No FTP user Login Logs for pure-ftpd

geek0000

Verified User
Joined
Aug 26, 2020
Messages
13
I have an FTP dependent application that uses the directadmin server for its FTP requirements.
In my application I am getting certain FTP errors. However, When I visit /var/log/pureftpd.log I only see logs for individual file uploads.

Is there a way to enable login logs?
Or is there a way to increase the verbosity? I am using the latest custom build / directadmin / pure-ftpd

System info:
PureFTPd 1.0.49
Directadmin - 1.62.7

In /etc/pure-ftpd.conf
VerboseLog is set to "yes"
 
Are you using Centos? If yes, try this.

In /etc/rsyslog.conf, change this line, add ftp.none at the end like this:
*.info;mail.none;authpriv.none;cron.none;ftp.none /var/log/messages

then add this below that line:
Code:
# Pure FTPD
ftp.*                                                   /var/log/pureftpd-auth.log
After that restart the rsyslog service.

In /etc/logrotate.d/pure-ftpd add pureftpd-auth.log like this:
Code:
/var/log/pureftpd.log /var/log/pureftpd-auth.log {
        missingok
        notifempty
        #postrotate
        #       /usr/bin/kill -HUP `cat /var/run/pure-ftpd.pid 2>/dev/null` 2>/dev/null || true
        #endscript
}

In the/usr/local/directadmin/conf/directadmin.conf file, change or add this line:
brute_force_messages_log=/var/log/pureftpd-auth.log

Also in /etc/csf/csf.conf don't forget to change the ftpd log:
FTPD_LOG = "/var/log/pureftpd-auth.log"
and restart csf/lfd.

Now you will have file transfers in /var/log/pureftpd.log and authentication logs in the /var/log/pureftpd-auth.log file.

FYI I don't even had to set verbose log to yes. But set it to your needs.
 
Last edited:
In the/usr/local/directadmin/directadmin.conf file, change or add this line:
brute_force_messages_log=/var/log/pureftpd-auth.log
I am using CentOS 8. I don't see any file at /usr/local/directadmin/directadmin.conf
there just seems to be a directadmin binary in /usr/local/directadmin/

Also I did find one conf file in /usr/local/directadmin/conf/directadmin.conf!
I think I got it...editing it now!

I also don't have /etc/csf config.
I assume this is because I have not installed CSF plugin
 
Last edited:
Back
Top