Keine Verzeichnisse bei TLS

[BuzzDee]

Ich hab den proftpd auf Debian Sarge laufen, funktioniert auch alles super. Wenn ich mich jedoch per SSL anmelde, klappt zwar die Anmeldung, aber ich kann nichts im Verzeichnis sehen. Mit dem selben Account ohne TLS klappt es super.

[VolGas]

So wie es aussieht, kann kein Datenkanal aufgebaut werden.
Entweder ist der FTP-Client oder der Server falsch konfiguriert -
ich tippe auf ersteres, wenn der Server läuft.

Bitte Debug... (siehe ->FAQ)

mfg.
  VolGas

[polonius]

Hallo zusammen,

ich hab dasselbe Problem.

Hab proftpd auch mal im debug-Modus gestartet. Allerdings werd ich aus dem Logfile auch nicht besonders schlau.

Code:

Oct 25 11:14:04 lagerschuppen proftpd[1275] localhost.localdomain (194.95.69.146[194.95.69.146]): performing ident lookup
Oct 25 11:14:14  ident connection failed: Interrupted system call
Oct 25 11:14:14  ident lookup returned 'UNKNOWN'
Oct 25 11:14:14  connected - local  : 192.168.1.2:21
Oct 25 11:14:14  connected - remote : 194.95.69.146:42804
Oct 25 11:14:14  FTP session opened.
Oct 25 11:14:14  dispatching PRE_CMD command 'AUTH TLS' to mod_rewrite
Oct 25 11:14:14  dispatching PRE_CMD command 'AUTH TLS' to mod_tls
Oct 25 11:14:14  dispatching PRE_CMD command 'AUTH TLS' to mod_core
Oct 25 11:14:14  dispatching PRE_CMD command 'AUTH TLS' to mod_core
Oct 25 11:14:14  dispatching CMD command 'AUTH TLS' to mod_tls
Oct 25 11:14:15  dispatching LOG_CMD command 'AUTH TLS' to mod_log
Oct 25 11:14:16  dispatching PRE_CMD command 'USER polonius' to mod_rewrite
Oct 25 11:14:16  dispatching PRE_CMD command 'USER polonius' to mod_tls
Oct 25 11:14:16  dispatching PRE_CMD command 'USER polonius' to mod_core
Oct 25 11:14:16  dispatching PRE_CMD command 'USER polonius' to mod_core
Oct 25 11:14:16  dispatching PRE_CMD command 'USER polonius' to mod_delay
Oct 25 11:14:16  dispatching PRE_CMD command 'USER polonius' to mod_auth
Oct 25 11:14:16  dispatching auth request "endpwent" to module mod_radius
Oct 25 11:14:16  dispatching auth request "endpwent" to module mod_auth_file
Oct 25 11:14:16  dispatching auth request "endpwent" to module mod_auth_unix
Oct 25 11:14:16  dispatching auth request "endgrent" to module mod_radius
Oct 25 11:14:16  dispatching auth request "endgrent" to module mod_auth_file
Oct 25 11:14:16  dispatching auth request "endgrent" to module mod_auth_unix
Oct 25 11:14:16  dispatching CMD command 'USER polonius' to mod_ratio
Oct 25 11:14:16  dispatching CMD command 'USER polonius' to mod_auth
Oct 25 11:14:16  dispatching auth request "getgroups" to module mod_radius
Oct 25 11:14:16  dispatching auth request "getgroups" to module mod_auth_file
Oct 25 11:14:16  dispatching auth request "getgroups" to module mod_auth_unix
Oct 25 11:14:16  dispatching POST_CMD command 'USER polonius' to mod_delay
Oct 25 11:14:16  mod_delay/0.4: selecting median interval from 1 value
Oct 25 11:14:16  dispatching LOG_CMD command 'USER polonius' to mod_log
Oct 25 11:14:16  dispatching PRE_CMD command 'PASS (hidden)' to mod_rewrite
Oct 25 11:14:16  dispatching PRE_CMD command 'PASS (hidden)' to mod_tls
Oct 25 11:14:16  dispatching PRE_CMD command 'PASS (hidden)' to mod_core
Oct 25 11:14:16  dispatching PRE_CMD command 'PASS (hidden)' to mod_core
Oct 25 11:14:16  dispatching PRE_CMD command 'PASS (hidden)' to mod_delay
Oct 25 11:14:16  dispatching PRE_CMD command 'PASS (hidden)' to mod_wrap
Oct 25 11:14:16  dispatching PRE_CMD command 'PASS (hidden)' to mod_radius
Oct 25 11:14:16  dispatching PRE_CMD command 'PASS (hidden)' to mod_auth
Oct 25 11:14:16  dispatching auth request "endpwent" to module mod_radius
Oct 25 11:14:16  dispatching auth request "endpwent" to module mod_auth_file
Oct 25 11:14:16  dispatching auth request "endpwent" to module mod_auth_unix
Oct 25 11:14:16  dispatching auth request "endgrent" to module mod_radius
Oct 25 11:14:16  dispatching auth request "endgrent" to module mod_auth_file
Oct 25 11:14:16  dispatching auth request "endgrent" to module mod_auth_unix
