[Buildroot] vsftpd

[Buildroot] vsftpd

[Charles Krinke]

its my day to be a "noob" again as I am having trouble getting vsftpd
accepting connections on an MPC8321 project. I am near the end of my
project after a year and started with buildroot 2011.03 last spring
and today is the day to enable vsftpd and ntp-wait.

I enable the vsftpd package, it builds, and I get a /usr/sbin/vsftpd
and /etc/init.d/S70vsftpd on the MPC8321 target. When the target
boots, it does say "Starting vsftpd: OK" on the console.

The package does not create an /etc/vsftpd.conf, so I created one that
looks like this:

# cat /etc/vsftpd.conf
anonymous_enable=YES
anon_root=/home/econolite
local_enable=YES
#

Now for the bad news. Connections are refused from an external host,
making me think vsftpd is not really running. A "ps" does not show
vftpd in its list. A "netstat" does not show ftp. Invoking vsftpd from
a bash prompt says:

# vsftpd
500 OOPS: vsftpd: not configured for standalone, must be started from inetd
#

So, can someone help me navigate through the "Valley of Confusion"
towards the "Ridge of Enlightment" so I can get to the next problem
which is "why the frick cannot I get microperl to compile".

Charles "Noob For The Day" Krinke


-- 
Charles Krinke

[Buildroot] vsftpd

[Yegor Yefremov]

Am 15.03.2012 16:38, schrieb Charles Krinke:
> its my day to be a "noob" again as I am having trouble getting vsftpd
> accepting connections on an MPC8321 project. I am near the end of my
> project after a year and started with buildroot 2011.03 last spring
> and today is the day to enable vsftpd and ntp-wait.
> 
> I enable the vsftpd package, it builds, and I get a /usr/sbin/vsftpd
> and /etc/init.d/S70vsftpd on the MPC8321 target. When the target
> boots, it does say "Starting vsftpd: OK" on the console.
> 
> The package does not create an /etc/vsftpd.conf, so I created one that
> looks like this:
> 
> # cat /etc/vsftpd.conf
> anonymous_enable=YES
> anon_root=/home/econolite
> local_enable=YES
> #
> 
> Now for the bad news. Connections are refused from an external host,
> making me think vsftpd is not really running. A "ps" does not show
> vftpd in its list. A "netstat" does not show ftp. Invoking vsftpd from
> a bash prompt says:
> 
> # vsftpd
> 500 OOPS: vsftpd: not configured for standalone, must be started from inetd
> #

Do we have inetd/xinetd? Can't find them. http://en.wikipedia.org/wiki/Xinetd seems to be unsupported. What is the modern way of running daemons on demand-?
 
> So, can someone help me navigate through the "Valley of Confusion"
> towards the "Ridge of Enlightment" so I can get to the next problem
> which is "why the frick cannot I get microperl to compile".
> 
> Charles "Noob For The Day" Krinke.

By the way, I have trouble compiling vsftpd at least with the latest linaro toolchain (haven't tried other toolchains so far):

>>> vsftpd 2.3.4 Building
/usr/bin/make -j24 CC="/home/YegorYefremov/MyProjects/versioned/buildroot/output/host/usr/bin/ccache /home/YegorYefremov/MyProjects/versioned/buildroot/output/host/usr/bin/arm-linux-gnueabi-gcc" CFLAGS=" -pipe -Os  -D_LARGEFILE_SOURCE -D_LARGEFILE64_SOURCE -D_FILE_OFFSET_BITS=64" LDFLAGS="" LIBS="-lcrypt -lssl" -C /home/YegorYefremov/MyProjects/versioned/buildroot/output/build/vsftpd-2.3.4
make[1]: Entering directory `/home/YegorYefremov/MyProjects/versioned/buildroot/output/build/vsftpd-2.3.4'
/home/YegorYefremov/MyProjects/versioned/buildroot/output/host/usr/bin/ccache /home/YegorYefremov/MyProjects/versioned/buildroot/output/host/usr/bin/arm-linux-gnueabi-gcc -o vsftpd main.o utility.o prelogin.o ftpcmdio.o postlogin.o privsock.o tunables.o ftpdataio.o secbuf.o ls.o postprivparent.o logging.o str.o netstr.o sysstr.o strlist.o banner.o filestr.o parseconf.o secutil.o ascii.o oneprocess.o twoprocess.o privops.o standalone.o hash.o tcpwrap.o ipaddrparse.o access.o features.o readwrite.o opts.o ssl.o sslslave.o ptracesandbox.o ftppolicy.o sysutil.o sysdeputil.o -Wl,-s -lcrypt -lssl
/home/YegorYefremov/MyProjects/versioned/buildroot/output/host/opt/ext-toolchain/bin/../lib/gcc/arm-linux-gnueabi/4.6.3/../../../../arm-linux-gnueabi/bin/ld: ssl.o: undefined reference to symbol 'RAND_status'
/home/YegorYefremov/MyProjects/versioned/buildroot/output/host/opt/ext-toolchain/bin/../lib/gcc/arm-linux-gnueabi/4.6.3/../../../../arm-linux-gnueabi/bin/ld: note: 'RAND_status' is defined in DSO /home/YegorYefremov/MyProjects/versioned/buildroot/output/host/usr/arm-unknown-linux-gnueabi/sysroot/usr/lib/libcrypto.so.1.0.0 so try adding it to the linker command line
/home/YegorYefremov/MyProjects/versioned/buildroot/output/host/usr/arm-unknown-linux-gnueabi/sysroot/usr/lib/libcrypto.so.1.0.0: could not read symbols: Invalid operation
collect2: ld returned 1 exit status
make[1]: *** [vsftpd] Fehler 1

