Index: [Article Count Order] [Thread]

Date:  Mon, 12 Jun 2006 23:18:50 +0200
From:  Arthur Sherman <arturs (at mark) netvision.net.il>
Subject:  [coba-e:05682] Re: Slow ProFTP login
To:  coba-e (at mark) bluequartz.org
Message-Id:  <02da01c68e65$cca93480$3701a8c0@lapxp>
In-Reply-To:  <F07DD4D0940AFF41A207BE85479D2AFF131A9D (at mark) server.mainline.local>
X-Mail-Count: 05682

> Would this have anything to do with it? (I'm a bit of a 
> newbie) ... mine
> says
> 
>  /lib/security/pam_pwdb.so
> 
> ... or is this going to break it? The delay is actually getting to the
> login prompt, not logging on.
> 
> Thanks
> 
> Colin

Hi Colin,

This is what I have in my configs:

---/etc/proftpd.conf---
<snip>
ServerName                      "ProFTPD"
ServerType                      inetd
DeferWelcome                    off
DefaultServer                   on
DefaultRoot                     / wheel
DefaultRoot         / admin-users
DefaultRoot                     ~/../../.. site-adm
DefaultRoot                     ~ !site-adm
UseReverseDNS off
IdentLookups off
</snip>
---

---/etc/pam.d/ftp---
#%PAM-1.0
auth       requisite    /lib/security/pam_nologin.so
auth       requisite    /lib/security/pam_listfile.so item=user sense=deny \
                        file=/etc/ftpusers onerr=succeed
auth       requisite    /lib/security/pam_shells.so
auth       required     /lib/security/pam_unix.so nullok
account    required     /lib/security/pam_unix.so
session    required     /lib/security/pam_unix.so
---

---/etc/xinetd.d/proftpd---
# default: off
# $Id: proftpd-xinetd,v 1.1 2004/02/26 17:57:39 thias Exp $
# description: The ProFTPD FTP server serves FTP connections. It uses \
#       normal, unencrypted usernames and passwords for authentication.
service ftp
{
        socket_type             = stream
        wait                    = no
        user                    = root
        server                  = /usr/sbin/in.proftpd
        log_on_success          += DURATION
        nice                    = 10
        disable                 = no
        instances = 80
}
---

Lately I had mentioned that time to connect has increased to ~10 sec.
Probably, after I have updated to proftpd-1.3.0
But I am OK with that.

Another trick I could suggest is to open your workstation firewall to Ident
port (113).
See http://www.grc.com/port_113.htm

Good luck!
 

Best,

--
Arthur Sherman

+972-52-4878851
CPTeam