Ubuntu 16.04 vsftpd – How to Add Username or Change Password

Ubuntuvsftpd

I have gotten access to a server which is configured by another person and I am now at the point where I am not able to access through ftp due to the fact that I do not have the ftp username and password and I cannot seem to be able to find or add a new username and password to the specific directory.

Please help me add username or change password in vsftpd.

Best Answer

By default vsftpd users are the ones of the system. So if you have admin access, root user or a sudoer, you can log in, view the users using getent passwd command and passwd SomeUser as root to change her/his password.
adduser SomeName to add a user.

Check also for virtual users for vsftpd. Inside vsftpd.conf file search for something like:
pam_service_name=
and then locate this file name inside /etc/pam.d/

In case PAM mechanism is confusing you, a good indication of virtual users is virtual_use_local_privs=
inside vsftpd.conf.

Related Solutions

Ftp – How to tell SELinux to give vsftpd write access in a specific directory

# semanage fcontext -a -t public_content_rw_t "/myftp/pub(/.*)?"

Be sure to include the (/.*)? at the end of the directory name.

I also tried to use audit2allow to generate a policy, but what it does is generate a policy that gives ftpd write access to directories of type public_content_t; this is equivalent to turning on allow_ftpd_full_access, if I understood it correctly

Essentially, yes; since SELinux allows directories/files labeled with public_content_t to be shared between different services. However, further access control is in place through the use of sebooleans (or sebool, more precisely).

Giving "ftpd full access", doesn't mean giving it the rights to do/read/write what and where it wants. SELinux has designated policies in place for the services on your system; meaning, ftpd is allowed to read files if the directory's file context (fcontext) is public_content_t. SELinux gives write permissions to the ftp server if the directory's fcontext is public_content_rw_t; other services such as samba, apache, etc. have to be allowed write permissions to those directories through the booleans, according to the pertaining RedHat Documentation. If your "local policy" gives ftpd write access in directories labelled public_content_t, it essentially strips away a layer of security. Therefore, I suggest labeling the directory with the public_content_rw_t context, and removing your custom generated local policy.

For further information and details, please see the SELinux wiki pages.

Ftp – vsftpd: access SFTP on local user without shell access with specific directory

Sorry but it looks like you are confusing the protocols. I.e. SFTP and FTPS. SFTP is for SSH FTPS is used for and by the FTP server.

If you really want to lock the user down. Add /usr/sbin/nologin /etc/shells (this will stop SSH access) Add your user 'max' to /etc/vsftpd/chroot_list

Configure your filezilla to use FTPS

Best Answer

Related Solutions

Ftp – How to tell SELinux to give vsftpd write access in a specific directory

Ftp – vsftpd: access SFTP on local user without shell access with specific directory

Related Topic