• If you are still using CentOS 7.9, it's time to convert to Alma 8 with the free centos2alma tool by Plesk or Plesk Migrator. Please let us know your experiences or concerns in this thread:
    CentOS2Alma discussion

Issue FTP not starting

serverok

New Pleskian
On Debian 9 plesk onyx server, FTP is not starting.

Code:
root@root861:~# netstat -lntp  | grep ":21"
root@root861:~#

I restarted xinetd

Code:
root@root861:~# service xinetd stop
root@root861:~# > /var/log/daemon.log
root@root861:~# service xinetd start
root@root861:~# cat /var/log/daemon.log
Dec  5 20:35:14 root861 systemd[1]: Starting LSB: Starts or stops the xinetd daemon....
Dec  5 20:35:14 root861 xinetd[2634]: Starting internet superserver: xinetd.
Dec  5 20:35:14 root861 systemd[1]: Started LSB: Starts or stops the xinetd daemon..
root@root861:~#

I have thie file /etc/xinetd.d/ftp_psa, it is same as in working plesk server. psa-proftpd package is installed.

Can anyone help ?
 
Hi,

1. Please try to start xinetd.
2. Then please paste here entries from /var/log/syslog

Please see the result below


Code:
root@root861:~# cat /etc/xinetd.d/ftp_psa

service ftp
{
        disable        = no
    socket_type     = stream
        protocol        = tcp
        wait            = no
        user            = root
        instances       = UNLIMITED
        server          = /usr/sbin/in.proftpd
        server_args     = -c /etc/proftpd.conf -S 0.0.0.0
}

root@root861:~# systemctl stop xinetd
root@root861:~# > /var/log/syslog
root@root861:~# systemctl start xinetd
root@root861:~# cat /var/log/syslog
Dec  5 20:56:56 root861 systemd[1]: Starting LSB: Starts or stops the xinetd daemon....
Dec  5 20:56:56 root861 xinetd[2892]: Starting internet superserver: xinetd.
Dec  5 20:56:56 root861 systemd[1]: Started LSB: Starts or stops the xinetd daemon..
root@root861:~# netstat -lntp | grep :21
root@root861:~#
 
Thanks for the reply. Here is the content of /etc/proftpd.conf

Code:
root@root861:~# cat  /etc/proftpd.conf
#
# To have more informations about Proftpd configuration
# look at : http://www.proftpd.org/
#

# This is a basic ProFTPD configuration file (rename it to
# 'proftpd.conf' for actual use.  It establishes a single server
# and a single anonymous login.  It assumes that you have a user/group
# "nobody" and "ftp" for normal operation and anon.

ServerName            "ProFTPD"
#ServerType            standalone
ServerType            inetd
DefaultServer            on

<Global>
DefaultRoot    ~        psacln
AllowOverwrite        on

# Prefer to put here directives allowed in server config and Global contexts.
# From http://www.proftpd.org/docs/howto/Vhost.html :
# "any configuration directives inside the "server config" section do not apply outside of the context."

DefaultTransferMode    binary
UseFtpUsers            on

TimesGMT            off
SetEnv TZ :/etc/localtime
# Umask 022 is a good standard umask to prevent new dirs and files
# from being group and world writable.
Umask                022

# Primary log file mest be outside of system logrotate province.
TransferLog /var/log/plesk/xferlog

# Enable PAM authentication
AuthPAM on
AuthPAMConfig proftpd
AuthGroupFile    /etc/group

IdentLookups off

<IfModule mod_tls.c>
    # common settings for all virtual hosts
    TLSEngine on
    TLSRequired off

    TLSLog /var/log/plesk/ftp_tls.log

    TLSRSACertificateFile /opt/psa/admin/conf/httpsd.pem
    TLSRSACertificateKeyFile /opt/psa/admin/conf/httpsd.pem

    # Authenticate clients that want to use FTP over TLS?
    TLSVerifyClient off

    # Allow SSL/TLS renegotiations when the client requests them, but
    # do not force the renegotations.  Some clients do not support
    # SSL/TLS renegotiations; when mod_tls forces a renegotiation, these
    # clients will close the data connection, or there will be a timeout
    # on an idle data connection.
    TLSRenegotiate none

    # As of ProFTPD 1.3.3rc1, mod_tls only accepts SSL/TLS data connections
    # that reuse the SSL session of the control connection, as a security measure.
    # Unfortunately, there are some clients (e.g. curl) which do not reuse SSL sessions.
    TLSOptions NoSessionReuseRequired
</IfModule>
</Global>

# Port 21 is the standard FTP port.
Port                21
# To prevent DoS attacks, set the maximum number of child processes
# to 30.  If you need to allow more than 30 concurrent connections
# at once, simply increase this value.  Note that this ONLY works
# in standalone mode, in inetd mode you should use an inetd server
# that allows you to limit maximum number of processes per service
# (such as xinetd)
MaxInstances            30

#Following part of this config file were generate by PSA automatically
#Any changes in this part will be overwritten by next manipulation
#with Anonymous FTP feature in PSA control panel.

