Freesco, NND, CDN, EOS http://forum.freesco.pl/ |
|
Proftpd - problem z konfiguracja :( http://forum.freesco.pl/viewtopic.php?f=35&t=6020 |
Strona 1 z 1 |
Autor: | Anonymous [ czwartek, 2 grudnia 2004, 17:57 ] |
Tytuł: | Proftpd - problem z konfiguracja :( |
Na pocztaku witam wszystkich ![]() ![]() Utworzylem nowego usera przy pomocy USERADD ale za chiny nie moge sprawic zeby mozna bylo sie dzieki niemu tworzyc katalogow lub tez obic cokolwiek na serwerze ![]() ![]() ![]() jesli to pomoze to oto moj proftpd.conf: Cytuj: # BOF # # Doc Nielsen's Custom made proftpd.conf # Should work on all Freesco Systems # This file was created while my winamp was playing # Tim McGraw - Something Like That # And therefore might be a bit wild ;o) # # Server Main Variables ServerName "ProFTPD on Freesco (Package By Doc Nielsen)" ServerIdent on "ProFTPD on Freesco (Package By Doc Nielsen)" ServerType standalone ServerAdmin " root@localhost " # Change to your email address or ignore it Port 21 DefaultServer on # Master switch DeferWelcome on # dont send welcome until user is logged in RootLogin on # Well its not smart, but most people dont have any other user than root Identlookups off # why bother? identd can be anything UseReverseDNS off # Names can be spoofed. IP's can't be spoofed that easily LoginPasswordPrompt off # dont ask for password, if username doesnt exist #PassivePorts 60000 60050 # PASV ports to use #MasqueradeAddress ftp.docnielsen.dk # Change to your dyndns name # # AUTH and FILE Settings Umask 0133 0022 User nobody # and only nobody Group nobody DefaultRoot /mnt/home/ftp AuthUserFile /mnt/router/etc/passwd # where to read user/ passwords. AuthGroupFile /mnt/router/etc/group # where to read groups UseFtpUsers off # dont use /etc/ftpusers PersistentPasswd on # allow reading /etc/passwd even after chroot AccessGrantMsg "Access granted. Welcome %u !!!" # # Load Balancing MaxClientsPerHost 5 "Sorry, you may not connect more than 5 times." MaxClients 10 "Sorry, Maximum users allowed is 10." MaxLoginAttempts 5 # Max number of login attempts before disconnecting MaxInstances 20 # Max number of running processes MaxLoad 10.0 "Server is very busy. Seek life elsewhere..." # # Timeouts TimeoutIdle 60 # you can idle a lot TimeoutLogin 30 # you got 30 seconds to login TimeoutNoTransfer 60 # you can idle a lot TimeoutStalled 30 # if a transfer stalls, we give it 60 seconds to resume in TimesGMT on # GMT times are best - makes the world stand still # # Speed Limits RateReadBPS 104857600 RateWriteBPS 104857600 RateReadFreeBytes 104857600 RateWriteFreeBytes 104857600 RateReadHardBPS on RateWriteHardBPS on # # Logging (makes 1 big logfile, and shows warnings on tty3) SystemLog /dev/tty3 # log warnings to tty3 SyslogLevel warn # SyslogLevel emerg|alert|crit|error|warn|notice|info|debug TransferLog NONE # you want a transferlog? make it /var/proftpd/transfer.log # logformat: %A Anonymous username %b Bytes sent for request # %f/%F Absolute/Relative Filename %h user host %a user ip %l user ident # %m method/command %p local port %v local server name %P Process id(pid) # %r full command line %t time %T transfer time %s Numeric FTP code %u user # The logfile is disabled, since it can grow quite big. enable if you like LogFormat xfer "%t %a %u (%r) %f" # how the log "xfer" should be #ExtendedLog /var/proftpd/proftpd.log auth,read,write xfer # the xfer log #ScoreboardPath /var/proftpd/score/ # each pid has a scoreboard. rc_proftpd clears it. # # Global settings <Global> <Limit LOGIN> Allow from All # anyone can log in IgnoreHidden on # hide hidden files </Limit> AllowForeignAddress on # even strangers can try to log in PathDenyFilter "(^|/)[-.