]

This worked for me until the last WHM updates, when this manually-added-accounts could no longer authenticate trough FTP.

Same here - works for years until now, no workarounds is what I'd like to see too - ftpupdate should operate like it always has if you ask me.

Why has this changed? I don't want cPanel to completely dominate my server. I like the panel and all, but I like to do other things that doesn't involve using cPanel/WHM too!

 

[cPanelDon]

Users are manually created on the server using 'adduser' and those users need FTP access - the only way to get FTP access, in the past, on cPanel was to run the 'ftpupdate' script provided with the cPanel software.

I was under the impression ftpupdate was used to 'sync' the /etc/passwd accounts with the FTP file cPanel is using - in the past this was the case.

Are you able to do 'adduser' - add a user - and ftp to that user?

I believe the system user must be a normal cPanel account and not just any system user. If cPanel is not working as expected, please either submit a support request for in-depth assistance or submit a detailed bug report.

Is there any difficulty using cPanel to create and manage FTP accounts?

 

[cPanelDon]

I need the same thing, to add users with 'adduser' and FTP to those accounts. Please, no workarounds or alternatives. All CPanel accounts and FTP users are based on /home partition and I need FTP access to a different partition (/backup) and to a system folder (/usr/lib/php), so symlinks, hardlinks and cpanel user accounts do not work in this case.

I have the same WHM, Centos, and pure-ftp version as above. This worked for me until the last WHM updates, when this manually-added-accounts could no longer authenticate trough FTP.

Same here - works for years until now, no workarounds is what I'd like to see too - ftpupdate should operate like it always has if you ask me.

Why has this changed? I don't want cPanel to completely dominate my server. I like the panel and all, but I like to do other things that doesn't involve using cPanel/WHM too!

I'm not sure that I understand; are you expecting non-cPanel system accounts to be managed by cPanel? If you want to use cPanel to setup and manage arbitrary FTP users that are not associated with a cPanel account I would consider submitting a feature request.

 

[cPanelDon]

spamthishard, what is your cPanel&WHM version number?

OpenAreas, what is your cPanel&WHM version number?

 

[spamthishard]

I already stated that versions are exactly as the ones posted above by gcphost.
I do expect that CPANEL will not modify the default behavior of pureftpd (with unix authentication on) and if it dose, at least to have the decency to emulate that functionality like it did until recently, before the last updates.

For my needs I managed to find an ugly workaround by creating a cpanel ftp acoount under some random user account, then replacing (as root via SSH) it`s directory with a symlink to my directory.

 

[gcphost]

cPanel used to do this just fine - add a linux user - run ftpupdate - it would add them to the ftpd files .

I'm lost why we need to request a feature as this was working exactly like that for the last 5+ years or so since I first found the ftpupdate script fixed the adduser issue.

And yes I do expect a ftp on port 21 to read system users on Linux, this is the standard for 20+ years.

 

[OpenAreas]

I also stated "Same here" to the above posts. Please be careful on reads.

I'm have pretty much the same problem and i'm fathomed as to why it's stopped working after YEARS of it being how it is.

 

[cPanelDon]

I already stated that versions are exactly as the ones posted above by gcphost.
I do expect that CPANEL will not modify the default behavior of pureftpd (with unix authentication on) and if it dose, at least to have the decency to emulate that functionality like it did until recently, before the last updates.

For my needs I managed to find an ugly workaround by creating a cpanel ftp acoount under some random user account, then replacing (as root via SSH) it`s directory with a symlink to my directory.

cPanel used to do this just fine - add a linux user - run ftpupdate - it would add them to the ftpd files .

I'm lost why we need to request a feature as this was working exactly like that for the last 5+ years or so since I first found the ftpupdate script fixed the adduser issue.

And yes I do expect a ftp on port 21 to read system users on Linux, this is the standard for 20+ years.

I apologize for the difficulty. I was able to reproduce the problem; for testing I enabled UnixAuthentication in Pure-FTPd and then restarted the FTP daemon, but I was still unable to successfully login via FTP using a manually-created system user.

While researching I found we have an internal case open for tracking the issue and we are actively working on a resolution; for your reference this issue was assigned to case 45766. The official change log for cPanel & WHM can be used to track and confirm when the issue is corrected and in which version. When resolved, it is my understanding that the bug-fix will be made available in a maintenance update for cPanel & WHM version 11.28.