#Include directive should point to place where FTP Virtual Hosts configurations
#preserved

ScoreboardFile /var/run/proftpd.scoreboard

#Change default group for new files and directories in vhosts dir to psacln

<Directory /var/www/vhosts>
    GroupOwner    psacln
</Directory>

UseReverseDNS off

Include /etc/proftpd.d/*.conf
root@root861:~#
 
Result of proftpd -nd10

root@root861:~# proftpd -nd10
2018-12-05 21:53:36,836 root861.premium-rootserver.net proftpd[7879]: using TCP receive buffer size of 87380 bytes
2018-12-05 21:53:36,836 root861.premium-rootserver.net proftpd[7879]: using TCP send buffer size of 16384 bytes
2018-12-05 21:53:36,836 root861.premium-rootserver.net proftpd[7879]: mod_tls/2.7: using OpenSSL 1.1.0f 25 May 2017
2018-12-05 21:53:36,840 root861.premium-rootserver.net proftpd[7879]: using 'UTF-8' as local charset for UTF-8 conversion
2018-12-05 21:53:36,840 root861.premium-rootserver.net proftpd[7879]: <IfModule>: using 'mod_tls.c' section at line 43
2018-12-05 21:53:36,840 root861.premium-rootserver.net proftpd[7879]: ROOT PRIVS at mod_tls.c:12806
2018-12-05 21:53:36,844 root861.premium-rootserver.net proftpd[7879]: RELINQUISH PRIVS at mod_tls.c:12808
2018-12-05 21:53:36,845 root861.premium-rootserver.net proftpd[7879]: ROOT PRIVS at mod_tls.c:12829
2018-12-05 21:53:36,845 root861.premium-rootserver.net proftpd[7879]: RELINQUISH PRIVS at mod_tls.c:12831
2018-12-05 21:53:36,845 root861.premium-rootserver.net proftpd[7879]: <Directory /var/www/vhosts>: adding section for resolved path '/var/www/vhosts'
2018-12-05 21:53:36,845 root861.premium-rootserver.net proftpd[7879]: ROOT PRIVS at mod_core.c:376
2018-12-05 21:53:36,845 root861.premium-rootserver.net proftpd[7879]: RELINQUISH PRIVS at mod_core.c:378
2018-12-05 21:53:36,845 root861.premium-rootserver.net proftpd[7879]: ROOT PRIVS at mod_core.c:385
2018-12-05 21:53:36,845 root861.premium-rootserver.net proftpd[7879]: processing configuration directory '/etc/proftpd.d'
2018-12-05 21:53:36,845 root861.premium-rootserver.net proftpd[7879]: ROOT PRIVS at parser.c:1328
2018-12-05 21:53:36,845 root861.premium-rootserver.net proftpd[7879]: <IfModule>: using 'mod_tls.c' section at line 8
2018-12-05 21:53:36,845 root861.premium-rootserver.net proftpd[7879]: RELINQUISH PRIVS at parser.c:1331
2018-12-05 21:53:36,845 root861.premium-rootserver.net proftpd[7879]: ROOT PRIVS at parser.c:1328
2018-12-05 21:53:36,845 root861.premium-rootserver.net proftpd[7879]: RELINQUISH PRIVS at parser.c:1331
2018-12-05 21:53:36,845 root861.premium-rootserver.net proftpd[7879]: ROOT PRIVS at parser.c:1328
2018-12-05 21:53:36,845 root861.premium-rootserver.net proftpd[7879]: <IfModule>: using 'mod_tls.c' section at line 2
2018-12-05 21:53:36,845 root861.premium-rootserver.net proftpd[7879]: RELINQUISH PRIVS at parser.c:1331
2018-12-05 21:53:36,845 root861.premium-rootserver.net proftpd[7879]: RELINQUISH PRIVS at mod_core.c:388
2018-12-05 21:53:36,910 root861.premium-rootserver.net proftpd[7879]: UseReverseDNS off, returning IP address instead of DNS name
2018-12-05 21:53:36,910 root861.premium-rootserver.net proftpd[7879] 82.211.1.79:
2018-12-05 21:53:36,910 root861.premium-rootserver.net proftpd[7879] 82.211.1.79: Config for ProFTPD:
2018-12-05 21:53:36,910 root861.premium-rootserver.net proftpd[7879] 82.211.1.79: /var/www/vhosts
2018-12-05 21:53:36,910 root861.premium-rootserver.net proftpd[7879] 82.211.1.79: GroupOwner
2018-12-05 21:53:36,910 root861.premium-rootserver.net proftpd[7879] 82.211.1.79: TLSRequired
2018-12-05 21:53:36,910 root861.premium-rootserver.net proftpd[7879] 82.211.1.79: AllowOverwrite
2018-12-05 21:53:36,910 root861.premium-rootserver.net proftpd[7879] 82.211.1.79: UseFtpUsers
2018-12-05 21:53:36,910 root861.premium-rootserver.net proftpd[7879] 82.211.1.79: TimesGMT
2018-12-05 21:53:36,910 root861.premium-rootserver.net proftpd[7879] 82.211.1.79: Umask
2018-12-05 21:53:36,910 root861.premium-rootserver.net proftpd[7879] 82.211.1.79: TransferLog
2018-12-05 21:53:36,910 root861.premium-rootserver.net proftpd[7879] 82.211.1.79: DefaultServer
2018-12-05 21:53:36,910 root861.premium-rootserver.net proftpd[7879] 82.211.1.79: TLSProtocol
2018-12-05 21:53:36,910 root861.premium-rootserver.net proftpd[7879] 82.211.1.79: TLSCipherSuite
