Pure-FTPD Unable to connect with any vhost FTP user

Please fill in any relevant information that applies to you:

• CentOS Version: CentOS 7 64bit
• Centmin Mod Version Installed: 140.00beta01
• Nginx Version Installed: 1.27.0
• PHP Version Installed: v8.1.29,
• MariaDB MySQL Version Installed: 10.4.34-MariaDB MariaDB Server
• When was last time updated Centmin Mod code base ? : 04/07/2024
• Persistent Config:

Code:

DEVTOOLSETTEN='n'
DEVTOOLSETELEVEN='y'
SELFSIGNEDSSL_ECDSA='y'
PHP_OVERWRITECONF='n'

This week I performed a migration to a new server. Everything goes well, but it now appears that I cannot log in with any FTP user (automatically created via vhost), and I always get the following error in the log files:

---

Code:

Jul  4 15:12:07 220 pure-ftpd: (?@194.78.14.***) [INFO] New connection from 194.78.14.***
Jul  4 15:12:07 220 pure-ftpd: (?@194.78.14.***) [INFO] TLS: Enabled TLSv1/SSLv3 with ECDHE-RSA-AES128-GCM-SHA256, 128 secret bits cipher
Jul  4 15:12:07 220 pure-ftpd: (?@194.78.14.***) [WARNING] Can't login as [UCgp*****FDMN6q]: account disabled (uid < 1000)
Jul  4 15:12:07 220 pure-ftpd: (?@194.78.14.***) [INFO] Logout.

Unfortunately I couldn't find a solution online, can anyone help?

 

Hi eva2000,

Thanks for your reply! I have run this but still get the output below:

Code:

[13:09][root@tux.ictworkz.be centminmod]# cmupdate
No local changes to save
Already up-to-date.
No local changes to save
Already up-to-date.
[13:10][root@tux.ictworkz.be centminmod]#
[13:10][root@tux.ictworkz.be centminmod]# ./centmin.sh

Failed to start rpcbind.service: Unit is masked.
--------------------------------------------------------
     Centmin Mod Menu 130.00beta01 centminmod.com
--------------------------------------------------------
1).  Centmin Install
2).  Add Nginx vhost domain
3).  NSD setup domain name DNS
4).  Nginx Upgrade / Downgrade
5).  PHP Upgrade / Downgrade
6).  MySQL User Database Management
7).  Option Being Revised (TBA)
8).  Option Being Revised (TBA)
9).  Option Being Revised (TBA)
10). Memcached Server Re-install
11). MariaDB MySQL Upgrade & Management
12). Zend OpCache Install/Re-install
13). Install/Reinstall Redis PHP Extension
14). SELinux disable
15). Install/Reinstall ImagicK PHP Extension
16). Change SSHD Port Number
17). Multi-thread compression: zstd,pigz,pbzip2,lbzip2
18). Suhosin PHP Extension install
19). Install FFMPEG and FFMPEG PHP Extension
20). NSD Install/Re-Install
21). Data Transfer (TBA)
22). Add Wordpress Nginx vhost + Cache Plugin
23). Update Centmin Mod Code Base
24). Exit
--------------------------------------------------------
Enter option [ 1 - 24 ] 24
--------------------------------------------------------

 checking for YUM updates... please wait...
 no YUM updates available

-------------------------------------------------------------
* Current Nginx Version: 1.27.0 (270624-171728-centos7-kvm-f098366)
* Latest Nginx Available: 1.27.0 (centminmod.com/nginxnews)
-------------------------------------------------------------

-------------------------------------------------------------
 Centmin Mod local code is up to date at /usr/local/src/centminmod
 no available updates at this time...
-------------------------------------------------------------
[13:10][root@tux.ictworkz.be centminmod]# id nginx
uid=956(nginx) gid=956(nginx) groups=956(nginx)

 

Ooh my bad! I was looking on the wrong server for the version when creating this ticket.

I updated to 140.00beta01 and ran your procedure again.

Code:

[13:37][root@tux.ictworkz.be centminmod]# id nginx
uid=956(nginx) gid=956(nginx) groups=956(nginx)

Do I have to update Nginx again myself? According to Centminmod I am using the latest version:

* Current Nginx Version: 1.27.0 (270624-171728-centos7-kvm-f098366)
* Latest Nginx Available: 1.27.0 (centminmod.com/nginxnews)

Thank you in advance and my apologies for the misunderstanding.

 

Yes, I did that.
Now again with the same result unfortunately:

Code:

[19:14][root@tux.ictworkz.be centminmod]# cmupdate
No local changes to save
Already up-to-date.
No local changes to save
Already up-to-date.
[19:14][root@tux.ictworkz.be centminmod]# cmupdate update-beta
No local changes to save
Already up-to-date.
Switching local code branch to 140.00beta01

Cloning into 'centminmod'...
remote: Enumerating objects: 850, done.
remote: Counting objects: 100% (850/850), done.
remote: Compressing objects: 100% (565/565), done.
remote: Total 850 (delta 358), reused 587 (delta 262), pack-reused 0
Receiving objects: 100% (850/850), 23.85 MiB | 21.28 MiB/s, done.
Resolving deltas: 100% (358/358), done.

