After I upgraded to proftpd-1.3.3a none of the users on my server are able to login anymore. No problems at all with proftpd 1.3.2d. No configuration changes. See attached server config file and log. This should be the relevant part: 127.0.0.1 (127.0.0.1[127.0.0.1]) - wtmp /var/log/wtmp: Permission denied 127.0.0.1 (127.0.0.1[127.0.0.1]) - opening TransferLog '/var/log/xferlog' 127.0.0.1 (127.0.0.1[127.0.0.1]) - unable to open TransferLog '/var/log/xferlog': Permission denied 127.0.0.1 (127.0.0.1[127.0.0.1]) - setting group IDs: 1000, 1, 5, 10, 12, 13, 15, 17, 18, 19, 26, 27, 80, 85, 1002, 1004, 1005, 35, 1006, 1007, 16, 1008, 123, 245 127.0.0.1 (127.0.0.1[127.0.0.1]) - error: unable to set groups: Operation not permitted 127.0.0.1 (127.0.0.1[127.0.0.1]) - RELINQUISH PRIVS at mod_auth.c:1182 127.0.0.1 (127.0.0.1[127.0.0.1]) - USER PRIVS 1000 at mod_auth.c:612 127.0.0.1 (127.0.0.1[127.0.0.1]) - retrieved UID 1000 for user 'mikko' 127.0.0.1 (127.0.0.1[127.0.0.1]) - RELINQUISH PRIVS at mod_auth.c:616 127.0.0.1 (127.0.0.1[127.0.0.1]) - set TZ environment variable to 'CET' 127.0.0.1 (127.0.0.1[127.0.0.1]) - Preparing to chroot to directory '/home/mikko' 127.0.0.1 (127.0.0.1[127.0.0.1]) - ROOT PRIVS at auth.c:1352 127.0.0.1 (127.0.0.1[127.0.0.1]) - RELINQUISH PRIVS at auth.c:1354 127.0.0.1 (127.0.0.1[127.0.0.1]) - chroot to '/home/mikko' failed for user 'mikko': Funzione non implementata 127.0.0.1 (127.0.0.1[127.0.0.1]) - error: unable to set default root directory 127.0.0.1 (127.0.0.1[127.0.0.1]) - wtmp /var/log/wtmp: Permission denied 127.0.0.1 (127.0.0.1[127.0.0.1]) - FTP session closed. Reproducible: Always
Created attachment 244993 [details] output of "proftpd -n -d 10"
Created attachment 244995 [details] proftpd.conf I forgot to mention the USE flags I compile proftpd with. * net-ftp/proftpd Use flags: (acl) (-authfile) (-ban) (caps) (-case) (-clamav) (ctrls) (-deflate) (-doc) (-exec) (-hardened) (-ident) (-ifsession) (-ipv6) (-kerberos) (-ldap) (-mysql) (ncurses) (nls) (-pam) (-postgres) (-radius) (ratio) (-readme) (-rewrite) (-selinux) (sftp) (shaper) (-sitemisc) (-softquota) (ssl) (tcpd) (-trace) (-vroot) (-xinetd)
Fixed by removing "DefaultRoot ~" from config file.