• New System, Problem with FTP

    From Steve Matzura@21:1/5 to All on Sat Aug 24 20:20:01 2024
    This is a multi-part message in MIME format.
    The following is specific to Ubuntu 24.04. If it should go to a
    Ubuntu-specific list, let me know and I'll find out how to make that
    happen. For now though, ...


    ... I have a new Ubuntu 24.04 system which is a rebuild of a 20.04
    system. On the old system, I had logins set to use username and
    password, but the new system was installed by its provider with that
    turned off, necessitating some fancy footwork with SSH keys and such.


    The problem is also related to FTP, which I can't seem to get working. I modified /etc/ssh/sshd_config by adding a section at the bottom for
    "Match User" and also to indicate the subsystem being inet-ftp:


    Subsystem ftp internal-sftp


    If I ssh into the ubuntu account, it works. If I try to FTP into any
    account, I get a pretty meaningless error in the FTP log stating it is
    unable to connect to the server, so I tried simply ssh'ing into itself
    from itself. I got "permission denied publicly" for my troubles. ;-)
    Some Internet searching didn't turn up much of help. I looked in /var/log/auth.log, thinking I'd find something from myself to myself,
    but other than lines and lines of probing from random addresses to the
    root account and other such things, nothing from me to me at all.


    If I could debug this thing, I could fix it. So then, my question is
    either (a) how should I set up a Ubuntu user to accept inbound FTP if PasswordAuthentication is No, or (b) what is the proper way of changing
    from PKI access to password authentication access? I tried setting PasswordAuthentication to Yes, but that didn't change anything, so there
    must be something else not obvious when looking through sshd_config. Personally, I'd like to keep access restricted to those holding SSH
    keys, but if that doesn't work for FTP, then I'll have to go to password authentication like on the old system.


    Thanks in advance.

    <!DOCTYPE html>
    <html>
    <head>

    <meta http-equiv="content-type" content="text/html; charset=UTF-8">
    </head>
    <body>
    <p>The following is specific to Ubuntu 24.04. If it should go to a
    Ubuntu-specific list, let me know and I'll find out how to make
    that happen. For now though, ...</p>
    <p><br>
    </p>
    <p>... I have a new Ubuntu 24.04 system which is a rebuild of a
    20.04 system. On the old system, I had logins set to use username
    and password, but the new system was installed by its provider
    with that turned off, necessitating some fancy footwork with SSH
    keys and such.</p>
    <p><br>
    </p>
    <p>The problem is also related to FTP, which I can't seem to get
    working. I modified /etc/ssh/sshd_config by adding a section at
    the bottom for "Match User" and also to indicate the subsystem
    being inet-ftp:</p>
    <p><br>
    </p>
    <p>Subsystem ftp internal-sftp</p>
    <p><br>
    </p>
    <p>If I ssh into the ubuntu account, it works. If I try to FTP into
    any account, I get a pretty meaningless error in the FTP log
    stating it is unable to connect to the server, so I tried simply
    ssh'ing into itself from itself. I got "permission denied
    publicly" for my troubles. ;-) Some Internet searching didn't turn
    up much of help. I looked in /var/log/auth.log, thinking I'd find
    something from myself to myself, but other than lines and lines of
    probing from random addresses to the root account and other such
    things, nothing from me to me at all.</p>
    <p><br>
    </p>
    <p>If I could debug this thing, I could fix it. So then, my question
    is either (a) how should I set up a Ubuntu user to accept inbound
    FTP if PasswordAuthentication is No, or (b) what is the proper way
    of changing from PKI access to password authentication access? I
    tried setting PasswordAuthentication to Yes, but that didn't
    change anything, so there must be something else not obvious when
    looking through sshd_config. Personally, I'd like to keep access
    restricted to those holding SSH keys, but if that doesn't work for
    FTP, then I'll have to go to password authentication like on the
    old system.<br>
    </p>
    <p><br>
    </p>
    <p>Thanks in advance.<br>
    </p>
    </body>
    </html>

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Dan Ritter@21:1/5 to Steve Matzura on Sat Aug 24 20:50:01 2024
    Steve Matzura wrote:
    The following is specific to Ubuntu 24.04. If it should go to a Ubuntu-specific list, let me know and I'll find out how to make that happen.

    Yup. This is a list for Debian users.

    The problem is also related to FTP, which I can't seem to get working. I modified /etc/ssh/sshd_config by adding a section at the bottom for "Match User" and also to indicate the subsystem being inet-ftp:

    Subsystem ftp internal-sftp

    that's not FTP, the classic protocol; that's SFTP, a secure
    protocol based on SSH.

    If you enable SFTP and try to use an FTP program, it won't work.

    Use the 'sftp' program, instead.

    In general, nobody should use classic FTP without an
    overwhelmingly good reason -- like, the other side is outside of
    their control and only offers FTP.

    -dsr-

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)