Ygtjki

• I rent the VPS for studying and it has installed the zpanel sentora. And now I can access the admin panel page, just using ssh to control it.


• There are an account name tuananh and FTP account name tuananh_tuananh


• When I cat /etc/passwd, it just displays the tuananh account and tuananh_tuananh does not


• The FTP account name tuananh_tuananh was working well, until I upgrade the MySQL from 5.6 to 8.0


• And now, the FTP account is not working :(

I have received the below message when the client tries to connect to the server, how can I fix this? Does it relate to mod_sql?

Apr 6 16:01:50 zpanel proftpd[3960]: 127.0.0.1 (::ffff:103.195.239.180[::ffff:103.195.239.180]) - FTP session opened.
Apr 6 16:02:11 zpanel proftpd[3960]: 127.0.0.1 (::ffff:103.195.239.180[::ffff:103.195.239.180]) - mod_sql/4.2.5: unrecoverable backend error: (1251) Client does not support authentication protocol requested by server; consider upgrading MySQL client
Apr 6 16:02:11 zpanel proftpd[3960]: 127.0.0.1 (::ffff:103.195.239.180[::ffff:103.195.239.180]) - mod_sql/4.2.5: check the SQLLogFile for more details
Apr 6 16:02:11 zpanel proftpd[3960]: 127.0.0.1 (::ffff:103.195.239.180[::ffff:103.195.239.180]) - FTP session closed.

Here I tested connect to my server by ftp

$ ftp xxxxxx.xxx
Connected to xxxxxx.xxx (45.117.76.92).
220 ProFTPD 1.3.3g Server (Sentora FTP Server) [::ffff:45.117.76.92]
Name (xxxxxx.xxx:root): <FTP_USER_ACCOUNT>
331 Password required for <FTP_USER_ACCOUNT>
Password: •••••••••
421 Service not available, remote server has closed connection
Login failed.
No control connection for command: No such file or directory

And this is a message when I restart iptables service

service iptables restart
iptables: Setting chains to policy ACCEPT: filter nat [ OK ]
iptables: Flushing firewall rules: [ OK ]
iptables: Unloading modules: [ OK ]
iptables: Applying firewall rules: [ OK ]
iptables: Loading additional modules: ip_conntrack_ftp [ OK ]

In the /etc/sysconfig/iptables-config file:

# Load additional iptables modules (nat helpers)
# Default: -none-
# Space separated list of nat helpers (e.g. 'ip_nat_ftp ip_nat_irc'), which
# are loaded after the firewall rules are applied. Options for the helpers are
# stored in /etc/modprobe.conf.
IPTABLES_MODULES="ip_conntrack_ftp"

# Unload modules on restart and stop
# Value: yes|no, default: yes
# This option has to be 'yes' to get to a sane state for a firewall
# restart or stop. Only set to 'no' if there are problems unloading netfilter
# modules.
IPTABLES_MODULES_UNLOAD="yes"

# Save current firewall rules on stop.
# Value: yes|no, default: no
# Saves all firewall rules to /etc/sysconfig/iptables if firewall gets stopped
# (e.g. on system shutdown).
IPTABLES_SAVE_ON_STOP="no"

# Save current firewall rules on restart.
# Value: yes|no, default: no
# Saves all firewall rules to /etc/sysconfig/iptables if firewall gets
# restarted.
IPTABLES_SAVE_ON_RESTART="no"

# Save (and restore) rule and chain counter.
# Value: yes|no, default: no
# Save counters for rules and chains to /etc/sysconfig/iptables if
# 'service iptables save' is called or on stop or restart if SAVE_ON_STOP or
# SAVE_ON_RESTART is enabled.
IPTABLES_SAVE_COUNTER="no"

# Numeric status output
# Value: yes|no, default: yes
# Print IP addresses and port numbers in numeric format in the status output.
IPTABLES_STATUS_NUMERIC="yes"

# Verbose status output
# Value: yes|no, default: yes
# Print info about the number of packets and bytes plus the "input-" and
# "outputdevice" in the status output.
IPTABLES_STATUS_VERBOSE="no"

# Status output with numbered lines
# Value: yes|no, default: yes
# Print a counter/number for every rule in the status output.
IPTABLES_STATUS_LINENUMBERS="yes"

# Reload sysctl settings on start and restart
# Default: -none-
# Space separated list of sysctl items which are to be reloaded on start.
# List items will be matched by fgrep.
#IPTABLES_SYSCTL_LOAD_LIST=".nf_conntrack .bridge-nf"

And in the /etc/sysconfig/iptables file

# Generated by iptables-save v1.4.7 on Sun Sep 23 13:46:03 2018
*nat
:PREROUTING ACCEPT [3:180]
:POSTROUTING ACCEPT [1:71]
:OUTPUT ACCEPT [1:71]
-A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE 
COMMIT
# Completed on Sun Sep 23 13:46:03 2018
# Generated by iptables-save v1.4.7 on Sun Sep 23 13:46:03 2018
*filter
:INPUT ACCEPT [75:6772]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [72:18909]
-A INPUT -p tcp -m state --state NEW -m tcp --dport 1723 -j ACCEPT 
-A INPUT -p tcp -m tcp --dport 21 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 20 -j ACCEPT
COMMIT
# Completed on Sun Sep 23 13:46:03 2018