Completed. Fresh /usr/local/src/centminmod code base in place
To run centmin.sh again, you need to change into directory: /usr/local/src/centminmod
cd /usr/local/src/centminmod

[19:15][root@tux.ictworkz.be centminmod]# cmdir
/usr/local/src/centminmod /usr/local/src/centminmod /usr/local/src/centminmod /usr/local/src/centminmod
[19:15][root@tux.ictworkz.be centminmod]# centmin
/usr/local/src/centminmod /usr/local/src/centminmod

Failed to start rpcbind.service: Unit is masked.
--------------------------------------------------------
     Centmin Mod Menu 140.00beta01 centminmod.com
--------------------------------------------------------
1).  Centmin Install
2).  Add Nginx vhost domain
3).  NSD setup domain name DNS
4).  Nginx Upgrade / Downgrade
5).  PHP Upgrade / Downgrade
6).  MySQL User Database Management
7).  Option Being Revised (TBA)
8).  Option Being Revised (TBA)
9).  Option Being Revised (TBA)
10). Memcached Server Re-install
11). MariaDB MySQL Upgrade & Management
12). Zend OpCache Install/Re-install
13). Install/Reinstall Redis PHP Extension
14). SELinux disable
15). Install/Reinstall ImagicK PHP Extension
16). Change SSHD Port Number
17). Multi-thread compression: zstd,pigz,pbzip2,lbzip2
18). Suhosin PHP Extension install
19). Install FFMPEG and FFMPEG PHP Extension
20). NSD Install/Re-Install
21). Data Transfer (TBA)
22). Add Wordpress Nginx vhost + Cache Plugin
23). Update Centmin Mod Code Base
24). Exit
--------------------------------------------------------
Enter option [ 1 - 24 ] 24
--------------------------------------------------------

 checking for YUM updates... please wait...
 no YUM updates available

-------------------------------------------------------------
* Current Nginx Version: 1.27.0 (270624-171728-centos7-kvm-f098366)
* Latest Nginx Available: 1.27.0 (centminmod.com/nginxnews)
-------------------------------------------------------------

-------------------------------------------------------------
 Centmin Mod local code is up to date at /usr/local/src/centminmod
 no available updates at this time...
-------------------------------------------------------------
[19:15][root@tux.ictworkz.be centminmod]# id nginx
uid=956(nginx) gid=956(nginx) groups=956(nginx)
[19:16][root@tux.ictworkz.be centminmod]#

 

I get same output:

Code (Text):

[21:16][root@tux.ictworkz.be ~]# bash -x /usr/local/src/centminmod/tools/switch_nginx_uid.sh
+ NGINX_UID=1000
+ NGINX_GID=1000
+ CURRENT_UID=956
+ CURRENT_GID=956
+ id_available 1000
+ getent passwd 1000
+ echo 'Error: UID/GID 1000 is already in use. Please choose a different UID/GID.'
Error: UID/GID 1000 is already in use. Please choose a different UID/GID.
+ exit 1

But when i try FTP:

Code (Text):

Jul  5 21:23:08 220 pure-ftpd: (?@109.129.51.60) [INFO] New connection from 109.129.51.60
Jul  5 21:23:08 220 pure-ftpd: (?@109.129.51.60) [INFO] TLS: Enabled TLSv1/SSLv3 with ECDHE-RSA-AES128-GCM-SHA256, 128 secret bits cipher
Jul  5 21:23:08 220 pure-ftpd: (?@109.129.51.60) [WARNING] Can't login as [UCgpXJJfiFDMN6q]: account disabled (uid < 1000)
Jul  5 21:23:10 220 pure-ftpd: (?@109.129.51.60) [INFO] Logout.

 

I recently restarted the entire server without any result, but now i have also restarted the
pure-ftpd service with unfortunately the same result. I can't figure it out.

Edit: now i see another extra error in pure-ftpd log:

Code (Text):

Jul  5 21:58:26 tux systemd: Can't open PID file /var/run/pure-ftpd.pid (yet?) after start: No such file or directory
Jul  5 21:58:31 tux pure-ftpd: (?@109.129.51.60) [INFO] New connection from 109.129.51.60
Jul  5 21:58:31 tux pure-ftpd: (?@109.129.51.60) [INFO] TLS: Enabled TLSv1/SSLv3 with ECDHE-RSA-AES128-GCM-SHA256, 128 secret bits cipher
Jul  5 21:58:31 tux pure-ftpd: (?@109.129.51.60) [WARNING] Can't login as [UCgpXJJfiFDMN6q]: account disabled (uid < 1000)
Jul  5 21:58:32 tux pure-ftpd: (?@109.129.51.60) [INFO] Logout.

But that file exists:

Code (Text):

[22:03][root@tux.ictworkz.be ~]# tail -n 50 /var/run/pure-ftpd.pid
2789

Edit 2: Can't open PID.. is gone.. probably I was too fast after restarting the service, but unfortunately still the same error.

 

Code (Text):

[22:10][root@tux.ictworkz.be ~]# id 1000
uid=1000(svangeel) gid=1000(svangeel) groups=1000(svangeel)

This is a user that I initially had to specify in the config wizard of the VPS setup.

