FTP issue

[dEbo1]

Hi,
after some recents updates (currently running on: 12.0.18 Update #19) appeared a problem with connecting to FTP for passive mode users:

Connect ok!
"/" is the current directory
Get directory
227 Entering Passive Mode
550 Access is denied.

Server logs:
/var/log/messages
Oct 14 12:11:26 host xinetd[3692]: START: ftp pid=2709 from=::ffff:xxx.xxx.xxx.xxx
Oct 14 12:11:26 host proftpd[2709]: processing configuration directory '/etc/proftpd.d'
Oct 14 12:11:26 host proftpd[2709]: yyy.yyy.yyy.yyy (xxx.xxx.xxx.xxx[xxx.xxx.xxx.xxx]) - FTP session opened.

But:
/var/log/secure:

Oct 14 12:11:26 host proftpd: PAM unable to dlopen(/lib64/security/pam_stack.so): /lib64/security/pam_stack.so: cannot open shared object file: No such file or directory
Oct 14 12:11:26 host proftpd: PAM adding faulty module: /lib64/security/pam_stack.so
Oct 14 12:11:26 host proftpd: pam_listfile(proftpd:auth): Couldn't open /etc/ftpusers
Oct 14 12:11:26 host proftpd[2709]: yyy.yyy.yyy.yyy (xxx.xxx.xxx.xxx[xxx.xxx.xxx.xxx]) - USER client: Login successful.


ad1: yes, i do have passive ports configured in /etc/proftpd.conf and FW is properly configured
ad2: everything was fine until recent updates
ad3: this is happening only for passive users only
ad4: we are experiencing this issues across all Plesk instances [6x] on CentOS 6.5 with 12.0.18 Update #19

Thanks in advance!

 

[InderS]

Check selinux mode of your server. With the selinux you will get the same issues.

 

[dEbo1]

selinux is disabled, this is standard for all our plesk systems

 

[IgorG]

Check that string '/bin/false' is missing in the file '/etc/shells' and add it there.

 

[dEbo1]

It is not missing, its in /etc/shells

 

[IgorG]

Please post here output of command:

# getenforce

 

[dEbo1]

[root@pl ~]# getenforce
Disabled

selinux is disabled...