I'm trying to add FTP access to the Apache web files, in the past I have done this with an ftpuser
and group arrangement. This time I would like to make it possible to login directly as www-data
(the default Apache user on Debian) to make things a bit cleaner.
I have checked and re-checked all the common issues;
- MinUID is set to 1 (
www-data
has uid 33) www-data
has shell set to/bin/bash
in/etc/passwd
- PAMAuthentication is off
- UnixAuthentication is on
- I have restarted pure-ftpd using
/etc/init.d/pure-ftpd restart
My resulting pure-ftpd run is;
/usr/sbin/pure-ftpd -l unix -A -Y 1 -u 1 -E -O clf:/var/log/pure-ftpd/transfer.log -8 UTF-8 -B
My syslog contains;
Oct 7 19:46:40 Debian-60-squeeze-64 pure-ftpd: ([email protected]) [WARNING] Can't login as [www-data]: account disabled
And my ftp client is giving me;
530 Sorry, but I can't trust you
Am I missing something obvious?
www-group
that would be accessible by Apache & others. The trick is to adjust/etc/apache2/envvars
so Apache creates files that are group writable by addingumask 002
to the bottom of that file and then changingexport APACHE_RUN_GROUP=www-readwrite
to beexport APACHE_RUN_GROUP=www-group
. Then you can assign other users to thatwww-group
and even makewww-group
a user’s default group.