Proftpd
 

I am using Mandrake 8.2 and trying to config proftpd.

From the start I am lost with proftpd, I can't seem to get any user to login to the ftp server either remotely or locally login to proftpd.

I need to find a real basic help doc on its setup, I do not want to do anything fancy, just be able to give one or 2 users ability to ftp files to the /var/www directory..

Any Suggestions or help would be appreciated


Tank - the old guy

Well, 2 things:

This application is heavily documented over at it's homepage www.proftpd.org

I have my proftpd.conf file available for viewing:
http://masterc.no-ip.org/share/proftpd.conf

You mainly want to look at setting up a DefaultRoot entry that looks like:
DefaultRoot /var/www

This will automatically set them in that directory when they login.

You should be aware that if you enable users to use FTP on your machine, and you have ssh installed that they can use that as well (under normal circumstances).

Cool

Thanks, I will try your config file

I tried your file, my server does not like the "standalone" ..

I can't read it it errors to fast, but the proftpd server failed to start and echoed something about the command line argument standalone

Mine is just an example, you'll actually want to compare it with the documentation on the proftpd.org website and find one to suit your needs.

The standalone however shoudn't be causing you errors, more importantly, you should be able to view those errors in your /var/log/syslog or /var/log/messages file. Look also at your /var/log/proftpd.log file for errors specific to proftpd itself.

Cool

Lights are coming on, I can now login anonmyous but am having a PAM password issue.

I remember reading about PAM on the porftd.org site.. I will read it again..


Thanks for your help

You're welcome, and if things don't give that final "crank" to turn the wheels, let me know. I'll be happy to explain things a bit further for you if necessary.

Cool

I traced the login problem to PAM

I am having trouble with PAM, in the log file I get an invalid password for the user.

Is this PAM config directing to another file call ftpusers?


#%PAM-1.0

auth required /lib/security/pam_listfile.so item=user sense=deny file=/etc/ftpusers onerr=succeed
auth required /lib/security/pam_pwdb.so shadow nullok
# This is disabled because anonymous logins will fail otherwise,
# unless you give the 'ftp' user a valid shell, or /bin/false and add
# /bin/false to /etc/shells.
#auth required /lib/security/pam_shells.so
account required /lib/security/pam_pwdb.so
session required /lib/security/pam_pwdb.so

No one but anonymous can login.. that ftpusers file does not exist on my system..

???

/etc/ftpusers does not exist? That's ok, just odd. You can create it, inside you will need to define which users should not/cannot login via ftp; those such as root and bin should be listed.

As for the pam error, how are you creating your users? I am not that familiar with PAM to troubleshoot with it, however it may be that you need to use pam to add the users to a pam file somewhere. See if you've got man pam, or search www.google.com/linux for more info on PAM to see if you can find out if that's your problem.

Cool

This is a journey!

I have no ftpusers file BUT I have a ftpaccess file and that seems to control who has access via ftp? I can add a line to it and then the user can ftp to the default directory in the proftpd.conf.

The only thing now is the user can not wite to the directories, I chmod the directories with a 775 and made 775 the value in proftpd.conf

any ideas?

That's a Directory call I believe, look for a section like this:
<Directory /path>
</Directory>

Inside there add:
<Limit WRITE>
AllowAll
</Limit WRITE>
This will allow the users to write in that directory. If you want them to have all rights, you can take away the <Limit WRITE> directives, and just have AllowAll inside the directory brackets, like this:
<Directory /home/username/*>
AllowAll
</Directory>

HTH

Cool

Sorry to interupt but how looks the ftpuser file inside

According to this post, one does not exist ;)

Cool