View previous topic :: View next topic |
Author |
Message |
Celcius1 n00b
Joined: 10 Apr 2004 Posts: 20
|
Posted: Wed Aug 11, 2010 4:33 pm Post subject: FTP Setup for newbies |
|
|
I was wondering is there a ftp howto out there that actually is easy to follow as i have spent the last 3 hrs tryin to setup an ftp server to multiple directories for multiple users and having no luck, i followed a basic setup for VSFTP but when i tried to navigate to other directories it couldnt and wouldnt show the content in those directories and no matter what permissions i setup it just would not work, if someone could help me get out of this bind, and put up a ftp setup for newbies, would be greatly appreciated and dont suggest using a gui for setup as one is not being installed i need instructions on how to do it in the console otherwise i would goto the trouble of installing a gui, and i'm not installing one cause i dont require it on the box.
So any help will be greatly appreciated and if you suggest using a differenet ftp then by all means i will change the one installed but i need to get out of this blasted bind, my head is getting sore from banging my head aganst the screen and getting no where
Celcius1 |
|
Back to top |
|
|
audiodef Watchman
Joined: 06 Jul 2005 Posts: 6656 Location: The soundosphere
|
|
Back to top |
|
|
lxg Veteran
Joined: 12 Nov 2005 Posts: 1019 Location: Aachen, Germany
|
Posted: Wed Aug 11, 2010 7:31 pm Post subject: |
|
|
Celsius1: vsftpd is actually set up quite easily; however, one faulty setting can mess it all up (just like everywhere else).
Can you post your /etc/vsftpd/vsftpd.conf?
Code: | grep -v -e "^$" -e "^#" /etc/vsftpd/vsftpd.conf |
Do you want to do anonymous FTP or user-based? (From what you write above, you want user-based, right?)
Can you post any error messages or other hints to your problem? _________________ lxg.de – codebits and tech talk |
|
Back to top |
|
|
Celcius1 n00b
Joined: 10 Apr 2004 Posts: 20
|
Posted: Wed Aug 11, 2010 11:17 pm Post subject: |
|
|
i'm not getting error messages i've setup my users they can log in, and see the assigned root dir but no one can navigate the set file structure for the ftp server, i'll post the conf file, but i think its an issue with how i have setup my directories, as i have used symlinks to link the relevant directories to the ftp root directory which is mounts to other drives
/etc/vsftpd/vsftpd.conf
local_enable=yes
write_enable=yes
anonymous_enable=no
xferlog_enable=yes
xferlog_file=/var/log/vsftpd/vsftpd.log
idle_session_timeout=600
data_connection_timeout=120
ascii_upload_enable=no
ascii_download_enable=no
nopriv_user=ftp
dirmessage_enable=yes
ftpd_banner=Torrent Box
chroot_list_enable=no
chroot_local_user=yes
#background=yes
listen=yes
ls_recurse_enable=no |
|
Back to top |
|
|
cwr Veteran
Joined: 17 Dec 2005 Posts: 1969
|
Posted: Thu Aug 12, 2010 5:05 pm Post subject: |
|
|
FTP (at least, the daemon I use) won't follow symlinks - it's a major security
hole. You'll have to dig through your docs to see how to override this, or
revise your directory tree.
Will |
|
Back to top |
|
|
Hu Administrator
Joined: 06 Mar 2007 Posts: 23066
|
Posted: Fri Aug 13, 2010 3:29 am Post subject: |
|
|
Why are you using ftp instead of something more secure, such as sftp?
Also, when posting configuration files, it can be helpful to use a code tag to make it more readable.
Celcius1 wrote: | i think its an issue with how i have setup my directories, as i have used symlinks to link the relevant directories to the ftp root directory which is mounts to other drives
chroot_local_user=yes |
man vsftpd.conf: | chroot_local_user
If set to YES, local users will be (by default) placed in a
chroot() jail in their home directory after login. Warning: This
option has security implications, especially if the users have
upload permission, or shell access. Only enable if you know what
you are doing. Note that these security implications are not
vsftpd specific. They apply to all FTP daemons which offer to put
local users in chroot() jails.
| Using chroot in conjunction with symbolic links is asking for trouble. Even if you allow the daemon to follow symbolic links, those links cannot leave the chroot area. Your post suggests that this is what you tried to do. It will not work. Use bind mounts if you must expose other areas. |
|
Back to top |
|
|
Anarcho Advocate
Joined: 06 Jun 2004 Posts: 2970 Location: Germany
|
Posted: Fri Aug 13, 2010 6:25 am Post subject: |
|
|
I know that PureFTPd can handle these setups as I have it like that. All users have chroot-jails but some have symlinks to directories in e.g. /srv/htdocs/. The users haven't shell access and can't create symlinks through FTP, so I think it is rather safe (also, only 2 personally trusted users have access here).
From the PureFTPd FAQ:
Quote: | Symbolic links can be followed when users are chrooted, even when they are pointing out of the chroot jail. This unique feature makes shared content easy to set up. |
So it looks like this can only be done using PureFTPd. _________________ ...it's only Rock'n'Roll, but I like it! |
|
Back to top |
|
|
|