Hello Adam, maybe this is a stupid question, but do you have reset the password for the user you are attempting to login via proftd after you disabled PBKDF2 in universe_wsgi.ini? If not, the password is still encoded with PBKDF2 in the db and thus it will never work with SHA1 authentication. Best, Federico Il 05/09/13 02.46, Panzer, Adam ha scritto:
Hello Devs,
I've been trying for a while now to get ProFTPD working for our local instance. I have: 1) Modified pg_hba.conf 2) Set up the ProFTPD config files 3) Disabled PBKDF2 password encryption by adding use_pbkdf2 = false to universe_wsgi.ini
I've read through the posts from others with this issue and made sure to avoid some of the common pitfalls like forgetting to install/enable mod_sql.c, mod_sql_postgres.c, and LoadModule mod_sql_passwd.c or having an incorrect/<999 uid/gid in proftpd.conf. Even so, when I attempt to access the server through FileZilla, it continues to kick back login errors for all users:
Status: Resolving address of localhost Status: Connecting to 127.0.0.1:21... Status: Connection established, waiting for welcome message... Response: 220 ProFTPD 1.3.4a Server (Jay2) [::ffff:127.0.0.1] Command: USER panzer_a@kids.wustl.edu Response: 331 Password required for panzer_a@kids.wustl.edu Command: PASS *********** Response: 530 Login incorrect. Error: Critical error Error: Could not connect to server
I have included the contents of the relevant config files and logs below. The proftpd log says that the user name is wrong, but the sqllog seems to indicate a successful hit on the user but a failed password authentication (again, despite disabling PBKDF2). I would be most grateful if someone could tell me what I'm doing wrong.
Thanks, Adam
- PACKAGE VERSIONS - PostgreSQL 9.2 Nginx 1.1.19 ProFTPD 1.3.4a
- PG_HBA.CONF - local all all trust host all all 127.0.0.1/32 trust host all all ::1/128 trust host all all 0.0.0.0/0 md5
- PROFTPD.CONF -
Include /etc/proftpd/modules.conf
UseIPv6 on
IdentLookups off
ServerType standalone DeferWelcome off
MultilineRFC2228 on DefaultServer on ShowSymlinks on
TimeoutNoTransfer 600 TimeoutStalled 600 TimeoutIdle 1200
DisplayLogin welcome.msg DisplayChdir .message true ListOptions "-l"
DenyFilter \*.*/
Port 21
PassivePorts 30000 40000
MaxInstances 30
User galaxy Group galaxy
Umask 077
AllowOverwrite on
AuthOrder mod_sql.c
SQLDefaultGID 1001 SQLDefaultUID 1001
TransferLog /var/log/proftpd/xferlog SystemLog /var/log/proftpd/proftpd.log
<IfModule mod_quotatab.c> QuotaEngine off </IfModule>
<IfModule mod_ratio.c> Ratios off </IfModule>
<IfModule mod_delay.c> DelayEngine on </IfModule>
<IfModule mod_ctrls.c> ControlsEngine off ControlsMaxClients 2 ControlsLog /var/log/proftpd/controls.log ControlsInterval 5 ControlsSocket /var/run/proftpd/proftpd.sock </IfModule>
<IfModule mod_ctrls_admin.c> AdminControlsEngine off </IfModule>
Include /etc/proftpd/conf.d/
- GALAXY.CONF (galaxy specific conf.d ProFTPD config file) -
ServerName "Jay2"
DefaultRoot ~
CreateHome on dirmode 700
AllowOverwrite on
AllowStoreRestart on
<Limit SITE_CHMOD> DenyAll </Limit>
<Limit RETR> DenyAll </Limit>
AuthPAM off
SQLPasswordEngine on SQLPasswordEncoding hex
SQLEngine on SQLBackend postgres SQLConnectInfo galaxy@localhost:5432 galaxy galaxy SQLAuthTypes SHA1 SQLAuthenticate users
SQLDefaultHomedir /var/lib/proftpd/empty
SQLUserInfo custom:/LookupGalaxyUser SQLNamedQuery LookupGalaxyUser SELECT "email,password,'1001','1001','/home/galaxy/galaxy-supp/ftp/%U','/bin/bash' FROM galaxy_user WHERE email='%U'"
SQLLogFile /var/log/proftpd/sqlLog.txt
- PROFTPD.LOG - Sep 04 19:03:51 PCF10-WKS1572 proftpd[4846] PCF10-WKS1572 (localhost[127.0.0.1]): FTP session closed. Sep 04 19:14:57 PCF10-WKS1572 proftpd[5034] PCF10-WKS1572 (localhost[127.0.0.1]): FTP session opened. Sep 04 19:14:57 PCF10-WKS1572 proftpd[5034] PCF10-WKS1572 (localhost[127.0.0.1]): USER panzer_a@kids.wustl.edu (Login failed): No such user found.
