FTP connections fail like bad password, but changing them does not fix.

[nyjimbo]

Some of my customers are complaining that when they connect via FTP or Dreamweaver, it appears to try to connect but a few seconds later fails.
This is a recent error, even though this server has been running fine for a year or so.

For filezilla client users, they see :

Command: USER xxxx
Response: 331 User xxxx OK. Password required
Command: PASS *******
Response: 530 Login authentication failed
Error: Critical error: Could not connect to server

If I change the password to something new, the same error occurs. This is not happening to all accounts, but more people are complaining each day.

Is there something I can do to trace it ?


Running - CENTOS 7.8 - v88.0.5

 

[cPanelLauren]

Is anything noted in /var/log/messages in association with this?

 

[nyjimbo]

Looks like a typical password failure, which it should not as a new password was generated and then a login attempted:

May 28 05:56:02 host1 pure-ftpd: (?@IPREMOVED) [INFO] New connection from IPREMOVED
May 28 05:56:08 host1 pure-ftpd: (?@IPREMOVED) [WARNING] Authentication failed for user [junek]
May 28 05:56:08 host1 pure-ftpd: (?@IPREMOVED) [INFO] Logout.

Here is one from an account that seems to work fine:

May 28 05:59:26 host1 pure-ftpd: (?@IPREMOVED) [INFO] New connection from IPREMOVED
May 28 05:59:26 host1 pure-ftpd: (?@IPREMOVED) [INFO] dummydom is now logged in

 

[cPanelLauren]

Is the user being used in both instances the cPanel username? Meaning what are you putting in for the login? Are you using cPHulk's Username based blocking? Is the connection being used for the second user different in any way than the one being used for the first one? Things like one of them being saved, or using a different client are all important.