Dear Plesk team,
I've tried to setup a ftps backup repository. It has always fails with an error: "Transport error: unable to list directory: Curl error: Access denied to remote resource" or in the logs:
The problem:
During the setup the plesk pmm-ras checks the repo WITHOUT SSL only ftp:// is used. Even if FTPS is checked.
All the following (scheduled) backup tasks are executed as expected WITH SSL (ftps://).
Conclusion:
In most cases this is not a problem, because FTP servers accept both ftp and ftps connection. But the password is not secured for the first time. In my case my server doesn't accept non SSL connections, so I've to disable this and enable after the initial setup of my backup repo. But my ftp password was one time transfered without ssl - thats bad.
Best regards, Benjamin
I've tried to setup a ftps backup repository. It has always fails with an error: "Transport error: unable to list directory: Curl error: Access denied to remote resource" or in the logs:
Code:
/opt/psa/admin/logs# cat migration.log
(...) Curl error: Login denied [./ftp.cpp:559]
The problem:
During the setup the plesk pmm-ras checks the repo WITHOUT SSL only ftp:// is used. Even if FTPS is checked.
Code:
/opt/psa/admin/logs# cat migration.log
/opt/psa/admin/bin/pmm-ras --check-repository --dump-storage=ftp://[email protected]/users/ --use-ftp-passive-mode
All the following (scheduled) backup tasks are executed as expected WITH SSL (ftps://).
Conclusion:
In most cases this is not a problem, because FTP servers accept both ftp and ftps connection. But the password is not secured for the first time. In my case my server doesn't accept non SSL connections, so I've to disable this and enable after the initial setup of my backup repo. But my ftp password was one time transfered without ssl - thats bad.
Best regards, Benjamin