| Freesco, NND, CDN, EOS http://forum.freesco.pl/ |
|
| Proftpd - problem z konfiguracja :( http://forum.freesco.pl/viewtopic.php?f=35&t=6020 |
Strona 1 z 1 |
| Autor: | Anonymous [ czwartek, 2 grudnia 2004, 17:57 ] |
| Tytuł: | Proftpd - problem z konfiguracja :( |
Na pocztaku witam wszystkich Utworzylem nowego usera przy pomocy USERADD ale za chiny nie moge sprawic zeby mozna bylo sie dzieki niemu tworzyc katalogow lub tez obic cokolwiek na serwerze jesli to pomoze to oto moj proftpd.conf: Cytuj: # BOF # # Doc Nielsen's Custom made proftpd.conf # Should work on all Freesco Systems # This file was created while my winamp was playing # Tim McGraw - Something Like That # And therefore might be a bit wild ;o) # # Server Main Variables ServerName "ProFTPD on Freesco (Package By Doc Nielsen)" ServerIdent on "ProFTPD on Freesco (Package By Doc Nielsen)" ServerType standalone ServerAdmin " root@localhost " # Change to your email address or ignore it Port 21 DefaultServer on # Master switch DeferWelcome on # dont send welcome until user is logged in RootLogin on # Well its not smart, but most people dont have any other user than root Identlookups off # why bother? identd can be anything UseReverseDNS off # Names can be spoofed. IP's can't be spoofed that easily LoginPasswordPrompt off # dont ask for password, if username doesnt exist #PassivePorts 60000 60050 # PASV ports to use #MasqueradeAddress ftp.docnielsen.dk # Change to your dyndns name # # AUTH and FILE Settings Umask 0133 0022 User nobody # and only nobody Group nobody DefaultRoot /mnt/home/ftp AuthUserFile /mnt/router/etc/passwd # where to read user/ passwords. AuthGroupFile /mnt/router/etc/group # where to read groups UseFtpUsers off # dont use /etc/ftpusers PersistentPasswd on # allow reading /etc/passwd even after chroot AccessGrantMsg "Access granted. Welcome %u !!!" # # Load Balancing MaxClientsPerHost 5 "Sorry, you may not connect more than 5 times." MaxClients 10 "Sorry, Maximum users allowed is 10." MaxLoginAttempts 5 # Max number of login attempts before disconnecting MaxInstances 20 # Max number of running processes MaxLoad 10.0 "Server is very busy. Seek life elsewhere..." # # Timeouts TimeoutIdle 60 # you can idle a lot TimeoutLogin 30 # you got 30 seconds to login TimeoutNoTransfer 60 # you can idle a lot TimeoutStalled 30 # if a transfer stalls, we give it 60 seconds to resume in TimesGMT on # GMT times are best - makes the world stand still # # Speed Limits RateReadBPS 104857600 RateWriteBPS 104857600 RateReadFreeBytes 104857600 RateWriteFreeBytes 104857600 RateReadHardBPS on RateWriteHardBPS on # # Logging (makes 1 big logfile, and shows warnings on tty3) SystemLog /dev/tty3 # log warnings to tty3 SyslogLevel warn # SyslogLevel emerg|alert|crit|error|warn|notice|info|debug TransferLog NONE # you want a transferlog? make it /var/proftpd/transfer.log # logformat: %A Anonymous username %b Bytes sent for request # %f/%F Absolute/Relative Filename %h user host %a user ip %l user ident # %m method/command %p local port %v local server name %P Process id(pid) # %r full command line %t time %T transfer time %s Numeric FTP code %u user # The logfile is disabled, since it can grow quite big. enable if you like LogFormat xfer "%t %a %u (%r) %f" # how the log "xfer" should be #ExtendedLog /var/proftpd/proftpd.log auth,read,write xfer # the xfer log #ScoreboardPath /var/proftpd/score/ # each pid has a scoreboard. rc_proftpd clears it. # # Global settings <Global> <Limit LOGIN> Allow from All # anyone can log in IgnoreHidden on # hide hidden files </Limit> AllowForeignAddress on # even strangers can try to log in PathDenyFilter "(^|/)[-.