2018-12-05 21:53:36,910 root861.premium-rootserver.net proftpd[7879] 82.211.1.79: PassivePorts
2018-12-05 21:53:36,910 root861.premium-rootserver.net proftpd[7879] 82.211.1.79: TLSEngine
2018-12-05 21:53:36,910 root861.premium-rootserver.net proftpd[7879] 82.211.1.79: TLSRequired
2018-12-05 21:53:36,910 root861.premium-rootserver.net proftpd[7879] 82.211.1.79: DefaultRoot
2018-12-05 21:53:36,910 root861.premium-rootserver.net proftpd[7879] 82.211.1.79: AllowOverwrite
2018-12-05 21:53:36,910 root861.premium-rootserver.net proftpd[7879] 82.211.1.79: DefaultTransferMode
2018-12-05 21:53:36,910 root861.premium-rootserver.net proftpd[7879] 82.211.1.79: UseFtpUsers
2018-12-05 21:53:36,910 root861.premium-rootserver.net proftpd[7879] 82.211.1.79: TimesGMT
2018-12-05 21:53:36,910 root861.premium-rootserver.net proftpd[7879] 82.211.1.79: SetEnv
2018-12-05 21:53:36,910 root861.premium-rootserver.net proftpd[7879] 82.211.1.79: Umask
2018-12-05 21:53:36,910 root861.premium-rootserver.net proftpd[7879] 82.211.1.79: TransferLog
2018-12-05 21:53:36,910 root861.premium-rootserver.net proftpd[7879] 82.211.1.79: AuthPAM
2018-12-05 21:53:36,910 root861.premium-rootserver.net proftpd[7879] 82.211.1.79: AuthPAMConfig
2018-12-05 21:53:36,910 root861.premium-rootserver.net proftpd[7879] 82.211.1.79: AuthGroupFile
2018-12-05 21:53:36,910 root861.premium-rootserver.net proftpd[7879] 82.211.1.79: IdentLookups
2018-12-05 21:53:36,910 root861.premium-rootserver.net proftpd[7879] 82.211.1.79: TLSEngine
2018-12-05 21:53:36,910 root861.premium-rootserver.net proftpd[7879] 82.211.1.79: TLSRequired
2018-12-05 21:53:36,910 root861.premium-rootserver.net proftpd[7879] 82.211.1.79: TLSLog
2018-12-05 21:53:36,910 root861.premium-rootserver.net proftpd[7879] 82.211.1.79: TLSRSACertificateFile
2018-12-05 21:53:36,910 root861.premium-rootserver.net proftpd[7879] 82.211.1.79: TLSRSACertificateKeyFile
2018-12-05 21:53:36,910 root861.premium-rootserver.net proftpd[7879] 82.211.1.79: TLSVerifyClient
2018-12-05 21:53:36,910 root861.premium-rootserver.net proftpd[7879] 82.211.1.79: TLSRenegotiate
2018-12-05 21:53:36,910 root861.premium-rootserver.net proftpd[7879] 82.211.1.79: TLSOptions
2018-12-05 21:53:36,910 root861.premium-rootserver.net proftpd[7879] 82.211.1.79: mod_lang/1.1: unable to bind to text domain 'proftpd', lacking libintl support
2018-12-05 21:53:36,911 root861.premium-rootserver.net proftpd[7879] 82.211.1.79: mod_tls/2.7: generating initial TLS session ticket key
2018-12-05 21:53:36,911 root861.premium-rootserver.net proftpd[7879] 82.211.1.79: ROOT PRIVS at mod_tls.c:4815
2018-12-05 21:53:36,911 root861.premium-rootserver.net proftpd[7879] 82.211.1.79: RELINQUISH PRIVS at mod_tls.c:4818
2018-12-05 21:53:36,911 root861.premium-rootserver.net proftpd[7879] 82.211.1.79: mod_tls/2.7: scheduling new TLS session ticket key every 3600 secs
2018-12-05 21:53:36,911 root861.premium-rootserver.net proftpd[7879] 82.211.1.79: ROOT PRIVS at mod_tls.c:3002
2018-12-05 21:53:36,911 root861.premium-rootserver.net proftpd[7879] 82.211.1.79: RELINQUISH PRIVS at mod_tls.c:3005
2018-12-05 21:53:36,913 root861.premium-rootserver.net proftpd[7879] 82.211.1.79: ROOT PRIVS at mod_rlimit.c:555
2018-12-05 21:53:36,913 root861.premium-rootserver.net proftpd[7879] 82.211.1.79: RELINQUISH PRIVS at mod_rlimit.c:558
2018-12-05 21:53:36,913 root861.premium-rootserver.net proftpd[7879] 82.211.1.79: set core resource limits for daemon
2018-12-05 21:53:36,913 root861.premium-rootserver.net proftpd[7879] 82.211.1.79: SETUP PRIVS at main.c:2583
2018-12-05 21:53:36,913 root861.premium-rootserver.net proftpd[7879] 82.211.1.79: ROOT PRIVS at main.c:1786
2018-12-05 21:53:36,913 root861.premium-rootserver.net proftpd[7879] 82.211.1.79: opening scoreboard '/var/run/proftpd.scoreboard'
2018-12-05 21:53:36,913 root861.premium-rootserver.net proftpd[7879] 82.211.1.79: RELINQUISH PRIVS at main.c:1820
2018-12-05 21:53:36,913 root861.premium-rootserver.net proftpd[7879] 82.211.1.79: fatal: unable to get connection info: Socket operation on non-socket
2018-12-05 21:53:36,913 root861.premium-rootserver.net proftpd[7879] 82.211.1.79: (Running from command line? Use `ServerType standalone' in config file!)
root@root861:~#
 
