ProFTPd 1

[roeiboot]

what i would want: regular users end up in their home-dir,
some users who have a website end up in their

http://www-dir

and perhaps should be able to also goto their home-dir.. one user (me should be able to access all dirs if possible.

i know i want alot, but i also know that Linux can do alot :}

last thing, how do i nice & neatly remove WU-FTPd, or at least make sure it doesn't interfere with ProFTPd, it doesn't start from inetd.conf because i don't have a inetd.conf..

thx.

 

[w1nn3r]

Erm, most FTPd's log users into thier home directories by default. As for the

http://www clients

logging into thier html dir, what i do is create the directory in /var/

http://www/<website

FQDN> and then run a symbolic link in the user's home dir for the html directory(ln -s /var/

http://www/<website

FQDN>/ /home/<user>/html). Hope this helps some.

 

[fluid11]

The 'DefaultRoot /somedir' directive in the proftpd.conf file is used to set up chroot environments. You can also do this on a per-user or per-group basis using something like this...

DefaultRoot ~ !admins

The above will jail all users in their home directory, except for members of the admins group.

This doc tells you about chroot...

http://proftpd.linux.co.uk/localsite/Userguide/linked/chroot.html

This has example ProFTPD configurations...

http://www.proftpd.org/docs/example-conf.html

To remove Wu-FTPd, you can uninstall the RPM package (assuming that it was installed that way). Do an 'rpm -qa | grep wu'. Look for the name of the Wu-FTPd package and then do a 'rpm -e 'packagename'' minus the version number. For example, if the installed package is called package-1.2.3, then you would just do a 'rpm -e pacakge' to remove it.



ChrisP

 

[roeiboot]

i read those readme multiple times & still i'm confused.. really. got a file called 'ftpusers' with a bunch of names in there that i didn't put there like: bin, daemon, shutdown & more. then i have a file called &quot;ftphosts&quot; that's empty except for some comment lines, a file called &quot;group&quot; with pretty much all the users i created plus some more, example of a entyr is 'Rudeboy:x:501:', that shouldn't be a group but a user, to make a long story short for starters i don't understand the whole group thing that Linux does.. i guess i need to understand that first before i start making a chroot setup.

thanks.

 

[fluid11]

Those files you are talking about have nothing to do with ProFTPd. I think that those are Wu-FTPd files. ProFTPd uses regular UNIX users and groups.

Are you familiar with Apache server and the httpd.conf file? If you are, then setting up ProFTPd should be easy because it uses the same directives as Apache in the proftpd.conf file. If your not familiar with Apache, then nevermind that.

ChrisP

 

[fluid11]

Here's an example proftpd.conf file to get you started...





ServerName &quot;Chris' FTP server&quot;
ServerType standalone
DefaultServer on
DefaultRoot /var/ftp
Port 21
User proftpd
Group proftpd
Umask 007
MaxInstances 10
AllowOverwrite on
UseReverseDNS off
IdentLookups off

<Limit ALL>
Order deny,allow
</Limit>

<Limit Login>
DenyGroup !proftpd
</Limit>

<Limit READ DIRS>
DenyGroup !proftpd
</Limit>

<Directory /var/ftp/upload/*>

<Limit WRITE>
DenyGroup !uploaders
</Limit>

</Directory>

 

[fluid11]

...umm, you might want to change that &quot;Order deny,allow&quot; to &quot;Order allow,deny&quot;, or just delete it completely. I copied and pasted parts of my config file here and edited it for you. I have multiple virtual servers running and I like to lock down security and only allow directories that I tell it to explicitly open. You don't really need this directive since you only have a single DefaultRoot and no vhosts.


ChrisP

 

[roeiboot]

okay, i will forget all those files & 'jump' into the Unix users & groups thing to make/add/organize users & groups.

saw your config file, where do you (since i don't see it allow users to actually get in the ftp.. you 'deny' alot of stuff :}

 

[fluid11]

Actually, a ! (pronounced bang) means NOT. A Deny !somegroup, will deny everybody EXCEPT somegroup.


ChrisP

 

[w1nn3r]

Thanks fluid11, ya learn something new everyday.