 

[OpenAreas]

I apologize for the difficulty. I was able to reproduce the problem; for testing I enabled UnixAuthentication in Pure-FTPd and then restarted the FTP daemon, but I was still unable to successfully login via FTP using a manually-created system user.

While researching I found we have an internal case open for tracking the issue and we are actively working on a resolution; for your reference this issue was assigned to case 45766. The official change log for cPanel & WHM can be used to track and confirm when the issue is corrected and in which version. When resolved, it is my understanding that the bug-fix will be made available in a maintenance update for cPanel & WHM version 11.28.

Right, well most of us are running businesses. One is of course using a custom application, that app makes an FTP user. But clients are unable to use their FTP account. How long are we looking for a turn around on this?

 

[cPanelDon]

Right, well most of us are running businesses. One is of course using a custom application, that app makes an FTP user. But clients are unable to use their FTP account. How long are we looking for a turn around on this?

It is my understanding the issue is scheduled to be resolved in an upcoming maintenance release for cPanel 11.28. As of this evening I confirm development has a possible solution that is now queued for further review and testing by Quality Assurance. If any new status information arises I will ensure this thread is updated, though right now I do not have any other news available.

 

[OpenAreas]

I hate to be a bit harsh. But I've been trying to fix this since Friday... not knowing it was a cPanel issue until today. So a release today or tomorrow by the latest is much needed and I prompt you for this.

Every minute is a potential loss of earnings because of this bug. I appreciate you can't give an exact time, but you're being pretty vague. For all I know, it could take weeks yet; which quite frankly wouldn't be good enough.

 

[cPanelDon]

I already stated that versions are exactly as the ones posted above by gcphost.

I also stated "Same here" to the above posts. Please be careful on reads.

Please know that I did read each message in full. The version was requested to ensure an accurate diagnosis. In my experience I have encountered instances where the "same" may (inadvertently) mean only a partial match, such as "11.28" rather than an exact match to the full version number (i.e., "11.28.64"); for this reason it is immensely helpful to have the full version number confirmed so that there is no confusion. I appreciate your understanding.

I'm lost why we need to request a feature as this was working exactly like that for the last 5+ years or so since I first found the ftpupdate script fixed the adduser issue.

I apologize as I did not realize the full scope of the problem until researching further and testing to reproduce the symptoms. I had initially expected that a normal system user would be able to authenticate after enabling the UnixAuthentication option in Pure-FTPd, but after testing I confirm the unexpected behavior of the issue as you described.

 

[cPanelDon]

I appreciate you can't give an exact time, but you're being pretty vague. For all I know, it could take weeks yet; which quite frankly wouldn't be good enough.

I understand the need for resolution. If I had a more precise ETA available I would certainly relay that information to everyone in this thread; however, the best estimate I have is as previously indicated. I am sure that you would not want us rushing out an incomplete resolution, and that is why the proposed solution must be reviewed and pass Quality Assurance testing. The release process can take time, and I am unable to know how long it could be.

 

[gcphost]

Youre doing a great job Don - thank you.

 

[OpenAreas]

I understand the need for resolution. If I had a more precise ETA available I would certainly relay that information to everyone in this thread; however, the best estimate I have is as previously indicated. I am sure that you would not want us rushing out an incomplete resolution, and that is why the proposed solution must be reviewed and pass Quality Assurance testing. The release process can take time, and I am unable to know how long it could be.

Hi, again you're still being vague. Your reply isn't good enough, I need at least some guidance as to when I can expect this... please try and understand the level of urgency this bug fix is needed. As I've said, every minute is a loss of earnings. Things don't pay for themselves... for something major like this not to work because cPanel is stopping me from doing so is not acceptable and a better response is requested please.

Fair enough if it's a bug that defects something quite minor, but FTP is quite a major thing... no? It's frustrating as I have new customers ready to go, but because of this issue. I'm having to hold off on letting them purchase.

 

[OpenAreas]

Due to the urgency of this situation, and lack of understanding from cPanel. Over 12hours without a reply? Thanks!

I've submitted a ticket to cPanel, will also file a report to the datacenter so they can submit one too. I try to be a pretty calm guy, I'll wait; But major things that defect my business in a big way is not something I'm willing to stand for. Especially since I can do nothing about it. I pay my fee, I expect good turn arounds from such a big name.