FTP server fault

[AleksandrDneprCity]

Set-top box is uClan Ustym 4K Pro.

I install OlenPLi 9.1, set WLan connection, set static IP address for local network.
Connection by telnet by login root - OK.
I set new password for root: Enter command passwd & input new password as 12345 & repet new password 12345
I close telnet, then open i connect again, used by login root & password 12345 - OK.
I try connect to FTP server: Request user name - input root. After this, it does not ask for a password, but immediately gives an error:
"ftp login error : oops: config file not owned by correct user, or not a file".

P.s. In version OpenPLi 9.0 - FTP server works without problems.
The problem appeared in 9.1

[littlesat]

Maybe use winscp instead?

[AleksandrDneprCity]

In OpenPLi 9.0 everything worked. In version 9.1 it stopped working. You broke something in version 9.1.

Open PLi v 9.1:
Connect via telnet (after set password "qwert1234567"):

Run WinSCP, input connection params into form:

Result - error:

Open PLi v9.0 - all working

[AleksandrDneprCity]

P.s. Additional info:

The problem with FTP appears only in case of a clean installation OpenPLi 9.1 of the "usb" assembly from the "openpli-9.1-release-ustym4kpro-20250106_usb.zip" archive.

If the OpenPLi 9.1 was installed from the "multiboot" assembly from the "openpli-9.1-release-ustym4kpro-20250106_multiboot.zip" archive via online update, then FTP works fine.

[WanWizard]

That is weird, as apart from partitioning and the recovery image, the "openpli" part in both is identical, it is exactly the same rootfs in both zips.

Have you checked /var/log/messages for any errors ?

Do you have /etc/vsftpd.conf, and is it owned by root, with permissions 600 (rw - - ) ?

[AleksandrDneprCity]

Hello.

If attempts to login to the FTP server fail, new lines are not added to /var/log/message.

I did a clean installation of the openpli-9.1-release-ustym4kpro-20250125_usb.zip image, configured the video resolution, connected to the WiFi network and set a password for root, I did not change anything else in the receiver settings.

The /etc/vsftpd.conf file is present, here are its contents:

# Example config file /etc/vsftpd.conf
#
# The default compiled in settings are fairly paranoid. This sample file
# loosens things up a bit, to make the ftp daemon more usable.
# Please see vsftpd.conf.5 for all compiled in defaults.
#
# READ THIS: This example file is NOT an exhaustive list of vsftpd options.
# Please read the vsftpd.conf.5 manual page to get a full idea of vsftpd's
# capabilities.

# run standalone
listen=NO

# No PAM sessions to save resources
session_support=NO

# Allow anonymous FTP? (Beware - allowed by default if you comment this out).
anonymous_enable=NO
#
# Uncomment this to allow local users to log in.
local_enable=YES
#
# Uncomment this to enable any form of FTP write command.
write_enable=YES
#
# Default umask for local users is 077. You may wish to change this to 022,
# if your users expect that (022 is used by most other ftpd's)
local_umask=022
#
# Uncomment this to allow the anonymous FTP user to upload files. This only
# has an effect if the above global write enable is activated. Also, you will
# obviously need to create a directory writable by the FTP user.
#anon_upload_enable=YES
#
# Uncomment this if you want the anonymous FTP user to be able to create
# new directories.
#anon_mkdir_write_enable=YES
#
# Activate directory messages - messages given to remote users when they
# go into a certain directory.
dirmessage_enable=YES
#
# Activate logging of uploads/downloads.
xferlog_enable=NO
#
# Make sure PORT transfer connections originate from port 20 (ftp-data).
connect_from_port_20=NO
#
# If you want, you can arrange for uploaded anonymous files to be owned by
# a different user. Note! Using "root" for uploaded files is not
# recommended!
#chown_uploads=YES
#chown_username=whoever
#
# You may override where the log file goes if you like. The default is shown
# below.
#xferlog_file=/var/log/vsftpd.log
#
# If you want, you can have your log file in standard ftpd xferlog format
xferlog_std_format=YES
#
# You may change the default value for timing out an idle session.
#idle_session_timeout=600
#
# You may change the default value for timing out a data connection.
#data_connection_timeout=120
#
# It is recommended that you define on your system a unique user which the
# ftp server can use as a totally isolated and unprivileged user.
#nopriv_user=ftp
#
# Enable this and the server will recognise asynchronous ABOR requests. Not
# recommended for security (the code is non-trivial). Not enabling it,
# however, may confuse older FTP clients.
#async_abor_enable=YES
#
# By default the server will pretend to allow ASCII mode but in fact ignore
# the request. Turn on the below options to have the server actually do ASCII
# mangling on files when in ASCII mode.
# Beware that turning on ascii_download_enable enables malicious remote parties
# to consume your I/O resources, by issuing the command "SIZE /big/file" in
# ASCII mode.
# These ASCII options are split into upload and download because you may wish
# to enable ASCII uploads (to prevent uploaded scripts etc. from breaking),
# without the DoS risk of SIZE and ASCII downloads. ASCII mangling should be
# on the client anyway..
#ascii_upload_enable=YES
#ascii_download_enable=YES
#
# You may fully customise the login banner string:
#ftpd_banner=Welcome to blah FTP service.
#
# You may specify a file of disallowed anonymous e-mail addresses. Apparently
# useful for combatting certain DoS attacks.
#deny_email_enable=YES
# (default follows)
#banned_email_file=/etc/vsftpd.banned_emails
#
# You may specify an explicit list of local users to chroot() to their home
# directory. If chroot_local_user is YES, then this list becomes a list of
# users to NOT chroot().
#chroot_list_enable=YES
# (default follows)
#chroot_list_file=/etc/vsftpd.chroot_list
#
# You may activate the "-R" option to the builtin ls. This is disabled by
# default to avoid remote users being able to cause excessive I/O on large
# sites. However, some broken FTP clients such as "ncftp" and "mirror" assume
# the presence of the "-R" option, so there is a strong case for enabling it.
#ls_recurse_enable=YES
#
# This string is the name of the PAM service vsftpd will use.
pam_service_name=vsftpd
#
# This option is examined if userlist_enable is activated. If you set this
# setting to NO, then users will be denied login  unless  they are  explicitly
# listed  in the file specified by userlist_file.  When login is denied, the
# denial is issued before the user is asked for a password.
userlist_deny=YES
#
# If enabled, vsftpd will load a list of usernames, from the filename given by
# userlist_file.  If a user tries to log in using  a  name in  this  file,  they
# will be denied before they are asked for a password. This may be useful in
# preventing cleartext passwords being transmitted. See also userlist_deny.
userlist_enable=NO
#
# If enabled,  vsftpd  will display directory listings with the time in your
# local time zone. The default is to display GMT. The times returned by the
# MDTM FTP command are also affected by this option.
use_localtime=YES
#
# If set to YES, local users will be (by default) placed in a chroot() jail in
# their home directory after login.  Warning: This  option has  security
# implications,  especially  if  the users have upload permission, or shell access.
# Only enable if you know what you are doing.  Note that these security implications
# are not vsftpd specific. They apply to all FTP daemons which offer to put
# local  users in chroot() jails.
chroot_local_user=NO
#
allow_writeable_chroot=YES
#
tcp_wrappers=NO