~]" # ignore+hide files starting with - . ~ AllowOverwrite off # well its ok to overwrite your own files UseGlobbing off # globbing = wildcards in filename ShowSymlinks on # yeah lets see thoes symlinks </Global> # # Setting rights for home directory <Directory /mnt/home/ftp> AllowStoreRestart on # you may resume uploads AllowRetrieveRestart on # you may resume downloads HideNoAccess on # hide files you dont have access to </Directory> # # Disable Anonymous completely <Anonymous /tmp> User nobody # Anon = nobody Group nobody # ditto UserAlias anonymous nobody MaxClients 10 <Limit All Login> Deny From All DenyAll </Limit> </Anonymous> # # Please check the mod_time config webpage for config tips # http://www.castaglia.org/proftpd/modules/mod_time.html #DisplayAfterHours /var/proftpd/AfterHours.txt #NamedTime all-hours 00:00:00-23:59:59 * # from midnight to midnight #NamedTime normal-hours 08:00:00-17:00:00 1-5 # from 8am to 5pm #NamedTime after-hours !08:00:00-17:00:00 0,6 # from 5pm to 8am #CommandTimes all normal-hours # evryone may log in 8am to 5pm #GroupCommandTimes users all all-hours # users may log in at all times #UserCommandTimes root all all-hours # root may log in at all times #UserCommandTimes nobody NONE all-hours # anonymous may do nothing at all times # # Please check the mod_quotatab config webpage for config tips # http://www.castaglia.org/proftpd/module ... tatab.html # http://www.castaglia.org/proftpd/modules/ftpquota.html # the ftpquota script is a perl-script (thus requires the perl package) # QuotaTab settings #QuotaEngine off #QuotaLimitTable file /var/proftpd/FTPQuota.DB #QuotaLog /var/proftpd/FTPquota.log #QuotaTallyTable file /var/proftpd/FTPTally.DB #QuotaDisplayUnits "Kb" # # Quota settings #Quotas off #DefaultQuota 1024 #QuotaType soft #QuotaCalc off #QuotaExempt 0 #no quota for uid 0 (root) #QuotaBlockSize 1 #QuotaBlockName "byte" # # Ratio settings #Ratios off #SaveRatios off #RatioFile /etc/proftpd.ratio #RatioTempFile /etc/proftpd.ratio.temp #CwdRatioMsg "Please upload!" #FileRatioErrMsg "Come on, you can send more files than that...." #ByteRatioErrMsg "This file is %i big, you know...." #LeechRatioMsg "You have Unlimited Leech Access!" #UserRatio root 0 0 0 0 # Leech Access to root #HostRatio 192.168.1.10 100 10 5 100000 # 100:1 files, 10 file credit, 5:1 bytes, 100k byte credit #GroupRatio 0 4 100 105 100000 #AnonRatio billyg@microsoft.com 1 0 1 0 # 1:1 ratio, no credits # # EOF z gory dzieki od razu za pomoc, dodam jeszcze ze UID jest kolejny z mozliwych i w plikach passwd i group nie ma zadych konfliktow oto jak wyglada wpis nowego usera w passwd: Cytuj: ftp:************:501:101::/mnt/home/ftp:/bin/sh gdzie gwiazdki to haslo a oto wpis w pliku group: Cytuj: ftp::101:ftp
pomozcie prosze |
Autor: | Maciek [ czwartek, 2 grudnia 2004, 19:02 ] |
Tytuł: | |
A czy /mnt/home/ftp należy do odpowiedniego usera i grupy? |
Autor: | Anonymous [ czwartek, 2 grudnia 2004, 22:42 ] |
Tytuł: | |
a w jaki sposob to sprawdzic lub gdzie to moge znalezc ? |
Autor: | JurekW [ piątek, 3 grudnia 2004, 01:17 ] |
Tytuł: | |
Przejdź do katalogu /mnt/home i wydaj polecenie ls -l Otrzymasz coś jak poniżej [Linux] ls -l drwxrwxr-- 29 ftp01 users 4096 Nov 29 10:03 ftp gdzie zamiast ftp01 i users Ty powinieneś mieć ftp i ftp. Jeśli nie, to powinieneś to zmienić poleceniem: chown ftp.ftp /mnt/home/ftp Do Twojego proftpd.conf dodałbym taką sekcję: # poczatek definicji katalogu <Directory /mnt/home/ftp> AllowOverwrite yes <Limit All> AllowUser ftp DenyAll </Limit> </Directory> # koniec definicji katalogu np. po sekcji # Disable Anonymous completely Poza tym zmieniłbym DefaultRoot /mnt/home/ftp na DefaultRoot ~ oraz wyłączyłbym możliwość logowania roota na ftp (parametr RootLogin). Pozdrawiam |
Autor: | Anonymous [ piątek, 3 grudnia 2004, 07:21 ] |
Tytuł: | |
dzięki ![]() z gory dzieki za odpowiedz |
Autor: | JurekW [ poniedziałek, 6 grudnia 2004, 15:29 ] |
Tytuł: | |
To zależy, co rozumiesz pisząc o dostępie do wszystkich katalogów. Bo taki ma root, ale żaden rozsądny admin nie zezwoli na logowanie roota do ftp. A za to jest odpowiedzialny parametr RootLogin. Jeśli chodzi Ci o dostęp do katalogów domowych użytkowników, to np. można utworzyć jakiegoś użytkownika, z katalogiem domowym /mnt/home i już; zapewne trzeba będzie jeszcze nadać odpowiednie uprawnienia temu użytkownikowi. Pozdrawiam |
Strona 1 z 1 | Strefa czasowa UTC+2godz. |
Powered by phpBB® Forum Software © phpBB Group https://www.phpbb.com/ |