- SQLLOG.TXT - Sep 04 19:14:57 mod_sql/4.3[5034]: defaulting to 'postgres' backend Sep 04 19:14:57 mod_sql/4.3[5034]: backend module 'mod_sql_postgres/4.0.4' Sep 04 19:14:57 mod_sql/4.3[5034]: backend api 'mod_sql_api_v1' Sep 04 19:14:57 mod_sql/4.3[5034]: >>> sql_sess_init Sep 04 19:14:57 mod_sql/4.3[5034]: entering postgres cmd_defineconnection Sep 04 19:14:57 mod_sql/4.3[5034]: name: 'default' Sep 04 19:14:57 mod_sql/4.3[5034]: user: 'galaxy' Sep 04 19:14:57 mod_sql/4.3[5034]: host: 'localhost' Sep 04 19:14:57 mod_sql/4.3[5034]: db: 'galaxy' Sep 04 19:14:57 mod_sql/4.3[5034]: port: '5432' Sep 04 19:14:57 mod_sql/4.3[5034]: ttl: '0' Sep 04 19:14:57 mod_sql/4.3[5034]: exiting postgres cmd_defineconnection Sep 04 19:14:57 mod_sql/4.3[5034]: connection 'default' successfully established Sep 04 19:14:57 mod_sql/4.3[5034]: mod_sql engine : on Sep 04 19:14:57 mod_sql/4.3[5034]: negative_cache : off Sep 04 19:14:57 mod_sql/4.3[5034]: authenticate : users Sep 04 19:14:57 mod_sql/4.3[5034]: usertable : users Sep 04 19:14:57 mod_sql/4.3[5034]: userid field : userid Sep 04 19:14:57 mod_sql/4.3[5034]: password field : passwd Sep 04 19:14:57 mod_sql/4.3[5034]: UID field : uid Sep 04 19:14:57 mod_sql/4.3[5034]: GID field : gid Sep 04 19:14:57 mod_sql/4.3[5034]: homedir field : homedir Sep 04 19:14:57 mod_sql/4.3[5034]: homedir(default) : '/var/lib/proftpd/empty' Sep 04 19:14:57 mod_sql/4.3[5034]: shell field : shell Sep 04 19:14:57 mod_sql/4.3[5034]: SQLMinUserUID : 999 Sep 04 19:14:57 mod_sql/4.3[5034]: SQLMinUserGID : 999 Sep 04 19:14:57 mod_sql/4.3[5034]: <<< sql_sess_init Sep 04 19:14:57 mod_sql/4.3[5034]: >>> sql_pre_pass Sep 04 19:14:57 mod_sql/4.3[5034]: <<< sql_pre_pass Sep 04 19:14:57 mod_sql/4.3[5034]: >>> cmd_getpwnam Sep 04 19:14:57 mod_sql/4.3[5034]: entering postgres cmd_escapestring Sep 04 19:14:57 mod_sql/4.3[5034]: entering postgres cmd_open Sep 04 19:14:57 mod_sql/4.3[5034]: Postgres server version: 9.2.4 Sep 04 19:14:57 mod_sql/4.3[5034]: Postgres connection character set now 'UTF8' (from 'UTF-8') Sep 04 19:14:57 mod_sql/4.3[5034]: connection 'default' opened Sep 04 19:14:57 mod_sql/4.3[5034]: connection 'default' count is now 2 Sep 04 19:14:57 mod_sql/4.3[5034]: exiting postgres cmd_open Sep 04 19:14:57 mod_sql/4.3[5034]: entering postgres cmd_close Sep 04 19:14:57 mod_sql/4.3[5034]: connection 'default' count is now 1 Sep 04 19:14:57 mod_sql/4.3[5034]: exiting postgres cmd_close Sep 04 19:14:57 mod_sql/4.3[5034]: exiting postgres cmd_escapestring Sep 04 19:14:57 