proFTPD advanced configuration

Satriani · 10-17-2004, 05:21 PM

Hi all,

I was wondering something about proftpd's possibilities. Googled around, but didn't find it.

Here's what i want:

The DefaultRoot is set to (ie.) /myftproot but not for the usergroup MySpecialGroup:

Code:

DefaultRoot /myftproot !MySpecialGroup

Now, i have another usergroup, who i want to have jailed inside another directory. Lets Say LimitedGroup has to be jailed in /limitedRoot
thus:

Code:

DefaultRoot /limitedRoot LimitedGroup

However, this does not seem to work if i put in the proftpd.comf:

Code:

DefaultRoot /myftproot !MySpecialGroup
DefaultRoot /limitedRoot LimitedGroup

Is there anyway to make this work? And so making my server more specific to the different usergroups?

TIA!

Satriani · 10-19-2004, 06:14 AM

After trying for some time, i accidently figured it out...
So, maybe this is usefulle to anyone else:

If you want to achieve the settings as i mentioned earlier, here's the config:

Code:

DefaultRoot /myftproot !MySpecialGroup
DefaultRoot /otherroot MySpecialGroup //note the ! being absent.

Now, i wanted to have a limitedgroup also, but this didnt work:

Code:

DefaultRoot /myftproot !MySpecialGroup
DefaultRoot /otherroot MySpecialGroup //note the ! being absent.
DefaultRoot /LimitedRoot LimitedGroup

You MUST add !limitedgroup to the first defaultroot it "could" belong to...:

Working conf:

Code:

DefaultRoot /myftproot !MySpecialGroup !LimitedGroup
DefaultRoot /otherroot MySpecialGroup //note the ! being absent.
DefaultRoot /LimitedRoot LimitedGroup

Happy proftpd'ing....

hrp2171 · 10-19-2004, 07:32 AM

Your post explains exactly what I'm trying to do.

Thank you. Thank you. Thank you.

I read

through proftpd's docs but just couldn't grasp what needed to be done. I also was not sure if I could use more than one DefaultRoot directive in there.

You should try and send your post as an addition to their documentation to augment the DefaultRoot section.

varney · 04-25-2008, 04:58 PM

There is really no need to add this to the proftpd documentation, since what you are trying to do is already documented; the whole effect of the DefaultRoot directive has been misunderstood.

If you look closely at your example:

Code:

DefaultRoot /myftproot !MySpecialGroup
DefaultRoot /otherroot MySpecialGroup //note the ! being absent

you have to understand that you already exclaimed the MySpecialGroup (!MySpecialGroup), so it goes without saying you have to exclaim any groups that you don't want be chrooted - since DefaultRoot is the default root for any user or group on the system unless you [B]explicitly/B] mention it!