Oct 25 11:14:16  dispatching CMD command 'PASS (hidden)' to mod_auth
Oct 25 11:14:16  dispatching auth request "getgroups" to module mod_radius
Oct 25 11:14:16  dispatching auth request "getgroups" to module mod_auth_file
Oct 25 11:14:16  dispatching auth request "getgroups" to module mod_auth_unix
Oct 25 11:14:16  dispatching auth request "getpwnam" to module mod_radius
Oct 25 11:14:16  dispatching auth request "getpwnam" to module mod_auth_file
Oct 25 11:14:16  dispatching auth request "getpwnam" to module mod_auth_unix
Oct 25 11:14:16  dispatching auth request "gid_name" to module mod_radius
Oct 25 11:14:16  dispatching auth request "gid_name" to module mod_auth_file
Oct 25 11:14:16  dispatching auth request "gid_name" to module mod_auth_unix
Oct 25 11:14:16  dispatching auth request "auth" to module mod_radius
Oct 25 11:14:16  dispatching auth request "auth" to module mod_tls
Oct 25 11:14:16  dispatching auth request "auth" to module mod_auth_pam
Oct 25 11:14:16  dispatching auth request "setgrent" to module mod_radius
Oct 25 11:14:16  dispatching auth request "setgrent" to module mod_auth_file
Oct 25 11:14:16  dispatching auth request "setgrent" to module mod_auth_unix
Oct 25 11:14:16 
Oct 25 11:14:16  Config for Debian:
Oct 25 11:14:16  DeferWelcome
Oct 25 11:14:16  DebugLevel
Oct 25 11:14:16  ServerLog
Oct 25 11:14:16  DefaultServer
Oct 25 11:14:16  ShowSymlinks
Oct 25 11:14:16  TimeoutNoTransfer
Oct 25 11:14:16  TimeoutStalled
Oct 25 11:14:16  TimeoutIdle
Oct 25 11:14:16  DisplayLogin
Oct 25 11:14:16  DisplayFirstChdir
Oct 25 11:14:16  ListOptions
Oct 25 11:14:16  DenyFilter
Oct 25 11:14:16  DefaultRoot
Oct 25 11:14:16  TLSEngine
Oct 25 11:14:16  UserID
Oct 25 11:14:16  UserName
Oct 25 11:14:16  GroupID
Oct 25 11:14:16  GroupName
Oct 25 11:14:16  Umask
Oct 25 11:14:16  DirUmask
Oct 25 11:14:16  AllowOverwrite
Oct 25 11:14:16  TLSEngine
Oct 25 11:14:16  TLSLog
Oct 25 11:14:16  TLSRequired
Oct 25 11:14:16  TLSRSACertificateFile
Oct 25 11:14:16  TLSRSACertificateKeyFile
Oct 25 11:14:16  CURRENT-CLIENTS
Oct 25 11:14:16  USER
Oct 25 11:14:16  USER polonius: Login successful.
Oct 25 11:14:16  opening TransferLog '/var/log/xferlog'
Oct 25 11:14:16  dispatching auth request "getpwnam" to module mod_radius
Oct 25 11:14:16  dispatching auth request "getpwnam" to module mod_auth_file
Oct 25 11:14:16  dispatching auth request "getpwnam" to module mod_auth_unix
Oct 25 11:14:16  dispatching auth request "setpwent" to module mod_radius
Oct 25 11:14:16  dispatching auth request "setpwent" to module mod_auth_file
Oct 25 11:14:16  dispatching auth request "setpwent" to module mod_auth_unix
Oct 25 11:14:16  dispatching auth request "setgrent" to module mod_radius
Oct 25 11:14:16  dispatching auth request "setgrent" to module mod_auth_file
Oct 25 11:14:16  dispatching auth request "setgrent" to module mod_auth_unix
Oct 25 11:14:16  dispatching auth request "getpwent" to module mod_radius
Oct 25 11:14:16  dispatching auth request "getpwent" to module mod_auth_file
Oct 25 11:14:16  dispatching auth request "getpwent" to module mod_auth_unix
Oct 25 11:14:16  dispatching auth request "getgrent" to module mod_radius
Oct 25 11:14:16  dispatching auth request "getgrent" to module mod_auth_file
Oct 25 11:14:16  dispatching auth request "getgrent" to module mod_auth_unix
Oct 25 11:14:16  Preparing to chroot() the environment, path = '/home/polonius'
Oct 25 11:14:16  Environment successfully chroot()ed.
Oct 25 11:14:16  in dir_check_full(): path = '/', fullpath = '/home/polonius/'.
Oct 25 11:14:16  dispatching POST_CMD command 'PASS (hidden)' to mod_cap
Oct 25 11:14:16  mod_cap/1.0: capabilities '= cap_net_bind_service+ep'
Oct 25 11:14:16  dispatching POST_CMD command 'PASS (hidden)' to mod_ifsession
Oct 25 11:14:16  dispatching POST_CMD command 'PASS (hidden)' to mod_readme
Oct 25 11:14:16  dispatching POST_CMD command 'PASS (hidden)' to mod_delay
Oct 25 11:14:16  mod_delay/0.4: selecting median interval from 1 value
