I have installed and configured vsftpd through YAST. When I try to log in i get the following:
Response: 530 Login incorrect.
Error: Critical error: Could not connect to server
This my vsftpd.conf:
anon_mkdir_write_enable=NO
anon_root=/srv/ftp
anon_upload_enable=NO
anonymous_enable=NO
chroot_local_user=YES
ftpd_banner=No matter where you go, there you are. Don't panic.
idle_session_timeout=900
local_enable=YES
log_ftp_protocol=YES
max_clients=10
max_per_ip=3
pasv_enable=YES
pasv_max_port=40500
pasv_min_port=40000
ssl_enable=YES
ssl_tlsv1=YES
write_enable=YES
xferlog_enable=YES
rsa_cert_file=/etc/ssl/private/vsftpd.pem
I am behind a cable router with a forward Xfinity ip linked to my domain through DNS Exit.
The self signed ssl certificate is recognized.
I get the same error whether trying to connect vie FQDN or internal ip.
I am not sure what to look at to fix the problem.
Any and all help appreciated.
I have no idea why you mention Samba. And I have nil Samba knowledge (I am an Unix/Linux user and system manager).
But there is a file /etc/ftpusers that contains usernames of user that may NOT use ftp. That file normally does not contain users you have added as “normal users”. So I doubt the user you use is in there, but you can check. I am also not sure if vsftpd uses it (not all ftp servers do).
And of course, you could try to find some logs. I do not have vsftpd installed, thus I have no man page, but it could tell you where logs are.
vsftpd_log_file
This option is the name of the file to which we write the vsftpd style log file. This log is only written if the option xferlog_enable is set, and xferlog_std_format is NOT set. Alternatively, it is written if you have set the option dual_log_enable. One further complication - if you have set syslog_enable, then this file is not written and output is sent to the system log instead.
Default: /var/log/vsftpd.log
userlist_enable
If enabled, vsftpd will load a list of usernames, from the filename given by userlist_file. If a user tries to log in using a name in this file, they will be denied before they are asked for a password. This may be useful in preventing cleartext passwords being transmitted. See also userlist_deny.
Default: NO
Seeing his config in post #1, that is not enabled.