FTP Permissions

varunbihani · 03-24-2005, 05:11 AM

How do I give FTP permisions to the user of my system.
I need to connect to my Linux server throug FTP client (Cute FTP, WsFTP) on my windows machine.

How do I allow my Linux users to connect through FTP clients?? right now I am not even able to connect throug root..

trickykid · 03-24-2005, 07:02 AM

Well first you have to setup an FTP server on the machine... and don't login as root, from remote locations.. its really bad security habits most should break out of.

wesleywestervel · 03-24-2005, 09:34 AM

First off lets install a FTP-server on your linux machine
go to non-grapichal mode ( textmode) login.

#download proftpd

command:

Code:

wget ftp://ftp.proftpd.org/distrib/source...1.2.10.tar.bz2
this will store proftpd in the direcotry where you executed this command

#installing/configureing proftpd
in the direcotry where you download proftpd

Code:

tar -xzvf proftpd-1.2.10.tar.bz2
cd proftpd-1.2.10 ( or the mapname of proftpd)
make
make install

#now proftpd is installed you have to configure the config file (proftpd.conf) that is located at /usr/local/etc/:

Code:

cd /usr/local/etc/
vi proftpd.conf

edit the following

Code:

# A basic anonymous configuration, no upload directories.  If you do not
# want anonymous users, simply delete this entire <Anonymous> section.
<Anonymous ~ftp>
  User				ftp
  Group				ftp

  # We want clients to be able to login with "anonymous" as well as "ftp"
  UserAlias			anonymous ftp

  # Limit the maximum number of anonymous logins
  MaxClients			10

  # We want 'welcome.msg' displayed at login, and '.message' displayed
  # in each newly chdired directory.
  DisplayLogin			welcome.msg
  DisplayFirstChdir		.message

  # Limit WRITE everywhere in the anonymous chroot
  <Limit WRITE>
    DenyAll
  </Limit>
</Anonymous>

change <Anonymous ~ftp> into <Anonymous /your/direcorty/you/want/to/share> for example <Anonymous /home>

hit esc
shift + :
w
q

#now for the finishing touch

#give right to the map for testing ( nog save chmod)

Code:

chmod 777 path_of_the_map_you_gave_above
for example
chmod 777 /home

create 2 users with a group ( if then don't exist )

Code:

groupadd ftp
groupadd nogroup

useradd -g ftp ftp
useradd -g nogroup nobody

now you can start proftpd

Code:

cd /usr/local/sbin/
./proftpd -c /usr/local/etc/proftpd.conf

P.S.
all above works local. if you want some friends to access your ftp sever from outside your local lan, you have to edit IPTABLES if your running those, forward a port.
http://www.portforward.com/ here is some info about your router/modem.
you should forward 20 21 to the IP that your linux machine is running