Page 1 of 1

Wrong login info randomly sent with 3.5.1

Posted: 2011-10-28 18:23
by kpullen
Recently I’ve been getting bumped off my FTP server randomly during uploads. I open FileZilla and upload some files. After a short period of time, I upload some more but FileZilla fails to reconnect to the FTP server. It retries several times but fails. I talked to the FTP admin and they say their logs show multiple failed login attempts (authentication failures caused by bad password) which locks out the account for 30 minutes or so. This just started happening recently, possibly after upgrading to 3.5.1. I checked recentservers.xml and it has the correct login info. And I can connect fine most of the time, I just randomly get the failure to connect error. My current workaround is to wait 30 minutes or so for the server lockout to expire and then connect again. Did FileZilla recently change the way login info is sent?

Re: Wrong login info randomly sent with 3.5.1

Posted: 2011-10-28 19:04
by luky37
You should post the logfile containing the at least the first failure. Also, if in doubt, you can use a Wireshark to capture the network traffic and verify if indeed Filezilla was sending wrong credentials (but I doubt).

Re: Wrong login info randomly sent with 3.5.1

Posted: 2011-10-28 19:46
by kpullen
Attached is the Log file from our FTP admin. It shows multiple successful and failed logins from FileZilla. The FTP admin says it looks like bad passwords are being sent multiple times.

Re: Wrong login info randomly sent with 3.5.1

Posted: 2011-10-28 20:17
by boco
AFAIK vsftpd has support for FTP over TLS. Use that one whenever possible, it locks bad traffic-manipulating firewalls out.

Re: Wrong login info randomly sent with 3.5.1

Posted: 2011-10-28 21:33
by botg
Unfortunately that log only shows authentication failure, it does not show the reason why authentication failed.

Re: Wrong login info randomly sent with 3.5.1

Posted: 2011-10-29 03:44
by kpullen
I’ve been using FileZilla to upload to the same FTP site since Jan 2010. The failed logins seemed to start after upgrading to 3.5.1. I haven’t made any other changes and the FTP admin says nothing has changed at their site. I’m trying to figure out why I’m suddenly getting locked out of the FTP server when I’m using FileZilla. The FTP admin seems to think there is a problem with the way FileZilla is sending login credentials. Odd, because I can get in and upload for a while, then I get locked out. The log file clearly shows that I can login and upload some files and then start getting failed logins after several successful uploads. Were there any changes to the login process in 3.5.1? Or more specifically, the RE-login or RE-connect process?

Re: Wrong login info randomly sent with 3.5.1

Posted: 2011-10-29 07:12
by botg
Nothing in the login process changed in 3.5.1.

Which version had you been usingbefore updating to 3.5.1?

Re: Wrong login info randomly sent with 3.5.1

Posted: 2011-10-29 14:10
by kpullen
I upgraded from 3.4.0 to 3.5.0 on 5/24/2011 and upgraded to 3.5.1 on 9/8/2011. Can I reinstall 3.4.0 or 3.5.0 to see if that helps? I still have all the previous install files.

Re: Wrong login info randomly sent with 3.5.1

Posted: 2011-10-29 20:40
by boco
For testing, sure. To get support and for everyday use, the latest version is preferred, however.

All previous setups can be downloaded on the project page or http://download.filezilla-project.org.

Re: Wrong login info randomly sent with 3.5.1

Posted: 2011-10-30 08:41
by botg
The server administrator could look into PAM's logfile to find out why the authentication failed.

Re: Wrong login info randomly sent with 3.5.1

Posted: 2011-10-31 04:24
by kpullen
I don't know what a PAM's log file is, but I can check with the site admin. I installed 3.5.0 after my last post and I've had it running continuously since then. I haven’t been locked out since I went back to 3.5.0. I think I’ll stick with that for now since it seems to work. If I get another login failure with 3.5.0 I’ll dig into it again. If I don’t get anymore failures, I may at some point try 3.5.1 again to see if the failures come back with the upgrade.

Re: Wrong login info randomly sent with 3.5.1

Posted: 2011-10-31 05:50
by boco