mod_sql/4.3[5034]: cache miss for user 'panzer_a@kids.wustl.edu' Sep 04 19:14:57 mod_sql/4.3[5034]: >>> sql_lookup Sep 04 19:14:57 mod_sql/4.3[5034]: >>> process_named_query 'LookupGalaxyUser' Sep 04 19:14:57 mod_sql/4.3[5034]: entering postgres cmd_escapestring Sep 04 19:14:57 mod_sql/4.3[5034]: entering postgres cmd_open Sep 04 19:14:57 mod_sql/4.3[5034]: connection 'default' count is now 2 Sep 04 19:14:57 mod_sql/4.3[5034]: exiting postgres cmd_open Sep 04 19:14:57 mod_sql/4.3[5034]: entering postgres cmd_close Sep 04 19:14:57 mod_sql/4.3[5034]: connection 'default' count is now 1 Sep 04 19:14:57 mod_sql/4.3[5034]: exiting postgres cmd_close Sep 04 19:14:57 mod_sql/4.3[5034]: exiting postgres cmd_escapestring Sep 04 19:14:57 mod_sql/4.3[5034]: entering postgres cmd_escapestring Sep 04 19:14:57 mod_sql/4.3[5034]: entering postgres cmd_open Sep 04 19:14:57 mod_sql/4.3[5034]: connection 'default' count is now 2 Sep 04 19:14:57 mod_sql/4.3[5034]: exiting postgres cmd_open Sep 04 19:14:57 mod_sql/4.3[5034]: entering postgres cmd_close Sep 04 19:14:57 mod_sql/4.3[5034]: connection 'default' count is now 1 Sep 04 19:14:57 mod_sql/4.3[5034]: exiting postgres cmd_close Sep 04 19:14:57 mod_sql/4.3[5034]: exiting postgres cmd_escapestring Sep 04 19:14:57 mod_sql/4.3[5034]: entering postgres cmd_select Sep 04 19:14:57 mod_sql/4.3[5034]: entering postgres cmd_open Sep 04 19:14:57 mod_sql/4.3[5034]: connection 'default' count is now 2 Sep 04 19:14:57 mod_sql/4.3[5034]: exiting postgres cmd_open Sep 04 19:14:57 mod_sql/4.3[5034]: query "SELECT email,password,'1001','1001','/home/galaxy/galaxy-supp/ftp/panzer_a@kids.wustl.edu','/bin/bash' FROM galaxy_user WHERE email='panzer_a@kids.wustl.edu'" Sep 04 19:14:57 mod_sql/4.3[5034]: entering postgres cmd_close Sep 04 19:14:57 mod_sql/4.3[5034]: connection 'default' count is now 1 Sep 04 19:14:57 mod_sql/4.3[5034]: exiting postgres cmd_close Sep 04 19:14:57 mod_sql/4.3[5034]: exiting postgres cmd_select Sep 04 19:14:57 mod_sql/4.3[5034]: <<< process_named_query 'LookupGalaxyUser' Sep 04 19:14:57 mod_sql/4.3[5034]: <<< sql_lookup Sep 04 19:14:57 mod_sql/4.3[5034]: cache miss for user 'panzer_a@kids.wustl.edu' Sep 04 19:14:57 mod_sql/4.3[5034]: user 'panzer_a@kids.wustl.edu' cached Sep 04 19:14:57 mod_sql/4.3[5034]: + pwd.pw_name : panzer_a@kids.wustl.edu Sep 04 19:14:57 mod_sql/4.3[5034]: + pwd.pw_uid : 1001 Sep 04 19:14:57 mod_sql/4.3[5034]: + pwd.pw_gid : 1001 Sep 04 19:14:57 mod_sql/4.3[5034]: + pwd.pw_dir : /home/galaxy/galaxy-supp/ftp/panzer_a@kids.wustl.edu