Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

There works a FTP Server (proftpd) on Centos 6.5, Auth mech is AUTH_FILE and default ROOT is /var/ftp all User should put Files into this directory but only 2 User should get or list this files. Is it possible to deny some FTP Commands for a few Users?

My proftpd Config looks like:

DefaultRoot                     /var/ftp/
AuthPAMConfig                   proftpd
AuthOrder                       mod_auth_file.c  mod_auth_unix.c
RequireValidShell  off
AuthUserFile  /etc/proftpd/ftpd.passwd
AuthGroupFile /etc/proftpd/
AuthPAM off
RequireValidShell off

The content of /etc/proftpd/ is:


And the user file /etc/proftpd/ftpd.passwd looks like:


User1 should be the user who can't get or list Files on the FTP Server. Is it possible?

share|improve this question
It's entirely possible. Did you read the documentation, e.g. ? – Jenny D Dec 11 '13 at 14:39
What section you mean, I can't find a section to deny or reject commands – kockiren Dec 11 '13 at 14:54 should give you a basis to start from. But I'd advise you to read the whole thing. – Jenny D Dec 11 '13 at 15:00
If I understand this section right it is to build a security tree for a user, but the user should use the same directory as the other users but without permission to run the get or list command. – kockiren Dec 11 '13 at 15:19
up vote 0 down vote accepted

Related to this Documentation (In the example section) I use LIMIT Command to reject the FTP Commands. The following was add to the proftpd.conf:

<Directory /var/ftp>
 <Limit ALL>

 <Limit DIRS READ>
    AllowUser user1
    AllowUser user2

User3 can use the LIST Command (ls) but proftpd deny the command and return an empty result and the other User (User1 and User2) can use this Commands.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.