how to deny all users in vsftp except one?

lzyking · 12-10-2002, 01:45 AM

I use Redhat 8.0 , and vsftp , now I want to deny all users in vsftp except one user , I found that there are 3 files in /etc/

how can i do ? Dose someone have articles intruduce vsftp?

thanks

born4linux · 12-10-2002, 04:17 AM

edit /etc/vsftpd.conf and add the following:

userlist_enable=YES
userlist_deny=YES
userlist_file=/etc/vsftpd.user_list

Then edit /etc/vsftpd.user_list and add he usernames that you want to deny ftp access. You can do this the other way around (add the users that you will 'allow to ftp'). run this:

man vsftpd.conf

And do a search for options starting with 'userlist_'.

hotrodowner · 12-10-2002, 06:26 AM

Can you do that with wu-ftpd or is only for that secure server?

lzyking · 12-11-2002, 05:40 AM

thanks , but I have a new question
now, when user use ftp ,they can see other people's directory,I think this is not security, but I don't know how to configure my vsftp to avoid it.

born4linux · 12-11-2002, 06:01 AM

Quote:

Originally posted by hotrodowner
Can you do that with wu-ftpd or is only for that secure server?

u can do that with wu-ftpd in a different way. what i suggested is only for vsftpd

born4linux · 12-11-2002, 06:07 AM

Quote:

Originally posted by lzyking
thanks , but I have a new question
now, when user use ftp ,they can see other people's directory,I think this is not security, but I don't know how to configure my vsftp to avoid it.

you can. edit /etc/vsftpd.conf and uncomment the following lines:

chroot_list_enable=YES
chroot_list_file=/etc/vsftpd.chroot_list

Now, create the file /etc/vsftpd.chroot_list and add the usernames you want to jail to their home directory.

u can do this with wu-ftp. i'm digging my notes for that but i think i lost it.

hotrodowner · 12-11-2002, 06:28 PM

Sorry to invade on your post, but I need to know this.
How do you deny anyone but anonymous to use the wu-ftpd server?

born4linux · 12-11-2002, 10:02 PM

check /etc/ftpaccess. not sure how to set that up but you need to set the uid/gid of the users that you don't want to have ftp access.