Proftpd will einfach nicht...!!

[pinguin007]

Hallo,

ich bin ganz schön am verzweifeln.. Habe schon in vilen Foren nachgefragt.. doch leider kamm dabei nichts rum...
Hier erstmal meine config:

Code:

# This is a basic ProFTPD configuration file. It establishes a single
# server and a single anonymous login. It assumes that you have a
# user/group "nobody"/"nogroup" for normal operation and anon.

#    !!! PLEASE read the documentation of proftpd !!!
#
# You can find the documentation in /usr/doc/packages/proftpd/,
# http://www.proftpd.org/ and don't forget to read carefully
# and _follow_ hints on http://www.proftpd.net/security.html.

ServerName                      "pinguin"
#ServerType                     inetd
ServerType                      standalone
ServerAdmin                     alfons@gmx.de
#
# uncomment, if you want to hide the servers name:
#
ServerIdent                     on      "FTP Server ready"
DeferWelcome                    on
DefaultServer                   on

# Enable PAM for authentication...
#
AuthPAM                         on

# Setting this directive to on will cause authentication to fail
# if PAM authentication fails. The default setting, off, allows
# other modules and directives such as AuthUserFile and friends
# to authenticate users.
#
AuthPAMAuthoritative            on

# This directive allows you to specify the PAM service name used
# in authentication (default is "proftpd" on SuSE Linux).
# You have to setup the service in the /etc/pam.d/<other_name>.
#
AuthPAMConfig                   proftpd

# Port 21 is the standard FTP port.
Port                            21

# Umask 022 is a good standard umask to prevent new dirs
# and files from being group and world writable.
Umask                           022

# Set the user and group that the server normally runs at.
User                            nobody
Group                           nogroup

# Normally, we want files to be overwriteable.
<Directory /public>
  AllowOverwrite                off
  HiddenStor                    on
  HideNoAccess                  on
#  DenyAll
</Directory>

# protect .ftpaccess and similar - see also PathDenyFilter
<Directory /*>
  <Limit ALL>
    DenyAll
    IgnoreHidden                on
 </Limit>
</Directory>

# To prevent DoS attacks, set the maximum number of child processes
# to 30.  If you need to allow more than 30 concurrent connections
# at once, simply increase this value.  Note that this ONLY works
# in standalone mode, in inetd mode you should use an inetd server
# that allows you to limit maximum number of processes per service
# (such as xinetd)
MaxInstances                   30

# Performance: skip DNS resolution when we process the logs...
#UseReverseDNS        off

# Turn off Ident lookups
IdentLookups         off

# Set the maximum number of seconds a data connection is allowed
# to "stall" before being aborted.
TimeoutStalled                  300

# Where do we put the pid files?
ScoreboardPath       /var/run/proftpd



# Do a chroot for web-users (i.e. public or www group), but
# do not change root if the user is also in the users group...
#
#DefaultRoot ~/public_html       public,!users
DefaultRoot /public

# Limit login attempts
MaxLoginAttempts                3


#
# Dort befindet sich die Login Datei... -> bessere Loesung als im
# <Anonymous>. Jetzt zeig er sie immer an!

DisplayConnect          /public/login.msg

<Anonymous /public>
#    After anonymous login, daemon runs as:
     User                       ftp
     Group                      public

     # We want clients to be able to login with "anonymous" as well as "ftp"
     UserAlias                  anonymous ftp

     # Limit the maximum number of anonymous logins
     MaxClients         10

     # login.msg muss sich im root Verzeichnis befinden!
     DisplayLogin               login.msg
     DisplayFirstChdir          .message
</Anonymous>

Wenn ich den Server starte kommt follgendes...
manchmal done und ab und an faild
und wenn er läuft (also done) dann überprüfe ich denn status und er sagt mir dann "dead"
Das verstehe ich nicht...
Was ist denn an meiner config nicht richtig?

Ich würde mich über jede hilfe freuen... danke schonmal...

Konsolen Ausgabe:

Code:

server:~ # /etc/init.d/proftpd start
Starting ProFTPD Server:                                                done
server:~ # /etc/init.d/proftpd status
Checking for ProFTPD Server:                                         dead

[Wörsty]

Code:

server:~ # /etc/init.d/proftpd start
Starting ProFTPD Server:                                                done
server:~ # /etc/init.d/proftpd status
Checking for ProFTPD Server:                                         dead

Also auf diese Ausgabe würde ich erstmal garnix geben.
Gib mal ein:

Code:

killall proftpd
proftpd -nd9

[Anonymous]

Danke erstaml für die schnelle Antwort...
Das kamm raus als ich die Befehele verwendet haben...