If i manually start xinetd, then FTP works

Code:
 /usr/sbin/xinetd -d -dontfork

When i run xinetd with

Code:
systemctl start xinetd

Then FTP service won't start. Nothing listens on port 21.

Any idea why this is happening ?
 
Hello,

All the configuration looks default, no error messages in logs. Thus, it is hard to say what is causing the problem. I recommend submitting a ticket to support.
 
@serverok,

Please run the command

proftpd -td10

instead, in order to do a configuration check: the command proftpd -nd10 does not make sense, since you are running in inetd/xinetd mode (also see the error on the last line of the output you provided when running with the -nd flags).

I am pretty sure that this an inetd/xinetd related issues, so it might sufficient to do a quick reboot from the command line to get proftpd up and running.

Just let us know!

Regards......
 
Thanks for the reply, here is the result of proftpd -td10 command


Code:
root@root861:~# proftpd -td10
Checking syntax of configuration file
2018-12-07 04:54:08,725 root861.premium-rootserver.net proftpd[9205]: using TCP receive buffer size of 87380 bytes
2018-12-07 04:54:08,725 root861.premium-rootserver.net proftpd[9205]: using TCP send buffer size of 16384 bytes
2018-12-07 04:54:08,738 root861.premium-rootserver.net proftpd[9205]: mod_tls/2.7: using OpenSSL 1.1.0f  25 May 2017
2018-12-07 04:54:08,741 root861.premium-rootserver.net proftpd[9205]: using 'UTF-8' as local charset for UTF-8 conversion
2018-12-07 04:54:08,755 root861.premium-rootserver.net proftpd[9205]: <IfModule>: using 'mod_tls.c' section at line 19
2018-12-07 04:54:08,755 root861.premium-rootserver.net proftpd[9205]: ROOT PRIVS at mod_tls.c:12806
2018-12-07 04:54:08,759 root861.premium-rootserver.net proftpd[9205]: RELINQUISH PRIVS at mod_tls.c:12808
2018-12-07 04:54:08,759 root861.premium-rootserver.net proftpd[9205]: ROOT PRIVS at mod_tls.c:12829
2018-12-07 04:54:08,759 root861.premium-rootserver.net proftpd[9205]: RELINQUISH PRIVS at mod_tls.c:12831
2018-12-07 04:54:08,759 root861.premium-rootserver.net proftpd[9205]: <Directory /var/www/vhosts>: adding section for resolved path '/var/www/vhosts'
2018-12-07 04:54:08,759 root861.premium-rootserver.net proftpd[9205]: ROOT PRIVS at mod_core.c:376
2018-12-07 04:54:08,759 root861.premium-rootserver.net proftpd[9205]: RELINQUISH PRIVS at mod_core.c:378
2018-12-07 04:54:08,759 root861.premium-rootserver.net proftpd[9205]: ROOT PRIVS at mod_core.c:385
2018-12-07 04:54:08,759 root861.premium-rootserver.net proftpd[9205]: processing configuration directory '/etc/proftpd.d'
2018-12-07 04:54:08,759 root861.premium-rootserver.net proftpd[9205]: ROOT PRIVS at parser.c:1328
2018-12-07 04:54:08,766 root861.premium-rootserver.net proftpd[9205]: <IfModule>: using 'mod_tls.c' section at line 8
2018-12-07 04:54:08,766 root861.premium-rootserver.net proftpd[9205]: RELINQUISH PRIVS at parser.c:1331
2018-12-07 04:54:08,766 root861.premium-rootserver.net proftpd[9205]: ROOT PRIVS at parser.c:1328
2018-12-07 04:54:08,778 root861.premium-rootserver.net proftpd[9205]: RELINQUISH PRIVS at parser.c:1331
2018-12-07 04:54:08,778 root861.premium-rootserver.net proftpd[9205]: ROOT PRIVS at parser.c:1328
2018-12-07 04:54:08,788 root861.premium-rootserver.net proftpd[9205]: <IfModule>: using 'mod_tls.c' section at line 2
2018-12-07 04:54:08,788 root861.premium-rootserver.net proftpd[9205]: RELINQUISH PRIVS at parser.c:1331
2018-12-07 04:54:08,788 root861.premium-rootserver.net proftpd[9205]: RELINQUISH PRIVS at mod_core.c:388
2018-12-07 04:54:08,853 root861.premium-rootserver.net proftpd[9205]: UseReverseDNS off, returning IP address instead of DNS name
2018-12-07 04:54:08,853 root861.premium-rootserver.net proftpd[9205] 82.211.1.79:
2018-12-07 04:54:08,853 root861.premium-rootserver.net proftpd[9205] 82.211.1.79: Config for ProFTPD:
2018-12-07 04:54:08,853 root861.premium-rootserver.net proftpd[9205] 82.211.1.79: /var/www/vhosts
2018-12-07 04:54:08,853 root861.premium-rootserver.net proftpd[9205] 82.211.1.79:  GroupOwner
2018-12-07 04:54:08,853 root861.premium-rootserver.net proftpd[9205] 82.211.1.79:  UseFtpUsers