~]" # ignore+hide files starting with - . ~ AllowOverwrite off # well its ok to overwrite your own files UseGlobbing off # globbing = wildcards in filename ShowSymlinks on # yeah lets see thoes symlinks </Global> # # Setting rights for home directory <Directory /mnt/home/ftp> AllowStoreRestart on # you may resume uploads AllowRetrieveRestart on # you may resume downloads HideNoAccess on # hide files you dont have access to </Directory> # # Disable Anonymous completely <Anonymous /tmp> User nobody # Anon = nobody Group nobody # ditto UserAlias anonymous nobody MaxClients 10 <Limit All Login> Deny From All DenyAll </Limit> </Anonymous> # # Please check the mod_time config webpage for config tips # http://www.castaglia.org/proftpd/modules/mod_time.html #DisplayAfterHours /var/proftpd/AfterHours.txt #NamedTime all-hours 00:00:00-23:59:59 * # from midnight to midnight #NamedTime normal-hours 08:00:00-17:00:00 1-5 # from 8am to 5pm #NamedTime after-hours !08:00:00-17:00:00 0,6 # from 5pm to 8am #CommandTimes all normal-hours # evryone may log in 8am to 5pm #GroupCommandTimes users all all-hours # users may log in at all times #UserCommandTimes root all all-hours # root may log in at all times #UserCommandTimes nobody NONE all-hours # anonymous may do nothing at all times # # Please check the mod_quotatab config webpage for config tips # http://www.castaglia.org/proftpd/module ... tatab.html # http://www.castaglia.org/proftpd/modules/ftpquota.html # the ftpquota script is a perl-script (thus requires the perl package) # QuotaTab settings #QuotaEngine off #QuotaLimitTable file /var/proftpd/FTPQuota.DB #QuotaLog /var/proftpd/FTPquota.log #QuotaTallyTable file /var/proftpd/FTPTally.DB #QuotaDisplayUnits "Kb" # # Quota settings #Quotas off #DefaultQuota 1024 #QuotaType soft #QuotaCalc off #QuotaExempt 0 #no quota for uid 0 (root) #QuotaBlockSize 1 #QuotaBlockName "byte" # # Ratio settings #Ratios off #SaveRatios off #RatioFile /etc/proftpd.ratio #RatioTempFile /etc/proftpd.ratio.temp #CwdRatioMsg "Please upload!" #FileRatioErrMsg "Come on, you can send more files than that...." #ByteRatioErrMsg "This file is %i big, you know...." #LeechRatioMsg "You have Unlimited Leech Access!" #UserRatio root 0 0 0 0 # Leech Access to root #HostRatio 192.168.1.10 100 10 5 100000 # 100:1 files, 10 file credit, 5:1 bytes, 100k byte credit #GroupRatio 0 4 100 105 100000 #AnonRatio billyg@microsoft.com 1 0 1 0 # 1:1 ratio, no credits # # EOF z gory dzieki od razu za pomoc, dodam jeszcze ze UID jest kolejny z mozliwych i w plikach passwd i group nie ma zadych konfliktow oto jak wyglada wpis nowego usera w passwd: Cytuj: ftp:************:501:101::/mnt/home/ftp:/bin/sh gdzie gwiazdki to haslo a oto wpis w pliku group: Cytuj: ftp::101:ftp
pomozcie prosze |
|
| Autor: | Maciek [ czwartek, 2 grudnia 2004, 19:02 ] |
| Tytuł: | |
A czy /mnt/home/ftp należy do odpowiedniego usera i grupy? |
|
| Autor: | Anonymous [ czwartek, 2 grudnia 2004, 22:42 ] |
| Tytuł: | |
a w jaki sposob to sprawdzic lub gdzie to moge znalezc ? |
|
| Autor: | JurekW [ piątek, 3 grudnia 2004, 01:17 ] |
| Tytuł: | |
Przejdź do katalogu /mnt/home i wydaj polecenie ls -l Otrzymasz coś jak poniżej [Linux] ls -l drwxrwxr-- 29 ftp01 users 4096 Nov 29 10:03 ftp gdzie zamiast ftp01 i users Ty powinieneś mieć ftp i ftp. Jeśli nie, to powinieneś to zmienić poleceniem: chown ftp.ftp /mnt/home/ftp Do Twojego proftpd.conf dodałbym taką sekcję: # poczatek definicji katalogu <Directory /mnt/home/ftp> AllowOverwrite yes <Limit All> AllowUser ftp DenyAll </Limit> </Directory> # koniec definicji katalogu np. po sekcji # Disable Anonymous completely Poza tym zmieniłbym DefaultRoot /mnt/home/ftp na DefaultRoot ~ oraz wyłączyłbym możliwość logowania roota na ftp (parametr RootLogin). Pozdrawiam |
|
| Autor: | Anonymous [ piątek, 3 grudnia 2004, 07:21 ] |
| Tytuł: | |
dzięki z gory dzieki za odpowiedz |
|
| Autor: | JurekW [ poniedziałek, 6 grudnia 2004, 15:29 ] |
| Tytuł: | |
To zależy, co rozumiesz pisząc o dostępie do wszystkich katalogów. Bo taki ma root, ale żaden rozsądny admin nie zezwoli na logowanie roota do ftp. A za to jest odpowiedzialny parametr RootLogin. Jeśli chodzi Ci o dostęp do katalogów domowych użytkowników, to np. można utworzyć jakiegoś użytkownika, z katalogiem domowym /mnt/home i już; zapewne trzeba będzie jeszcze nadać odpowiednie uprawnienia temu użytkownikowi. Pozdrawiam |
|
| Strona 1 z 1 | Strefa czasowa UTC+2godz. |
| Powered by phpBB® Forum Software © phpBB Group https://www.phpbb.com/ |
|