Yegor

 

[Buildroot] vsftpd

[Markus Königshaus]

You forget to set listen to YES, I thing - look at man vsftpd.conf:

[ ... ]

   listen If  enabled,  vsftpd will run in standalone mode. This means
that vsftpd must not be run from an inetd of some kind. Instead, the
vsftpd executable is run once directly. vsftpd itself will then take care of
              listening for and handling incoming connections.

              Default: NO
[ ... ]

Markus

Am 15.03.2012 16:38, schrieb Charles Krinke:
> its my day to be a "noob" again as I am having trouble getting vsftpd
> accepting connections on an MPC8321 project. I am near the end of my
> project after a year and started with buildroot 2011.03 last spring
> and today is the day to enable vsftpd and ntp-wait.
>
> I enable the vsftpd package, it builds, and I get a /usr/sbin/vsftpd
> and /etc/init.d/S70vsftpd on the MPC8321 target. When the target
> boots, it does say "Starting vsftpd: OK" on the console.
>
> The package does not create an /etc/vsftpd.conf, so I created one that
> looks like this:
>
> # cat /etc/vsftpd.conf
> anonymous_enable=YES
> anon_root=/home/econolite
> local_enable=YES
> #
>
> Now for the bad news. Connections are refused from an external host,
> making me think vsftpd is not really running. A "ps" does not show
> vftpd in its list. A "netstat" does not show ftp. Invoking vsftpd from
> a bash prompt says:
>
> # vsftpd
> 500 OOPS: vsftpd: not configured for standalone, must be started from inetd
> #
>
> So, can someone help me navigate through the "Valley of Confusion"
> towards the "Ridge of Enlightment" so I can get to the next problem
> which is "why the frick cannot I get microperl to compile".
>
> Charles "Noob For The Day" Krinke
>
>
-- Unsere Aussagen koennen Irrtuemer und Missverstaendnisse enthalten.
Bitte pruefen Sie die Aussagen fuer Ihren Fall, bevor Sie Entscheidungen 
auf Grundlage dieser Aussagen treffen.
Wiesemann & Theis GmbH, Porschestr. 12, D-42279 Wuppertal
Geschaeftsfuehrer: Dipl.-Ing. Ruediger Theis
Registergericht: Amtsgericht Wuppertal, HRB 6377 
Tel. +49-202/2680-0, Fax +49-202/2680-265, http://www.wut.de

[Buildroot] vsftpd

[Charles Krinke]

Dear Markus:

This helps, thank you. Adding "listen=YES" to the /etc/vsftpd.conf
file gets from 'connection refused' to:

ckrinke at hwa:~$ ftp 10.1.15.129
Connected to 10.1.15.129.
500 OOPS: vsftpd: cannot locate user specified in 'ftp_username':ftp
ftp> quit
ckrinke at hwa:~$ ftp rude at 10.1.15.129
ftp: rude at 10.1.15.129: Name or service not knownftp>
ftp>
ftp>

Would you mind getting this "Noob for the Day" to the next step? That
is, I would expect users that exist on the PPC target to be valid ftp
users. I did "RTFM" man vsftpd.conf but missed the importance of
listen. I also dont see ftp_username in the man page, so my
understanding if a bit better, but still incomplete.