Oct 25 11:14:16  dispatching POST_CMD command 'PASS (hidden)' to mod_radius
Oct 25 11:14:16  dispatching POST_CMD command 'PASS (hidden)' to mod_tls
Oct 25 11:14:16  dispatching POST_CMD command 'PASS (hidden)' to mod_ratio
Oct 25 11:14:16  dispatching POST_CMD command 'PASS (hidden)' to mod_quotatab
Oct 25 11:14:16  dispatching POST_CMD command 'PASS (hidden)' to mod_log
Oct 25 11:14:16  dispatching POST_CMD command 'PASS (hidden)' to mod_ls
Oct 25 11:14:16  dispatching POST_CMD command 'PASS (hidden)' to mod_auth
Oct 25 11:14:16  dispatching LOG_CMD command 'PASS (hidden)' to mod_log
Oct 25 11:14:16  dispatching LOG_CMD command 'PASS (hidden)' to mod_ratio
Oct 25 11:14:17  dispatching PRE_CMD command 'SYST' to mod_rewrite
Oct 25 11:14:17  dispatching PRE_CMD command 'SYST' to mod_tls
Oct 25 11:14:17  dispatching PRE_CMD command 'SYST' to mod_core
Oct 25 11:14:17  dispatching PRE_CMD command 'SYST' to mod_core
Oct 25 11:14:17  dispatching CMD command 'SYST' to mod_core
Oct 25 11:14:17  dispatching LOG_CMD command 'SYST' to mod_log
Oct 25 11:14:17  dispatching PRE_CMD command 'FEAT' to mod_rewrite
Oct 25 11:14:17  dispatching PRE_CMD command 'FEAT' to mod_tls
Oct 25 11:14:17  dispatching PRE_CMD command 'FEAT' to mod_core
Oct 25 11:14:17  dispatching PRE_CMD command 'FEAT' to mod_core
Oct 25 11:14:17  dispatching CMD command 'FEAT' to mod_core
Oct 25 11:14:17  dispatching LOG_CMD command 'FEAT' to mod_log
Oct 25 11:14:17  dispatching PRE_CMD command 'PBSZ 0' to mod_rewrite
Oct 25 11:14:17  dispatching PRE_CMD command 'PBSZ 0' to mod_tls
Oct 25 11:14:17  dispatching PRE_CMD command 'PBSZ 0' to mod_core
Oct 25 11:14:17  dispatching PRE_CMD command 'PBSZ 0' to mod_core
Oct 25 11:14:17  dispatching CMD command 'PBSZ 0' to mod_tls
Oct 25 11:14:17  dispatching LOG_CMD command 'PBSZ 0' to mod_log
Oct 25 11:14:17  dispatching PRE_CMD command 'PROT P' to mod_rewrite
Oct 25 11:14:17  dispatching PRE_CMD command 'PROT P' to mod_tls
Oct 25 11:14:17  dispatching PRE_CMD command 'PROT P' to mod_core
Oct 25 11:14:17  dispatching PRE_CMD command 'PROT P' to mod_core
Oct 25 11:14:17  dispatching CMD command 'PROT P' to mod_tls
Oct 25 11:14:17  dispatching POST_CMD command 'PROT P' to mod_xfer
Oct 25 11:14:17  dispatching LOG_CMD command 'PROT P' to mod_log
Oct 25 11:14:17  dispatching PRE_CMD command 'PWD' to mod_rewrite
Oct 25 11:14:17  dispatching PRE_CMD command 'PWD' to mod_tls
Oct 25 11:14:17  dispatching PRE_CMD command 'PWD' to mod_core
Oct 25 11:14:17  dispatching PRE_CMD command 'PWD' to mod_core
Oct 25 11:14:17  dispatching CMD command 'PWD' to mod_core
Oct 25 11:14:17  in dir_check_full(): path = '/', fullpath = '/home/polonius/'.
Oct 25 11:14:17  dispatching LOG_CMD command 'PWD' to mod_log
Oct 25 11:14:17  dispatching PRE_CMD command 'TYPE A' to mod_rewrite
Oct 25 11:14:17  dispatching PRE_CMD command 'TYPE A' to mod_tls
Oct 25 11:14:17  dispatching PRE_CMD command 'TYPE A' to mod_core
Oct 25 11:14:17  dispatching PRE_CMD command 'TYPE A' to mod_core
Oct 25 11:14:17  dispatching CMD command 'TYPE A' to mod_xfer
Oct 25 11:14:17  dispatching LOG_CMD command 'TYPE A' to mod_log
Oct 25 11:14:17  dispatching PRE_CMD command 'PASV' to mod_rewrite
Oct 25 11:14:17  dispatching PRE_CMD command 'PASV' to mod_tls
Oct 25 11:14:17  dispatching PRE_CMD command 'PASV' to mod_core
Oct 25 11:14:17  dispatching PRE_CMD command 'PASV' to mod_core
Oct 25 11:14:17  dispatching CMD command 'PASV' to mod_core
Oct 25 11:14:17  in dir_check_full(): path = '/', fullpath = '/home/polonius/'.
Oct 25 11:14:17  Entering Passive Mode (192,168,1,2,128,17).
Oct 25 11:14:17  dispatching LOG_CMD command 'PASV' to mod_log
Oct 25 11:14:17  dispatching PRE_CMD command 'LIST' to mod_rewrite
Oct 25 11:14:17  dispatching PRE_CMD command 'LIST' to mod_tls
Oct 25 11:14:17  dispatching PRE_CMD command 'LIST' to mod_core
Oct 25 11:14:17  dispatching PRE_CMD command 'LIST' to mod_core
Oct 25 11:14:17  dispatching PRE_CMD command 'LIST' to mod_ratio
Oct 25 11:14:17  dispatching CMD command 'LIST' to mod_ls