Code:

server:~ # killall proftpd
proftpd: no process killed
server:~ # proftpd -nd9
 - Compiling deny regex '%'.
 - Allocated deny regex at location 0x8090bc8.
server.dom -
server.dom - Config for powered by SuSE Linux:
server.dom - /*
server.dom -  /*.ftp*
server.dom -   Limit
server.dom -    DenyAll
server.dom -    IgnoreHidden
server.dom -   AllowOverwrite
server.dom -   HiddenStor
server.dom -   Umask
server.dom -   DenyFilter
server.dom -  AllowOverwrite
server.dom -  HiddenStor
server.dom -  Umask
server.dom -  DenyFilter
server.dom - ServerIdent
server.dom - DeferWelcome
server.dom - DefaultServer
server.dom - AuthPAM
server.dom - AuthPAMAuthoritative
server.dom - AuthPAMConfig
server.dom - Umask
server.dom - User
server.dom - UserName
server.dom - Group
server.dom - GroupName
server.dom - DenyFilter
server.dom - IdentLookups
server.dom - TransferLog
server.dom - Failed binding to 0.0.0.0, port 21: Address already in use
server.dom - Check the ServerType directive to ensure you are configured correct
ly.

Was soll das denn mit Ip word schon benutz...

[Wörsty]

Code:

fuser -n tcp 21   (da kommt dann eine Zahl)
ps -ef |grep <die Zahl>

[Anonymous]

Danke für die schnelle Antowrt
Weiss aber nicht was du genau damit meinst...

gruss
pinguin

[Wörsty]

Wenn du das eingibst, weißt du was den Port blockiert.

Code:

[root@knowledgebase root]# fuser -n tcp 21
21/tcp:              30049
[root@knowledgebase root]# ps -ef |grep 30049
www      30049     1  0 12:49 ?        00:00:00 proftpd: (accepting connections)

[Anonymous]

Joop habe ich gemacht...

Code:

server:~ # fuser -n tcp 21
21/tcp:                442
server:~ # ps -ef |grep 442
root       442     1  0 13:42 ?        00:00:00 /usr/sbin/inetd
root       675   524  0 14:11 pts/2    00:00:00 grep 442

Was mach ich nun...

[Wörsty]

In der inetd-Konfig bei Port 21 eine # davor machen.
Kannste auch irgendwo im Forum lesen.
Oder proftpd eintragen und den ServerType auf inetd umstellen

[Anonymous]

Wenn ich denn Server auf ServerType auf inetd stelle kommt sowas..

Code:

server:~ # /etc/init.d/proftpd start
Starting ProFTPD Server: server.dom - Fatal: Socket operation on non-socket
server.dom - (Running from command line? Use `ServerType standalone' in config file!)
startproc:  exit status of parent of /usr/sbin/proftpd: 1
                                                                                 failed

und in inetd-Konfig habe ich garkeinen Eintrag mit Port 21?
Hm...

[Anonymous]

Könntest du mir vielleicht weiter helfen...
Ich kriege es einfach nicht hin...

gruss
pinguin

[Anonymous]

So hier ich bins nochmal ....
Hier mal meine inetd-Konfig

Code:

# See man 8 inetd for more information.
#
# If you make changes to this file, either reboot your machine or send the
# inetd a HUP signal with /etc/init.d/inetd reload or by hand:
# Do a ps x as root and look up the pid of inetd. Then do a
# The inetd will re-read this file whenever it gets that signal.
#
# <service_name> <sock_type> <proto> <flags> <user> <server_path> <args>
#
echo stream tcp nowait root internal
echo dgram udp wait root internal
discard stream tcp nowait root internal
discard dgram udp wait root internal
daytime stream tcp nowait root internal
daytime dgram udp wait root internal
chargen stream tcp nowait root internal
chargen dgram udp wait root internal
time stream tcp nowait root internal
time dgram udp wait root internal
#
# These are standard services.
#
#ftp stream tcp nowait root /usr/sbin/tcpd wu.ftpd -a
ftp stream tcp nowait root /usr/sbin/tcpd proftpd
ftp stream tcp nowait root /usr/sbin/tcpd in.ftpd
ftp stream tcp nowait root in.proftpd in.proftpd
#
# If you want telnetd not to keep-alives (e.g. if it runs over a ISDN
# uplink), add -n. See 'man telnetd' for more details.
telnet stream tcp nowait root /usr/sbin/tcpd in.telnetd
# nntp stream tcp nowait news /usr/sbin/tcpd /usr/sbin/leafnode
smtp stream tcp nowait root /usr/sbin/sendmail sendmail -bs
# printer stream tcp nowait root /usr/sbin/tcpd /usr/bin/lpd -i
#
# Shell, login, exec and talk are BSD protocols.
# The option -h permits .rhosts'' files for the superuser. Please look at
# man-page of rlogind and rshd to see more configuration possibilities about
# .rhosts files.
shell stream tcp nowait root /usr/sbin/tcpd in.rshd -L
# shell stream tcp nowait root /usr/sbin/tcpd in.rshd -aL
#
# If you want rlogind not to keep-alives (e.g. if it runs over a ISDN
# uplink), add -n. See 'man rlogind' for more details.
login stream tcp nowait root /usr/sbin/tcpd in.rlogind
# login stream tcp nowait root /usr/sbin/tcpd in.rlogind -a
# exec stream tcp nowait root /usr/sbin/tcpd in.rexecd
talk dgram udp wait root /usr/sbin/tcpd in.talkd
ntalk dgram udp wait root /usr/sbin/tcpd in.talkd
#netperf stream tcp nowait root /opt/netperf/netserver netserver
# These entries are for the KDE version of talk. If you enable them,
# you have to disable the version above.
# dgram udp wait root /usr/sbin/tcpd /opt/kde2/bin/ktalkd
# dgram udp wait root /usr/sbin/tcpd /opt/kde2/bin/ktalkd
#
#
# Pop et al
#
# pop2 stream tcp nowait root /usr/sbin/tcpd in.pop2d
pop3 stream tcp nowait root /usr/sbin/tcpd /usr/sbin/popper -s
#
# Imapd - Interactive Mail Access Protocol server
# Attention: This service is very insecure
# imap stream tcp nowait root /usr/sbin/tcpd imapd
#
# Comsat - has to do with mail.
#
# comsat dgram udp wait root /usr/sbin/tcpd in.comsat
#
# The Internet UUCP service.
#
# uucp stream tcp nowait uucp /usr/sbin/tcpd /usr/lib/uucp/uucico -l
#
# Tftp service is provided primarily for booting. Most sites
# run this only on machines acting as boot servers.
#
# tftp dgram udp wait root /usr/sbin/in.tftpd in.tftpd -s /tftpboot
# bootps dgram udp wait root /usr/sbin/bootpd bootpd -c /tftpboot
#
# Finger, systat and netstat give out user information which may be
# valuable to potential system crackers. Many sites choose to disable
# some or all of these services to improve security.
# Try telnet localhost systat and telnet localhost netstat to see that
# information yourself!
#
finger stream tcp nowait nobody /usr/sbin/tcpd in.fingerd -w
# systat stream tcp nowait nobody /usr/sbin/tcpd /bin/ps -auwwx
netstat stream tcp nowait root /usr/sbin/tcpd /bin/netstat -a
#
# For man on the fly and ht://dig (full text search)
#
# http-rman stream tcp nowait.10000 nobody /usr/sbin/tcpd /usr/sbin/http-rman
#
# For XCept4
#
# btx stream tcp nowait root /usr/sbin/tcpd /usr/lib/xcept4/bin/ceptd -i/usr/lib/xcept4/etc/init.ceptd -u/usr/lib/xcept4/etc/users.ceptd -l/var/log/log.ceptd
#
# For rplay daemon
#
# Old versions of rplay:
# rplay dgram udp wait root /usr/sbin/tcpd rplayd -b 8192 -c 60 -s 8192
# New Versions of rplay (>=3.3.0)
# rplay dgram udp wait root /usr/sbin/tcpd rplayd -t 30 -c 60 -s 16384 -F0 --inetd
#
# vbox (Voice Box)
# vboxd stream tcp nowait root /usr/sbin/tcpd /usr/sbin/vboxd
#
# For midinetd
# midinet stream tcp nowait root /usr/sbin/tcpd in.midinetd
#
# swat is the Samba Web Administration Tool
 swat stream tcp nowait.400 root /usr/sbin/swat swat
#
#
# amanda backup server with indexing capabilities
# amandaidx stream tcp nowait root /usr/lib/amanda/amindexd amindexd
# amidxtape stream tcp nowait root /usr/lib/amanda/amidxtaped amidxtaped
#
# amanda backup client
# amanda dgram udp wait amanda /usr/lib/amanda/amandad amandad
#
# the rsync daemon
# rsync stream tcp nowait root /usr/sbin/tcpd /usr/sbin/rsyncd --daemon
#
#
# Mimer database
# mimer stream tcp nowait root /opt/mimer/bin/mimtcp mimtcp -l
#
# CVS pserver (remote acces to your CVS repositories)
# Please read the section on security and passwords in the CVS manual,
# before you enable this.
# cvspserver stream tcp nowait root /usr/sbin/tcpd /usr/bin/cvs -f --allow-root=/home/cvsroot pserver
#
# procstatd deamon (cluster software)
# procstatd stream tcp nowait nobody /usr/sbin/tcpd /usr/sbin/procstatd -i 7885
#
# End.
webmin  tcp  root

[Wörsty]

Sorry, war im Meeting. :evil:
Du musst in die Datei  /etc/services gucken  :shock:
Lösche alles in Spalte 3 hinter 21/tcp weg und mach standalone.

[Anonymous]

Kein Problem verstehe ich schon...
Da sind aber nur folgende beiträge zu ftp und Port 21

Code:

ftp-data         20/tcp                 # File Transfer [Default Data]
ftp-data         20/udp                 # File Transfer [Default Data]
ftp                 21/tcp                 # File Transfer [Control]
fsp                21/udp                 # UDP File Transfer

In der Spalte drei gibt es also nichts... oder?

[Wörsty]

Na Super. Dann geht doch alles.
Einmal /etc/init.d/inetd restart oder so und proftpd -nd9 fertig  

[Anonymous]

Sorry das ich dich so nerve aber ...

Code:

server.dom - Failed binding to 0.0.0.0, port 21: Address already in use
server.dom - Check the ServerType directive to ensure you are configured correctly.

Ich verstehe es einfach nicht...