Code (Text):

[22:12][root@tux.ictworkz.be ~]# bash -x /usr/local/src/centminmod/tools/switch_nginx_uid.sh
+ NGINX_UID=1003
+ NGINX_GID=1003
+ CURRENT_UID=956
+ CURRENT_GID=956
+ id_available 1003
+ getent passwd 1003
+ getent group 1003
+ service_exists nginx
+ systemctl list-units --type=service --all
+ grep -q nginx.service
+ echo 'Stopping nginx service...'
Stopping nginx service...
+ systemctl stop nginx
+ user_exists nginx
+ id nginx
++ id -u nginx
+ OLD_NGINX_UID=956
++ id -g nginx
+ OLD_NGINX_GID=956
+ [[ 956 -eq 956 ]]
+ [[ 956 -eq 956 ]]
+ echo 'Changing UID and GID of nginx user to 1003...'
Changing UID and GID of nginx user to 1003...
+ groupmod -g 1003 nginx
+ usermod -u 1003 -g 1003 nginx
usermod: user nginx is currently used by process 3853
+ echo 'Updating ownership of files for nginx user...'
Updating ownership of files for nginx user...
+ find / -user 956 '!' -path '/proc/*' -exec chown -h 1003:1003 '{}' ';'
+ find / -group 956 '!' -path '/proc/*' -exec chgrp -h 1003 '{}' ';'
+ chown -R 1003:1003 /home/nginx
+ service_exists nginx
+ systemctl list-units --type=service --all
+ grep -q nginx.service
+ echo 'Restarting nginx service...'
Restarting nginx service...
+ systemctl start nginx
+ echo 'Verifying ownership of critical directories...'
Verifying ownership of critical directories...
+ verify_ownership /home/nginx 1003 1003
+ local path=/home/nginx
+ local expected_uid=1003
+ local expected_gid=1003
+ local current_uid
+ local current_gid
++ stat -c %u /home/nginx
+ current_uid=1003
++ stat -c %g /home/nginx
+ current_gid=1003
+ [[ 1003 -eq 1003 ]]
+ [[ 1003 -eq 1003 ]]
+ echo 'Ownership of /home/nginx is correct: UID=1003, GID=1003'
Ownership of /home/nginx is correct: UID=1003, GID=1003
+ echo

+ echo 'id nginx'
id nginx
+ id nginx
uid=956(nginx) gid=1003(nginx) groups=1003(nginx)
[22:13][root@tux.ictworkz.be ~]# id nginx
uid=956(nginx) gid=1003(nginx) groups=1003(nginx)
[22:14][root@tux.ictworkz.be ~]# systemctl restart pure-ftpd

Code (Text):

Jul  5 22:16:43 tux pure-ftpd: (?@109.129.51.60) [INFO] New connection from 109.129.51.60
Jul  5 22:16:43 tux pure-ftpd: (?@109.129.51.60) [INFO] TLS: Enabled TLSv1/SSLv3 with ECDHE-RSA-AES128-GCM-SHA256, 128 secret bits cipher
Jul  5 22:16:44 tux pure-ftpd: (?@109.129.51.60) [WARNING] Can't login as [UCgpXJJfiFDMN6q]: account disabled (uid < 1000)
Jul  5 22:16:44 tux pure-ftpd: (?@109.129.51.60) [INFO] Logout.

 

Sorry, you lost me here, my English is not the best... how I understand it, should I replace '1000' with '1003' somewhere in the script? However, this value is no longer present as I have already changed NGINX_UID and NGINX_GID to '1003' in the script.

Code (Text):

################################################################################
# Desired UIDs and GIDs
NGINX_UID=1003
NGINX_GID=1003
CURRENT_UID=956
CURRENT_GID=956
################################################################################

 

Code (Text):

[22:57][root@tux.ictworkz.be ~]# id nginx
uid=956(nginx) gid=1003(nginx) groups=1003(nginx)

 

Very strange, seems correct now. But pure-ftpd keeps giving the same error.

Code (Text):

[09:56][root@tux.ictworkz.be ~]# id nginx
uid=1068(nginx) gid=1068(nginx) groups=1068(nginx)
[09:56][root@tux.ictworkz.be ~]# systemctl restart pure-ftpd
[09:57][root@tux.ictworkz.be ~]# grep pure-ftpd /var/log/messages | tail -4
Jul  6 09:57:29 tux pure-ftpd: (?@109.129.51.60) [INFO] New connection from 109.129.51.60
Jul  6 09:57:29 tux pure-ftpd: (?@109.129.51.60) [INFO] TLS: Enabled TLSv1/SSLv3 with ECDHE-RSA-AES128-GCM-SHA256, 128 secret bits cipher
Jul  6 09:57:29 tux pure-ftpd: (?@109.129.51.60) [WARNING] Can't login as [UCgpXJJfiFDMN6q]: account disabled (uid < 1000)
Jul  6 09:57:31 tux pure-ftpd: (?@109.129.51.60) [INFO] Logout.

After a reboot the issue remains.