Charles

2012/3/15 Markus K?nigshaus <m.koenigshaus@wut.de>:
> You forget to set listen to YES, I thing - look at man vsftpd.conf:
>
> [ ... ]
>
> ? listen If ?enabled, ?vsftpd will run in standalone mode. This means
> that vsftpd must not be run from an inetd of some kind. Instead, the
> vsftpd executable is run once directly. vsftpd itself will then take care of
> ? ? ? ? ? ? ?listening for and handling incoming connections.
>
> ? ? ? ? ? ? ?Default: NO
> [ ... ]
>
> Markus
>
> Am 15.03.2012 16:38, schrieb Charles Krinke:
>> its my day to be a "noob" again as I am having trouble getting vsftpd
>> accepting connections on an MPC8321 project. I am near the end of my
>> project after a year and started with buildroot 2011.03 last spring
>> and today is the day to enable vsftpd and ntp-wait.
>>
>> I enable the vsftpd package, it builds, and I get a /usr/sbin/vsftpd
>> and /etc/init.d/S70vsftpd on the MPC8321 target. When the target
>> boots, it does say "Starting vsftpd: OK" on the console.
>>
>> The package does not create an /etc/vsftpd.conf, so I created one that
>> looks like this:
>>
>> # cat /etc/vsftpd.conf
>> anonymous_enable=YES
>> anon_root=/home/econolite
>> local_enable=YES
>> #
>>
>> Now for the bad news. Connections are refused from an external host,
>> making me think vsftpd is not really running. A "ps" does not show
>> vftpd in its list. A "netstat" does not show ftp. Invoking vsftpd from
>> a bash prompt says:
>>
>> # vsftpd
>> 500 OOPS: vsftpd: not configured for standalone, must be started from inetd
>> #
>>
>> So, can someone help me navigate through the "Valley of Confusion"
>> towards the "Ridge of Enlightment" so I can get to the next problem
>> which is "why the frick cannot I get microperl to compile".
>>
>> Charles "Noob For The Day" Krinke
>>
>>
> -- Unsere Aussagen koennen Irrtuemer und Missverstaendnisse enthalten.
> Bitte pruefen Sie die Aussagen fuer Ihren Fall, bevor Sie Entscheidungen
> auf Grundlage dieser Aussagen treffen.
> Wiesemann & Theis GmbH, Porschestr. 12, D-42279 Wuppertal
> Geschaeftsfuehrer: Dipl.-Ing. Ruediger Theis
> Registergericht: Amtsgericht Wuppertal, HRB 6377
> Tel. +49-202/2680-0, Fax +49-202/2680-265, http://www.wut.de



-- 
Charles Krinke

[Buildroot] vsftpd

[Markus Königshaus]

Look at the example config file, I think, you need to tell vsftpd witch
users are allowed to login (without comments):

local_enable=YES
local_umask=022
userlist_deny=NO
userlist_enable=YES
userlist_file=/etc/vsftpd.user_list

and

secure_chroot_dir=/var/empty (or something equal, must exists, must be
empty)

In /etc/vsftpd.user_list put the system - users, you want to allow for
login, the users must exists. Use the user's password for login.

As an alternate you can enable anonymous logins with
"anonymous_enable=YES" and setting "ftp_username" to a system - user you
want to use for anonymous logins.

