Tag Info

Hot answers tagged

7

You can "preseed" answers so that debconf sees you've answered the question already, and doesn't bother asking it again. You need some tools from the debconf-utils package: sudo apt-get install debconf-utils Install your program and manually answer the questions once. Then, you can ask debconf what it stored in its database: debconf-get-selections | ...


6

To check if proftpd is running ps -ef | grep proftpd proftpd 15530 1 0 21:26 ? 00:00:00 proftpd: (accepting connections) iain 15731 13855 0 21:49 pts/1 00:00:00 grep proftpd To find out what is bound to port 21 sudo lsof -i :21 COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME proftpd 15530 proftpd 1u IPv6 1641458 ...


6

System >> Users and Groups >> Create a new user Enter the Username Change Shell to /sbin/nologin Check on Normal password radio button and enter the password Change Existing group to ftp (You may leave all other options at default) Click on the Create button and done. If it doesn't work, post the error message when logging in with new created account. ...


5

Groups and SGID. user1 would have group membership in www-data and you would set everything group writable under [domain]. Set user1's home directory to /var/www/[domain]. You would also want to set the SGID on [domain] and all directories under it, which would cause permissions to be inherited. (g+s) Be aware, user1 would have access to all Web content. ...


5

According to the HideFiles documentation, HideFiles only gives files "hidden-ness", it doesn't actually hide them. To hide them, you need to use IgnoreHidden within a Limit block. So, try this: <Directory /home/ftp_user/my_project> HideFiles ^\.svn$ <Limit ALL> AllowUser ftp_user IgnoreHidden on </Limit> ...


5

You have to install it via EPEL http://dl.fedoraproject.org/pub/epel/6/x86_64/repoview/proftpd.html You can grab the single RPM or install the EPEL repo as follows rpm -ivh http://download.fedoraproject.org/pub/epel/6/i386/epel-release-6-5.noarch.rpm yum update yum install proftpd


5

FTP uses more than a single port. TCP 21 is for the command channel only. When you do a directory listing, you're transferring the result through the data channel. Since you're using passive mode, the server will open a random high port (> 1024) for the data channel and the client must open a second TCP connection to that port. Typically, right after the ...


4

Not directly FTP-related, but I'd go and solve the cause (customers doing repeated downloads of the whole zone file) rather than slowing things around (with a possibly more complex setup). Have you considered: giving out read only rsync access to zone files? it's standard, opensource, multiplatform (windows too), easily scriptable, good for frequent ...


4

Try commenting out DefaultRoot I think it may override the values read from the database backend. EDIT: If DefaultRoot is set and anything other than ~ then the user will be jailed in a tree rooted at DefaultRoot. If DefaultRoot is ~ then the user will be jailed in a tree rooted at theit home directory.


4

Alright I fixed it. The config files where bound to another package (proftpd-basic). So using the following commands fixed the problems: apt-get purge proftp* apt-get install proftpd


4

Any shell you want to use with proftpd should be listed in the /etc/shells file (http://www.proftpd.org/docs/directives/linked/config_ref_RequireValidShell.html) You should add /bin/false to /etc/shells or set RequireValidShell off in the proftpd config good luck!


3

You can use the setting DefaultRoot to chroot a group to the /var/www/[domain] directory. For example, this will chroot the group group1 to example.net: DefaultRoot /var/www/example.net group1 Add to proftpd.conf and restart ftpd. The parameter after the path accepts boolean input.


3

There's a variety of different solutions for things like this. I prefer shell scripting, others might prefer other methods. For interaction with things that require input and don't have flags to specify the answer, you can redirect input. I would read the apt-get manpage before taking this approach, as it may have native support for what you are trying to ...


3

You don't need proftpd to do SFTP, you can do that natively with ssh. If for some reason you want to use proftpd (i.e. you want to integrated with non-system accounts easier). You'll want to deny access to the login verb for the server, then create a specific virtual host with the sftp engine on and allow the login verb. To accomplish that your ...


3

You could also look at something like Fail2Ban which does have example setups for ProFTPd.


3

You could just use a configuration like this: <Directory ~/site/backups> <Limit WRITE> DenyAll </Limit> </Directory> which essentially does the same as this configuration: <Directory ~/site/backups> <!-- Delete Files --> <Limit DELE> DenyAll </Limit> <!-- Remove ...


3

Use netstat to see what process is holding port 21: # netstat -tnlp And from there you can use RPM to see what package owns the file to stop it and remove it from init.d.


3

To understand active vs. passive FTP: link.


3

Purge and install should work, so you may have some more severe underlying problem. You may also try: dpkg-reconfigure proftpd and see what results you get.


3

Vsftpd is very easy to configure. I think your difficulty is because you're confusing a port range configuration for passive FTP with the listening port for the command channel (what normally runs on port 21.) Give this document a once-over to see what I mean: http://slacksite.com/other/ftp.html The configuration option you're looking for in vsftpd.conf to ...


3

You will have to give your proftpd virtual users ownership of their files and directories just like you would a real user. You can do this with chown. As the users aren't system users you will have to use the numeric UID:GID e.g. if username is UID 10001 and GID 1111 (from the mysql database) then chown 10001:1111 /var/www/vhosts/sites/username chown -R ...


3

The DisplayFirstChdir directive is deprecated. Comment it out and try again.


3

If you're experiencing the same issue as I am you will find in your server's auth log that proftpd first tries pam_unix before falling back to the configured authentication method. For me I am using authuserfile and not Unix authentication. As with you my first attempts always fail and the second attempts always succeed. The proftpd documentation would have ...


3

If your web server can write to all of your files, then the site isn't necessarily secure; any (known or unknown) exploit against nginx, PHP (or Rails or whatever stack etc.) or the web applications you may be using means that an attacker can write to everything. The most secure method is to have all files owned by a user other than the user that the web ...


3

The problem is that %u refers to the local user (which in your case is proftpd). You shoulduse %U (note the capital U), which refers to the FTP user. Note the last paragraph on the ProFTPd SQLUserInfo page, above "See Also".


3

Direct from the proftpd docs: Question: If virtual users are not defined in the system /etc/passwd file, then where are they defined? Answer: There are several other locations where user information can be stored, e.g. AuthUserFiles, LDAP directories, SQL databases, and RADIUS servers. Note that virtual users are not defined in the proftpd.conf file ...


3

Check that SElinux isn't causing you problems setenforce 0 If this fixes your problem then turn SELinux back on (setenforce 1) and then try setting the ftp_home_dir boolean setsebool -P ftp_home_dir on which will allow the ftp daemon to access user home directories.


3

If this is a RHEL or CentOS EL6.x system, it's important to modify your PAM configuration, as the one that ships with the package is no good: Edit: /etc/pam.d/proftpd to reflect: #%PAM-1.0M-1.0 auth required pam_listfile.so item=user sense=deny file=/etc/ftpusers onerr=succeed auth required pam_shells.so auth include system-auth account include system-auth ...


2

With the help of proftpd support forums, I figured this one. UIDs and GUIDs in AuthUserFile must match one(s) of real Linux user(s) with the right ownership/permissions for the relevant FTP directories.


2

chroot is an operating system call that restricts an application to be able to access only a subset of the filesystem -- in effect, that part of the filesystem becomes the root, which it can't see outside of. This is done for security reasons, to create a "jail" which an FTP client can't see beyond.



Only top voted, non community-wiki answers of a minimum length are eligible