local_root=/

[WanWizard]

I wasn't asking about the contents, but about the file permissions.

vsftpd doesn't start if those are not correct. Try

chown root:root /etc/vsftpd.conf
chmod 600 /etc/vsftpd.conf

and restart the box. We think this fixes the issue, if you can confirm that, we can commit the fix for it.

[Hains]

Sorry..duplicate

[AleksandrDneprCity]

Yes, access to the FTP server is working now, the error no longer exists. Then please check in the source code what permissions are assigned to this file?
Thank You for Your work!

[AleksandrDneprCity]

Hello. I checked the assembly "openpli-9.1-release-ustym4kpro-20250212_usb.zip", the problem is not solved.

[WanWizard]

Never got an answer to my question

I wasn't asking about the contents, but about the file permissions.

What is the output of

ls -l /etc/vsftpd.conf

on the box when it does not work?

In order to fix anything, I need to know what to fix.

[AleksandrDneprCity]

Never got an answer to my question

I wasn't asking about the contents, but about the file permissions.

What is the output of

ls -l /etc/vsftpd.conf

on the box when it does not work?

In order to fix anything, I need to know what to fix.

I answered this question for you:

Yes, access to the FTP server is working now, the error no longer exists.

[WanWizard]

I am confused now. First you say "the problem is not solved" and now you say "yes, it is working now"? What is it?

[AleksandrDneprCity]

I meant that the error is fixed after entering these two commands, access to the FTP server starts working:

chown root:root /etc/vsftpd.conf
chmod 600 /etc/vsftpd.conf

After that I said that the error is not fixed, because you did not fix it in the "2025-02-12" build.

[AleksandrDneprCity]

Users should not have to telnet after each clean install to fix errors. The FTP server should work immediately after installing the image.

[WanWizard]

Because I don't know what exactly needs fixing.

My original question was:

Do you have /etc/vsftpd.conf, and is it owned by root, with permissions 600 (rw - - ) ?

Is the ownership not correct? Are the permissions not correct? Are both not correct?

I can't just add all possible fixes to the build recipe, in the hope one of them is the correct one.

[AleksandrDneprCity]

I'll reflash the receiver again now to answer your question. I need 15 minutes...

[WanWizard]

Thanks. I would do that myself, but I have no access to a box with this problem.

[AleksandrDneprCity]

ls -l /etc/vsftpd.conf - show result:

-rw------- 1 1002 1002 5591 Feb 11 21:14 /etc/vsftpd.conf

Command chown root:root /etc/vsftpd.conf fixed this problem. this one command is enough.

[WanWizard]

Brillant, thanks very much.

[WanWizard]

I'll rerun the 9.1 builds for the ustym4kpro, sf8008 and gbtrio4k when the 8.3 build is finished.

[AleksandrDneprCity]

Hello. I checked the 9.1 build for 03/16/2025, the problem is not fixed.