Markus


Am 15.03.2012 17:14, schrieb Charles Krinke:
> Dear Markus:
>
> This helps, thank you. Adding "listen=YES" to the /etc/vsftpd.conf
> file gets from 'connection refused' to:
>
> ckrinke at hwa:~$ ftp 10.1.15.129
> Connected to 10.1.15.129.
> 500 OOPS: vsftpd: cannot locate user specified in 'ftp_username':ftp
> ftp> quit
> ckrinke at hwa:~$ ftp rude at 10.1.15.129
> ftp: rude at 10.1.15.129: Name or service not knownftp>
> ftp>
> ftp>
>
> Would you mind getting this "Noob for the Day" to the next step? That
> is, I would expect users that exist on the PPC target to be valid ftp
> users. I did "RTFM" man vsftpd.conf but missed the importance of
> listen. I also dont see ftp_username in the man page, so my
> understanding if a bit better, but still incomplete.
>
> Charles
>
> 2012/3/15 Markus K?nigshaus <m.koenigshaus@wut.de>:
>> You forget to set listen to YES, I thing - look at man vsftpd.conf:
>>
>> [ ... ]
>>
>>   listen If  enabled,  vsftpd will run in standalone mode. This means
>> that vsftpd must not be run from an inetd of some kind. Instead, the
>> vsftpd executable is run once directly. vsftpd itself will then take care of
>>              listening for and handling incoming connections.
>>
>>              Default: NO
>> [ ... ]
>>
>> Markus
>>
>> Am 15.03.2012 16:38, schrieb Charles Krinke:
>>> its my day to be a "noob" again as I am having trouble getting vsftpd
>>> accepting connections on an MPC8321 project. I am near the end of my
>>> project after a year and started with buildroot 2011.03 last spring
>>> and today is the day to enable vsftpd and ntp-wait.
>>>
>>> I enable the vsftpd package, it builds, and I get a /usr/sbin/vsftpd
>>> and /etc/init.d/S70vsftpd on the MPC8321 target. When the target
>>> boots, it does say "Starting vsftpd: OK" on the console.
>>>
>>> The package does not create an /etc/vsftpd.conf, so I created one that
>>> looks like this:
>>>
>>> # cat /etc/vsftpd.conf
>>> anonymous_enable=YES
>>> anon_root=/home/econolite
>>> local_enable=YES
>>> #
>>>
>>> Now for the bad news. Connections are refused from an external host,
>>> making me think vsftpd is not really running. A "ps" does not show
>>> vftpd in its list. A "netstat" does not show ftp. Invoking vsftpd from
>>> a bash prompt says:
>>>
>>> # vsftpd
>>> 500 OOPS: vsftpd: not configured for standalone, must be started from inetd
>>> #
>>>
>>> So, can someone help me navigate through the "Valley of Confusion"
>>> towards the "Ridge of Enlightment" so I can get to the next problem
>>> which is "why the frick cannot I get microperl to compile".
>>>
>>> Charles "Noob For The Day" Krinke
>>>
>>>
>> -- Unsere Aussagen koennen Irrtuemer und Missverstaendnisse enthalten.
>> Bitte pruefen Sie die Aussagen fuer Ihren Fall, bevor Sie Entscheidungen
>> auf Grundlage dieser Aussagen treffen.
>> Wiesemann & Theis GmbH, Porschestr. 12, D-42279 Wuppertal
>> Geschaeftsfuehrer: Dipl.-Ing. Ruediger Theis
>> Registergericht: Amtsgericht Wuppertal, HRB 6377
>> Tel. +49-202/2680-0, Fax +49-202/2680-265, http://www.wut.de
>
>
-- Unsere Aussagen koennen Irrtuemer und Missverstaendnisse enthalten.
Bitte pruefen Sie die Aussagen fuer Ihren Fall, bevor Sie Entscheidungen 
auf Grundlage dieser Aussagen treffen.
Wiesemann & Theis GmbH, Porschestr. 12, D-42279 Wuppertal
Geschaeftsfuehrer: Dipl.-Ing. Ruediger Theis
Registergericht: Amtsgericht Wuppertal, HRB 6377 
Tel. +49-202/2680-0, Fax +49-202/2680-265, http://www.wut.de

[Buildroot] vsftpd

[Charles Krinke]

Thank you kindly, Markus. I now have vsftpd accepting connections and
navigating directories on my MPC8321 target using buildroot. The key
was the config files that were missing. Once they had appropriate
entries as you described, everything works.

A "ps" shows vsftpd. A "netstate" shows ftp as a consequence of the
"listen=YES" statement. The rest was user configuration as described.

We can close this part of the thread and see if we can help Yegor with
his ARM compilation of vsftpd.

Charles "Noob for the Day" Krinke

p.s. Microperl next. But I will start a new thread.

[Buildroot] vsftpd

[Thomas Petazzoni]

Hello Charles,

Le Thu, 15 Mar 2012 10:04:45 -0700,
Charles Krinke <charles.krinke@gmail.com> a ?crit :

> Thank you kindly, Markus. I now have vsftpd accepting connections and
> navigating directories on my MPC8321 target using buildroot. The key
> was the config files that were missing. Once they had appropriate
> entries as you described, everything works.
> 
> A "ps" shows vsftpd. A "netstate" shows ftp as a consequence of the
> "listen=YES" statement. The rest was user configuration as described.
> 
> We can close this part of the thread and see if we can help Yegor with
> his ARM compilation of vsftpd.