2018-12-07 04:54:08,853 root861.premium-rootserver.net proftpd[9205] 82.211.1.79:  TimesGMT
2018-12-07 04:54:08,853 root861.premium-rootserver.net proftpd[9205] 82.211.1.79:  Umask
2018-12-07 04:54:08,853 root861.premium-rootserver.net proftpd[9205] 82.211.1.79:  TransferLog
2018-12-07 04:54:08,853 root861.premium-rootserver.net proftpd[9205] 82.211.1.79:  TLSRequired
2018-12-07 04:54:08,853 root861.premium-rootserver.net proftpd[9205] 82.211.1.79:  AllowOverwrite
2018-12-07 04:54:08,853 root861.premium-rootserver.net proftpd[9205] 82.211.1.79: DefaultServer
2018-12-07 04:54:08,853 root861.premium-rootserver.net proftpd[9205] 82.211.1.79: DefaultTransferMode
2018-12-07 04:54:08,853 root861.premium-rootserver.net proftpd[9205] 82.211.1.79: UseFtpUsers
2018-12-07 04:54:08,853 root861.premium-rootserver.net proftpd[9205] 82.211.1.79: TimesGMT
2018-12-07 04:54:08,853 root861.premium-rootserver.net proftpd[9205] 82.211.1.79: SetEnv
2018-12-07 04:54:08,853 root861.premium-rootserver.net proftpd[9205] 82.211.1.79: Umask
2018-12-07 04:54:08,853 root861.premium-rootserver.net proftpd[9205] 82.211.1.79: TransferLog
2018-12-07 04:54:08,853 root861.premium-rootserver.net proftpd[9205] 82.211.1.79: AuthPAM
2018-12-07 04:54:08,853 root861.premium-rootserver.net proftpd[9205] 82.211.1.79: AuthPAMConfig
2018-12-07 04:54:08,853 root861.premium-rootserver.net proftpd[9205] 82.211.1.79: IdentLookups
2018-12-07 04:54:08,853 root861.premium-rootserver.net proftpd[9205] 82.211.1.79: AuthGroupFile
2018-12-07 04:54:08,854 root861.premium-rootserver.net proftpd[9205] 82.211.1.79: TLSProtocol
2018-12-07 04:54:08,854 root861.premium-rootserver.net proftpd[9205] 82.211.1.79: TLSCipherSuite
2018-12-07 04:54:08,854 root861.premium-rootserver.net proftpd[9205] 82.211.1.79: PassivePorts
2018-12-07 04:54:08,854 root861.premium-rootserver.net proftpd[9205] 82.211.1.79: TLSEngine
2018-12-07 04:54:08,854 root861.premium-rootserver.net proftpd[9205] 82.211.1.79: TLSRequired
2018-12-07 04:54:08,854 root861.premium-rootserver.net proftpd[9205] 82.211.1.79: DefaultRoot
2018-12-07 04:54:08,854 root861.premium-rootserver.net proftpd[9205] 82.211.1.79: AllowOverwrite
2018-12-07 04:54:08,854 root861.premium-rootserver.net proftpd[9205] 82.211.1.79: TLSEngine
2018-12-07 04:54:08,854 root861.premium-rootserver.net proftpd[9205] 82.211.1.79: TLSRequired
2018-12-07 04:54:08,854 root861.premium-rootserver.net proftpd[9205] 82.211.1.79: TLSLog
2018-12-07 04:54:08,854 root861.premium-rootserver.net proftpd[9205] 82.211.1.79: TLSRSACertificateFile
2018-12-07 04:54:08,854 root861.premium-rootserver.net proftpd[9205] 82.211.1.79: TLSRSACertificateKeyFile
2018-12-07 04:54:08,854 root861.premium-rootserver.net proftpd[9205] 82.211.1.79: TLSVerifyClient
2018-12-07 04:54:08,854 root861.premium-rootserver.net proftpd[9205] 82.211.1.79: TLSRenegotiate
2018-12-07 04:54:08,854 root861.premium-rootserver.net proftpd[9205] 82.211.1.79: TLSOptions
2018-12-07 04:54:08,854 root861.premium-rootserver.net proftpd[9205] 82.211.1.79: mod_lang/1.1: unable to bind to text domain 'proftpd', lacking libintl support
2018-12-07 04:54:08,854 root861.premium-rootserver.net proftpd[9205] 82.211.1.79: mod_tls/2.7: generating initial TLS session ticket key
2018-12-07 04:54:08,854 root861.premium-rootserver.net proftpd[9205] 82.211.1.79: ROOT PRIVS at mod_tls.c:4815
2018-12-07 04:54:08,854 root861.premium-rootserver.net proftpd[9205] 82.211.1.79: RELINQUISH PRIVS at mod_tls.c:4818
2018-12-07 04:54:08,854 root861.premium-rootserver.net proftpd[9205] 82.211.1.79: mod_tls/2.7: scheduling new TLS session ticket key every 3600 secs
2018-12-07 04:54:08,854 root861.premium-rootserver.net proftpd[9205] 82.211.1.79: ROOT PRIVS at mod_tls.c:3002
2018-12-07 04:54:08,854 root861.premium-rootserver.net proftpd[9205] 82.211.1.79: RELINQUISH PRIVS at mod_tls.c:3005
2018-12-07 04:54:08,856 root861.premium-rootserver.net proftpd[9205] 82.211.1.79: ROOT PRIVS at mod_rlimit.c:555
2018-12-07 04:54:08,856 root861.premium-rootserver.net proftpd[9205] 82.211.1.79: RELINQUISH PRIVS at mod_rlimit.c:558
2018-12-07 04:54:08,856 root861.premium-rootserver.net proftpd[9205] 82.211.1.79: set core resource limits for daemon
Syntax check complete.
root@root861:~#
 
