vsftpd

vlad_t · 04-28-2010, 11:28 AM

Hello,

I'm trying to setup virtual user to be able to drop files for upload into DB. I followed all the steps in vsftpd manual, and can now login from ftp client with my virtual user name/password. And I can browse my home directory, go into subdirectories, open files. But I can't upload or delete and it's a problem. (All the directories are 777)

After long experiments I noticed that if I change anon_upload_enable to YES in config, even with anonymous_enable=NO than my virtual user can upload files.

Anonymous users can't login, so it's kind of solution, but still doesn't feel right

Please help!

vsftpd.conf:

PHP Code:



listen=YES 
listen_port=10021 
pasv_min_port=30000 
pasv_max_port=30999 
anonymous_enable=NO 
anon_upload_enable=YES 
anon_mkdir_write_enable=NO 
anon_other_write_enable=NO 
local_enable=YES 
write_enable=YES 
pam_service_name=vsftpd 
guest_enable=YES 
guest_username=virtual 
user_sub_token=$USER 
local_root=/FTP/$USER 
vsftpd_log_file=/var/log/vsftpd.log

user home dir:

PHP Code:



[root@online vsftpd]# ls -la /FTP/fattach 
total 208 
drwxrwxrwx  3 virtual virtual   4096 Apr 28 12:14 . 
drwxrwxrwx  4 virtual virtual   4096 Apr 27 15:52 .. 
-rw-------  1 virtual virtual   9453 Apr 28 12:14 myPlate-new2.gif 
-rw-------  1 virtual virtual 167424 Apr 28 11:48 Phone List.xls 
drwxrwxrwx  2 virtual virtual   4096 Apr 27 16:26 TEST 
-rwxrwxrwx  1 virtual virtual     10 Apr 28 11:18 test.2 
-rwxrwxrwx  1 virtual virtual      5 Apr 27 15:48 test.txt 
-rw-------  1 virtual virtual   7913 Apr 28 11:47 users_west.csv

Thank you,
Vlad

deadeyes · 05-03-2010, 05:18 AM

anon_upload_enable to YES in config, even with anonymous_enable=NO
If you enable anonymous uploads but do not enable anonymous access there is no real use.

What distro are you using?
Is selinux enabled?

Code:

getenforce

Can you find something in /var/log/messages, ...?

vlad_t · 05-03-2010, 10:06 AM

Quote:

Originally Posted by deadeyes

anon_upload_enable to YES in config, even with anonymous_enable=NO
If you enable anonymous uploads but do not enable anonymous access there is no real use.

What distro are you using?
Is selinux enabled?

Code:

getenforce

Can you find something in /var/log/messages, ...?

Ha! It looks like nonsense, but it's the only configuration that works! If I disable that parameter - named users immediately loose upload access.

There is nothing helpful in the logs I sorted all the files by date - only login info is there. No error messages or nothing else.

Red Hat Enterprise Linux ES release 4 (Nahant Update 4)
Selinux is disabled.

Thank you for your attention

Hangdog42 · 05-03-2010, 11:27 AM

I'm wondering if you don't have just a basic user/group permissions problem. In your original home directory listing, everything is owned by user virtual and group virtual. However, if the user for the vsftpd server (usually ftp) isn't in the virtual group, then none of the virtual users is going to be able to write anything. They simply don't have permission since the writing is being done by the ftp user. Try changing the directory ownership to match the user vsftpd runs under, or put that user in the virtual group.