Since you solved your problem, could you submit a patch to Buildroot so
that the vsftpd package installs at least a basic and minimally working
vsftpd.conf configuration file? It's better if such packages work
outside of the box with a minimal configuration.

Thanks!

Thomas
-- 
Thomas Petazzoni, Free Electrons
Kernel, drivers, real-time and embedded Linux
development, consulting, training and support.
http://free-electrons.com

[Buildroot] vsftpd

[Charles Krinke]

Dear Thomas:

I will. Basically, I need to download the latest buildroot in a
seperate directory on my laptop, build the vsftp and other packages
and put a patch together. I need a bit of time, but will work on this
in the background to help move it forward.

Charles "Trying to get past noob for the day" Krinke

2012/3/15 Thomas Petazzoni <thomas.petazzoni@free-electrons.com>:
> Hello Charles,
>
> Le Thu, 15 Mar 2012 10:04:45 -0700,
> Charles Krinke <charles.krinke@gmail.com> a ?crit :
>
>> Thank you kindly, Markus. I now have vsftpd accepting connections and
>> navigating directories on my MPC8321 target using buildroot. The key
>> was the config files that were missing. Once they had appropriate
>> entries as you described, everything works.
>>
>> A "ps" shows vsftpd. A "netstate" shows ftp as a consequence of the
>> "listen=YES" statement. The rest was user configuration as described.
>>
>> We can close this part of the thread and see if we can help Yegor with
>> his ARM compilation of vsftpd.
>
> Since you solved your problem, could you submit a patch to Buildroot so
> that the vsftpd package installs at least a basic and minimally working
> vsftpd.conf configuration file? It's better if such packages work
> outside of the box with a minimal configuration.
>
> Thanks!
>
> Thomas
> --
> Thomas Petazzoni, Free Electrons
> Kernel, drivers, real-time and embedded Linux
> development, consulting, training and support.
> http://free-electrons.com



-- 
Charles Krinke

[Buildroot] vsftpd

[Peter Korsgaard]

>>>>> "Yegor" == Yegor Yefremov <yegor_sub1@visionsystems.de> writes:

Hi,

 Yegor> Do we have inetd/xinetd? Can't find
 Yegor> them. http://en.wikipedia.org/wiki/Xinetd seems to be
 Yegor> unsupported. What is the modern way of running daemons on
 Yegor> demand-?

Busybox has an inetd applet, but we don't have any of the standalone
versions, if that's what you mean.

 Yegor> By the way, I have trouble compiling vsftpd at least with the
 Yegor> latest linaro toolchain (haven't tried other toolchains so far):

It works here with the default internal arm toolchain, but I haven't
tried with the linaro one.

-- 
Bye, Peter Korsgaard

[Buildroot] vsftpd

[Charles Krinke]

Dear Yegor:

I would also suggest trying the default arm toolchain in busybox and
seeing if it compiles vsftpd. Personally, I am currently using
CodeSourcery's toolchain for a glibc build this week and recommend
them for an external toolchain. I also have not used Linaros toolchain
at all.

Charles

On Thu, Mar 15, 2012 at 1:40 PM, Peter Korsgaard <jacmet@uclibc.org> wrote:
>>>>>> "Yegor" == Yegor Yefremov <yegor_sub1@visionsystems.de> writes:
>
> Hi,
>
> ?Yegor> Do we have inetd/xinetd? Can't find
> ?Yegor> them. http://en.wikipedia.org/wiki/Xinetd seems to be
> ?Yegor> unsupported. What is the modern way of running daemons on
> ?Yegor> demand-?
>
> Busybox has an inetd applet, but we don't have any of the standalone
> versions, if that's what you mean.
>
> ?Yegor> By the way, I have trouble compiling vsftpd at least with the
> ?Yegor> latest linaro toolchain (haven't tried other toolchains so far):
>
> It works here with the default internal arm toolchain, but I haven't
> tried with the linaro one.
>
> --
> Bye, Peter Korsgaard



-- 
Charles Krinke

[Buildroot] vsftpd

[Yegor Yefremov]

> We can close this part of the thread and see if we can help Yegor with
> his ARM compilation of vsftpd.

I found the problem. See this post: https://www.lonelycoder.com/redmine/boards/7/topics/531

To link against SSL you need both -lssl and -lcrypto. This info can be also found in output/build/vsftpd-2.3.5/vsf_findlibs.sh

Yegor