@serverok

Can you please "explain" the line

mod_tls/2.7: using OpenSSL 1.1.0f 25 May 2017

since it should be version 1.0.2g by default (if I am not mistaken), did you do some customization?

Regards
 
If i manually start xinetd, then FTP works

Code:
 /usr/sbin/xinetd -d -dontfork

When i run xinetd with

Code:
systemctl start xinetd

Then FTP service won't start. Nothing listens on port 21.

Any idea why this is happening ?

There are two installation modes of the FTP server, one of which is "standalone", the other "inetd". When installed as "standalone" the FTP service is not started automatically unless you configure it manually in the system startup routines. Are you sure that it is all set to "inetd"? See ProFTPD: ServerType for details. Especially check the section "switching modes" and make sure that all mentioned there was done.
 
@serverok

Can you please "explain" the line

mod_tls/2.7: using OpenSSL 1.1.0f 25 May 2017

since it should be version 1.0.2g by default (if I am not mistaken), did you do some customization?

This is default install of plesk. Here is the packages installed

Code:
root@root861:/etc# dpkg -l | grep ssl
ii  libio-socket-ssl-perl              2.044-1                              all          Perl module implementing object oriented interface to SSL sockets
ii  libnet-smtp-ssl-perl               1.04-1                               all          Perl module providing SSL support to Net::SMTP
ii  libnet-ssleay-perl                 1.80-1                               amd64        Perl module for Secure Sockets Layer (SSL)
ii  libssl1.0.2:amd64                  1.0.2l-2+deb9u3                      amd64        Secure Sockets Layer toolkit - shared libraries
ii  libssl1.1:amd64                    1.1.0j-1~deb9u1                      amd64        Secure Sockets Layer toolkit - shared libraries
ii  openssl                            1.1.0j-1~deb9u1                      amd64        Secure Sockets Layer toolkit - cryptographic utility
ii  perl-openssl-defaults:amd64        3                                    amd64        version compatibility baseline for Perl OpenSSL packages
ii  ssl-cert                           1.0.39                               all          simple debconf wrapper for OpenSSL
root@root861:/etc#

There are two installation modes of the FTP server, one of which is "standalone", the other "inetd". When installed as "standalone" the FTP service is not started automatically unless you configure it manually in the system startup routines. Are you sure that it is all set to "inetd"? See ProFTPD: ServerType for details. Especially check the section "switching modes" and make sure that all mentioned there was done.

This is fresh Plesk install. We don't make any changes to any config files, it is using the Plesk default ServerType "inetd".
 
I installed Plesk on another Debian 9 Server. On this server FTP works fine. I compared config. they are same.

Result of "proftpd -td10" is same as other plesk server where FTP is not working.