Sep 04 19:14:57 mod_sql/4.3[5034]: + pwd.pw_shell : /bin/bash Sep 04 19:14:57 mod_sql/4.3[5034]: <<< cmd_getpwnam Sep 04 19:14:57 mod_sql/4.3[5034]: >>> cmd_auth Sep 04 19:14:57 mod_sql/4.3[5034]: entering postgres cmd_escapestring Sep 04 19:14:57 mod_sql/4.3[5034]: entering postgres cmd_open Sep 04 19:14:57 mod_sql/4.3[5034]: connection 'default' count is now 2 Sep 04 19:14:57 mod_sql/4.3[5034]: exiting postgres cmd_open Sep 04 19:14:57 mod_sql/4.3[5034]: entering postgres cmd_close Sep 04 19:14:57 mod_sql/4.3[5034]: connection 'default' count is now 1 Sep 04 19:14:57 mod_sql/4.3[5034]: exiting postgres cmd_close Sep 04 19:14:57 mod_sql/4.3[5034]: exiting postgres cmd_escapestring Sep 04 19:14:57 mod_sql/4.3[5034]: cache hit for user 'panzer_a@kids.wustl.edu' Sep 04 19:14:57 mod_sql/4.3[5034]: >>> cmd_check Sep 04 19:14:57 mod_sql/4.3[5034]: checking password using SQLAuthType 'sha1' Sep 04 19:14:57 mod_sql/4.3[5034]: 'sha1' SQLAuthType handler reports failure Sep 04 19:14:57 mod_sql/4.3[5034]: <<< cmd_check Sep 04 19:14:57 mod_sql/4.3[5034]: <<< cmd_auth Sep 04 19:14:57 mod_sql/4.3[5034]: entering postgres cmd_exit Sep 04 19:14:57 mod_sql/4.3[5034]: entering postgres cmd_close Sep 04 19:14:57 mod_sql/4.3[5034]: connection 'default' closed Sep 04 19:14:57 mod_sql/4.3[5034]: connection 'default' count is now 0 Sep 04 19:14:57 mod_sql/4.3[5034]: exiting postgres cmd_close Sep 04 19:14:57 mod_sql/4.3[5034]: exiting postgres cmd_exit
The materials in this email are private and may contain Protected Health Information. If you are not the intended recipient, be advised that any unauthorized use, disclosure, copying, distribution or the taking of any action in reliance on the contents of this information is strictly prohibited. If you have received this email in error, please immediately notify the sender via telephone or return email.
___________________________________________________________ Please keep all replies on the list by using "reply all" in your mail client. To manage your subscriptions to this and other Galaxy lists, please use the interface at: http://lists.bx.psu.edu/
To search Galaxy mailing lists use the unified search at: http://galaxyproject.org/search/mailinglists/
-- ============================================ Federico Zambelli, Ph.D. Bioinformatics, Evolution and Comparative Genomics Lab Dept. of Biosciences University of Milano - Italy What can be asserted without proof can be dismissed without proof. ============================================