I can get SFTP to work just fine with my root password for the webmin and for all virtual servers using the account credentials. However, I cannot get FTP to work with any account, I get the 530 incorrect error every time. This leads me to believe that I must not have set up ftp correctly.
My installation is on a Centos VPS. I am guessing that I have to do something to the proftpd server. It is up and running on the webmin/virtualmin installation. Here is the log file:
Aug 14 22:43:18 server proftpd: PAM unable to dlopen(/lib64/security/pam_stack.so): /lib64/security/pam_stack.so: cannot open shared object file: No such file or directory
Aug 14 22:43:18 server proftpd: PAM adding faulty module: /lib64/security/pam_stack.so
Aug 14 22:43:18 server proftpd[11380]: xx.xx.xx.xx (xxx.xxx.xxx.xxx.) - USER alberta (Login failed): Incorrect password.
I am new to Vitualmin, I am trying to wean myself off of cPanel and run my sites on VPSs. I had no idea that a VPS running Virtualmin was subject to such continual assault by hackers, particularly those emanating from China. I have the RPMForge distro installed because I was advised to run “denyhosts” and “fail2ban”, neither of which are in the standard Centos x64 repo.
This is the second time I have learned that having additional distros causes problems. I had mixed distro updates of ClamAV that prevented it working. I am going to be a lot more careful about my updates in Virtualmin now.
I had no idea that a VPS running Virtualmin was subject to such continual assault by hackers, particularly those emanating from China
Well, all servers are subject to attacks, the control panel being run doesn’t make one more or less susceptible to them.
The attackers generally just have bots that look for certain ports, or perhaps web apps, and then look for vulnerabilities.
I have the RPMForge distro installed because I was advised to run “denyhosts” and “fail2ban”, neither of which are in the standard Centos x64 repo.
Sure, that’s a good idea!
My recommendation though would be to just install the packages you need from third party repositories. In your case, that’s just denyhost and fail2ban.
The default CentOS packages are heavily tested, and known to work well together. Introducing new packages from third party repositories can cause unexpected issues.
In some cases, that’s necessary, such as in the case of denyhosts and fail2ban. But I wouldn’t recommend replacing any existing packages on your system unless it’s really necessary.