This is from test server running Debian 9 where FTP works fine

Code:
root@ip-172-31-25-178:~# proftpd -td10
Checking syntax of configuration file
2018-12-08 08:46:25,164 ip-172-31-25-178 proftpd[25592]: using TCP receive buffer size of 87380 bytes
2018-12-08 08:46:25,164 ip-172-31-25-178 proftpd[25592]: using TCP send buffer size of 16384 bytes
2018-12-08 08:46:25,164 ip-172-31-25-178 proftpd[25592]: mod_tls/2.7: using OpenSSL 1.1.0f  25 May 2017
2018-12-08 08:46:25,166 ip-172-31-25-178 proftpd[25592]: using 'UTF-8' as local charset for UTF-8 conversion
2018-12-08 08:46:25,167 ip-172-31-25-178 proftpd[25592]: <IfModule>: using 'mod_tls.c' section at line 43
2018-12-08 08:46:25,167 ip-172-31-25-178 proftpd[25592]: ROOT PRIVS at mod_tls.c:12806
2018-12-08 08:46:25,168 ip-172-31-25-178 proftpd[25592]: RELINQUISH PRIVS at mod_tls.c:12808
2018-12-08 08:46:25,168 ip-172-31-25-178 proftpd[25592]: ROOT PRIVS at mod_tls.c:12829
2018-12-08 08:46:25,168 ip-172-31-25-178 proftpd[25592]: RELINQUISH PRIVS at mod_tls.c:12831
2018-12-08 08:46:25,168 ip-172-31-25-178 proftpd[25592]: <Directory /var/www/vhosts>: adding section for resolved path '/var/www/vhosts'
2018-12-08 08:46:25,168 ip-172-31-25-178 proftpd[25592]: ROOT PRIVS at mod_core.c:376
2018-12-08 08:46:25,168 ip-172-31-25-178 proftpd[25592]: RELINQUISH PRIVS at mod_core.c:378
2018-12-08 08:46:25,169 ip-172-31-25-178 proftpd[25592]: ROOT PRIVS at mod_core.c:385
2018-12-08 08:46:25,169 ip-172-31-25-178 proftpd[25592]: processing configuration directory '/etc/proftpd.d'
2018-12-08 08:46:25,169 ip-172-31-25-178 proftpd[25592]: ROOT PRIVS at parser.c:1328
2018-12-08 08:46:25,169 ip-172-31-25-178 proftpd[25592]: <IfModule>: using 'mod_tls.c' section at line 8
2018-12-08 08:46:25,169 ip-172-31-25-178 proftpd[25592]: RELINQUISH PRIVS at parser.c:1331
2018-12-08 08:46:25,169 ip-172-31-25-178 proftpd[25592]: ROOT PRIVS at parser.c:1328
2018-12-08 08:46:25,169 ip-172-31-25-178 proftpd[25592]: RELINQUISH PRIVS at parser.c:1331
2018-12-08 08:46:25,169 ip-172-31-25-178 proftpd[25592]: ROOT PRIVS at parser.c:1328
2018-12-08 08:46:25,169 ip-172-31-25-178 proftpd[25592]: <IfModule>: using 'mod_tls.c' section at line 2
2018-12-08 08:46:25,169 ip-172-31-25-178 proftpd[25592]: RELINQUISH PRIVS at parser.c:1331
2018-12-08 08:46:25,169 ip-172-31-25-178 proftpd[25592]: RELINQUISH PRIVS at mod_core.c:388
2018-12-08 08:46:25,183 ip-172-31-25-178 proftpd[25592]: UseReverseDNS off, returning IP address instead of DNS name
2018-12-08 08:46:25,183 ip-172-31-25-178 proftpd[25592] 127.0.1.1:
2018-12-08 08:46:25,183 ip-172-31-25-178 proftpd[25592] 127.0.1.1: Config for ProFTPD:
2018-12-08 08:46:25,183 ip-172-31-25-178 proftpd[25592] 127.0.1.1: /var/www/vhosts
2018-12-08 08:46:25,183 ip-172-31-25-178 proftpd[25592] 127.0.1.1:  GroupOwner
2018-12-08 08:46:25,183 ip-172-31-25-178 proftpd[25592] 127.0.1.1:  TLSRequired
2018-12-08 08:46:25,183 ip-172-31-25-178 proftpd[25592] 127.0.1.1:  AllowOverwrite
2018-12-08 08:46:25,183 ip-172-31-25-178 proftpd[25592] 127.0.1.1:  UseFtpUsers
2018-12-08 08:46:25,183 ip-172-31-25-178 proftpd[25592] 127.0.1.1:  TimesGMT
2018-12-08 08:46:25,183 ip-172-31-25-178 proftpd[25592] 127.0.1.1:  Umask
2018-12-08 08:46:25,183 ip-172-31-25-178 proftpd[25592] 127.0.1.1:  TransferLog
2018-12-08 08:46:25,183 ip-172-31-25-178 proftpd[25592] 127.0.1.1: DefaultServer
2018-12-08 08:46:25,183 ip-172-31-25-178 proftpd[25592] 127.0.1.1: TLSProtocol
2018-12-08 08:46:25,183 ip-172-31-25-178 proftpd[25592] 127.0.1.1: TLSCipherSuite
2018-12-08 08:46:25,183 ip-172-31-25-178 proftpd[25592] 127.0.1.1: PassivePorts
2018-12-08 08:46:25,183 ip-172-31-25-178 proftpd[25592] 127.0.1.1: TLSEngine
2018-12-08 08:46:25,183 ip-172-31-25-178 proftpd[25592] 127.0.1.1: TLSRequired
2018-12-08 08:46:25,183 ip-172-31-25-178 proftpd[25592] 127.0.1.1: DefaultRoot
2018-12-08 08:46:25,183 ip-172-31-25-178 proftpd[25592] 127.0.1.1: AllowOverwrite
2018-12-08 08:46:25,184 ip-172-31-25-178 proftpd[25592] 127.0.1.1: DefaultTransferMode
2018-12-08 08:46:25,184 ip-172-31-25-178 proftpd[25592] 127.0.1.1: UseFtpUsers
2018-12-08 08:46:25,184 ip-172-31-25-178 proftpd[25592] 127.0.1.1: TimesGMT
2018-12-08 08:46:25,184 ip-172-31-25-178 proftpd[25592] 127.0.1.1: SetEnv
2018-12-08 08:46:25,184 ip-172-31-25-178 proftpd[25592] 127.0.1.1: Umask
2018-12-08 08:46:25,184 ip-172-31-25-178 proftpd[25592] 127.0.1.1: TransferLog
2018-12-08 08:46:25,184 ip-172-31-25-178 proftpd[25592] 127.0.1.1: AuthPAM
2018-12-08 08:46:25,184 ip-172-31-25-178 proftpd[25592] 127.0.1.1: AuthPAMConfig
2018-12-08 08:46:25,184 ip-172-31-25-178 proftpd[25592] 127.0.1.1: AuthGroupFile
2018-12-08 08:46:25,184 ip-172-31-25-178 proftpd[25592] 127.0.1.1: IdentLookups
2018-12-08 08:46:25,184 ip-172-31-25-178 proftpd[25592] 127.0.1.1: TLSEngine
2018-12-08 08:46:25,184 ip-172-31-25-178 proftpd[25592] 127.0.1.1: TLSRequired
2018-12-08 08:46:25,184 ip-172-31-25-178 proftpd[25592] 127.0.1.1: TLSLog
2018-12-08 08:46:25,184 ip-172-31-25-178 proftpd[25592] 127.0.1.1: TLSRSACertificateFile
2018-12-08 08:46:25,184 ip-172-31-25-178 proftpd[25592] 127.0.1.1: TLSRSACertificateKeyFile
2018-12-08 08:46:25,184 ip-172-31-25-178 proftpd[25592] 127.0.1.1: TLSVerifyClient
2018-12-08 08:46:25,184 ip-172-31-25-178 proftpd[25592] 127.0.1.1: TLSRenegotiate
2018-12-08 08:46:25,184 ip-172-31-25-178 proftpd[25592] 127.0.1.1: TLSOptions
2018-12-08 08:46:25,184 ip-172-31-25-178 proftpd[25592] 127.0.1.1: mod_lang/1.1: unable to bind to text domain 'proftpd', lacking libintl support
2018-12-08 08:46:25,184 ip-172-31-25-178 proftpd[25592] 127.0.1.1: mod_tls/2.7: generating initial TLS session ticket key
2018-12-08 08:46:25,184 ip-172-31-25-178 proftpd[25592] 127.0.1.1: ROOT PRIVS at mod_tls.c:4815
2018-12-08 08:46:25,185 ip-172-31-25-178 proftpd[25592] 127.0.1.1: RELINQUISH PRIVS at mod_tls.c:4818
2018-12-08 08:46:25,185 ip-172-31-25-178 proftpd[25592] 127.0.1.1: mod_tls/2.7: scheduling new TLS session ticket key every 3600 secs
2018-12-08 08:46:25,185 ip-172-31-25-178 proftpd[25592] 127.0.1.1: ROOT PRIVS at mod_tls.c:3002
2018-12-08 08:46:25,185 ip-172-31-25-178 proftpd[25592] 127.0.1.1: RELINQUISH PRIVS at mod_tls.c:3005
2018-12-08 08:46:25,185 ip-172-31-25-178 proftpd[25592] 127.0.1.1: ROOT PRIVS at mod_rlimit.c:555
2018-12-08 08:46:25,186 ip-172-31-25-178 proftpd[25592] 127.0.1.1: RELINQUISH PRIVS at mod_rlimit.c:558
2018-12-08 08:46:25,186 ip-172-31-25-178 proftpd[25592] 127.0.1.1: set core resource limits for daemon
Syntax check complete.
root@ip-172-31-25-178:~#
 