Hat jemand von euch eine Idee?

Viele Grüße,
polonius

[VolGas]

Router, NAT, oder Firewall zwischen Client und Server?
Dann die HighPorts freigeben/weiterleiten.

mfg.
  VolGas

[polonius]

DSL-Router hängt dazwischen. FTP wird per NAT auf den Server weitergeleitet.

Aber was meinst Du mit HighPorts. Ich dachte für FTP reicht ein Port...

Grüße,
polonius

[VolGas]

Nein!

Für das FTP wird ein Befehls- (Control) und ein Datenkanal (Data) verwendet.
Heutzutage hat (sollte!) jeder FTP-Client den "passive mode" als Standard eingestellt.
Damit wird für jede einzelne Datenübertrag (wie z.B. auch ein Verzeichnislisting!) vereinbart,
auf welchem Port die Daten gesendet werden sollen. Die "high ports" sind generell dazu definiert,
daß sie frei verfügbar für div. Dienste und Datenübertragungen dynamisch zugewiesen werden
können - z.B. auch mit dem HTTP, das auf einem Port seine Antwortdaten zu einen HTTP-Request
sendet.

Wenn der Server irgendwo im Internet steht und keine Firewall dazwischen geschaltet ist, die
irgendwelche Ports sperrt, dann ist der Router mit seiner NAT für das FTP in der Regel kein Problem.

mfg.
  VolGas