FTP password not saving in /etc/proftpd

[stefanbc]

Hi,

I can't sftp into one of the accounts and I think, the reason is that no password is saved anymore in etc/proftpd/user


Here is what I have for one account that is not working(cpanel access works but no sftp)
user1:*:535:536::/home/user1:/bin/bash
user1_logs:*:535:536:user1:/etc/apache2/logs/domlogs/user1:/bin/ftpsh

And here is what I have for a user that is working
user2:$6$b.............RA/:525:526::/home/user2:/bin/bash
user2_logs:$6$b...........RA/:525:526:user2:/etc/apache2/logs/do$


I changed the password a few times for user1, I restarted the ftp, I modified the account, regenerated the file by deleting and restarting and syncing ftp, but the second set of character which I believe is the encrypted password is always a *.


Any ideas if this is a correct assumption, or any other ways sftp access could be fixed?


Thank you

 

[sysdop]

@stefanbc If I am not wrong, correct me if I am wrong from now on WHM / cPanel encrypts FTP passwords as it is betting more on user security than anything else. Although you can open a ticket with cpanel for more information about this.

 

[stefanbc]

The problem is that for one user on my system, the password is encrypted as *, as mentioned above. Currently I am afraid to change the other users as I might not be able to login. I will try to create a new account and test.

So either the pass is saved some place else or there is a bug in setting the password, or I can't sftp into this account because I set it up incorrectly.

 

[cPanelMichael]

Hello,

SFTP runs on a different protocol than FTP. It's essentially FTP over the SSH protocol. Currently, it's only possible to access SFTP using the cPanel account username and password. Can you let us know of any output to /var/log/secure when attempting to access SFTP as the cPanel account username?

Thank you.

 

[stefanbc]

Hi,

The account was put in demo mode(because something was not working as expected and never switched back) but there was no way of finding that out from the interface when viewing or modifying the account or the password. I believe a ticket was added so that a notification is shown.

Thank you

 

[cPanelMichael]

The account was put in demo mode(because something was not working as expected and never switched back) but there was no way of finding that out from the interface when viewing or modifying the account or the password. I believe a ticket was added so that a notification is shown.

Hello,

Thanks for the update. For reference, the internal case number for the inclusion of a warning for FTP when demo mode is enabled is CPANEL-15871.

Thank you.

04-02-2019 Update: CPANEL-15871 was closed due to a lack of new support requests. Please feel free to reply to this thread if this issue continues to present a problem.