@serverok

If you compare the packages installed on the old and new Debian server and there is no difference in the list of packages, then I am at a loss: the most likely explanation for the odd behavior on the old server would then be some erroneous package installation, in the sense that something went horribly wrong at installation time.

The odd behavior on the (old) server can be related to permission issues, wrongly configured inetd/xinetd config and many other potential culprits can be thought of.

In my humble opinion, it would be recommended to consider to move the trouble-free new server, since the current issues are likely to persist in the future and/or are likely to be affecting normal operations in the future.

However, sometimes simple solutions like "apt-get update && apt-get upgrade" or a "shutdown-wait-a-sec-startup" or a "remove proftpd and re-install" or a "dpkg-reconfigure" (note: watch out with this command) can solve the problem......... note that these solutions are mentioned in chronological order: start with the first step and move to the next.

Hope the above helps a bit..........and keep us informed!

Kind regards.......
 
Reinstalled the Server with Debian 8 and latest Plesk stable (Plesk Onyx 17.8.11 Update #33). Exactly same issue on this server.

If i start xinetd manually, then FTP work. Maybe it is something to do with xinetd and systemctl

I don't know if it is something to do with server hardware as we are on completely differnt version of Debain now (before it was Debian 9), but the CPU is Xeon E3-1230,
 
Back
Top