Restrict FTP commands

vikas027 · 04-11-2011, 04:13 PM

Hi All,

I have CentOS 5.5 boxes with vsftpd installed on them and users are authenticated through LDAP (Windows AD).

I need to restrict FTP commands like mget, mput, ls, e.t.c. for users.
The commands permissions may vary from user to user.

Is it somehow possible in VSFTPD or some other FTP package like pureftp or proftp.

chrism01 · 04-12-2011, 02:16 AM

I'd bookmark this page http://vsftpd.beasts.org/vsftpd_conf.html and read the cmds_allowed, cmds_denied sections.

vikas027 · 04-12-2011, 02:50 AM

Quote:

Originally Posted by chrism01

I'd bookmark this page http://vsftpd.beasts.org/vsftpd_conf.html and read the cmds_allowed, cmds_denied sections.

Very useful Chris. Many thanks.
I am going to try this and post my results here if in case I stuck somewhere, But does it have an option to say create a group of users and then restrict commands to them only and everybody else has access to all commands.

vikas027 · 04-15-2011, 11:53 AM

Chris this really worked well for me, But I am looking for some options in which I can set manage access to FTP commands to specific users.

For E.g.
user john1 can access mget command
and at the same time
user john2 cannot access mget command

What "cmds_allowed" option does is that it allows/disables commands for all (not specific) users.

However, I believe "cmds_denied" option is not valid anymore.

Code:

[root@box1 ~]# service vsftpd restart
Shutting down vsftpd:                                      [  OK  ]
Starting vsftpd for vsftpd: 500 OOPS: unrecognised variable in config file: cmds_denied
                                                           [FAILED]

vikas027 · 04-18-2011, 07:43 AM

Dear Chris/All,

Any ideas ?

chrism01 · 04-18-2011, 10:00 PM

You'll have to read that entire page I'm afraid;. I don't use vsftpd, but I do know it has a LOT of options.
You may find a way in there to do that.
As re cmds_denied, that's new as of

Quote:

. (Added in v2.1.0).

in that link.

Good luck.

vikas027 · 04-19-2011, 09:08 AM

Quote:

Originally Posted by chrism01

You'll have to read that entire page I'm afraid;. I don't use vsftpd, but I do know it has a LOT of options.
You may find a way in there to do that.
As re cmds_denied, that's new as of
in that link.

Good luck.

I have read the whole page, could not find anything.

Do you have any idea about any other FTP package which could serve my purpose (like proFTP, pureFTP e.t.c.) ?