Administrace komentářů

no, popravde receno, lze to, ale je to porod jako blazen. aneb jak pisou ve FAQ: http://www.vsftpdrocks.org/faq/

Q) Help! Does vsftpd support virtual users?
A) Yes, via PAM integration. Set "guest_enable=YES" in /etc/vsftpd.conf. This
has the effect of mapping every non-anonymous successful login to the local
username specified in "guest_username". Then, use PAM and (e.g.) its pam_userdb
module to provide authentication against an external (i.e. non-/etc/passwd)
repository of users.
Note - currently there is a restriction that with guest_enable enabled, local
users also get mapped to guest_username.
There is an example of virtual users setup in the "EXAMPLE" directory.

no a vzhledem k tomu, ze pisou o PAM, tak jsem to zrealizoval pres pam_mysql. Popravde receno, ztravil jsem nad tim docela dost casu, nez jsem prisel na to, ze verze, ktera je v debianim repozitari (mam Sarge) je nefunkcni a ze je nutno pouzit nejnovejsi verzi. Tj. musite si ji prelozit.

http://pam-mysql.sourceforge.net/

ja mam nasazenou verzi pam_mysql-0.7pre3. Novejsi jsem uz nezkousel, protoze tato mi chodi.

a pote jeste zkonfigurujete /etc/pam.d/ftp takto:

auth required pam_listfile.so item=user sense=deny file=/etc/ftpusers onerr=succeed
auth required pam_mysql.so user=vftp passwd=TAJNY_HESLO host=localhost db=vftp table=vftpd_users usercolumn=username passwdcolumn=password crypt=0 verbose=0 where=status="0"

account required pam_mysql.so user=vftp passwd=TAJNY_HESLO host=localhost db=vftp table=vftpd_users usercolumn=username passwdcolumn=password crypt=0 verbose=0 where=status="0"

session required pam_mysql.so user=vftp passwd=TAJNY_HESLO host=localhost db=vftp table=vftpd_users usercolumn=username passwdcolumn=password crypt=0 verbose=0 where=status="0"

a konfigurak vsftpd mam takovy:

# standalone mode
listen=YES
listen_port=21
max_clients=100
max_per_ip=5
ftp_username=vftp

# access rights
anonymous_enable=NO
local_enable=YES
write_enable=NO
anon_upload_enable=NO
anon_mkdir_write_enable=NO
anon_other_write_enable=NO
anon_world_readable_only=NO

# security
local_umask=022
chown_uploads=NO
connect_from_port_20=YES
hide_ids=YES
chown_username=vftp
chroot_local_user=YES

# ficury
ftpd_banner="SUPER_TAJNY_SERVER"
xferlog_enable=YES
dual_log_enable=YES
xferlog_std_format=NO
ls_recurse_enable=NO
ascii_upload_enable=NO
ascii_download_enable=NO
async_abor_enable=NO

# performance
one_process_model=NO
idle_session_timeout=120
data_connection_timeout=300
accept_timeout=60
connect_timeout=60
# max. prenosova rychlost v B/s pro lokal usery, 0=nelimitovano
local_max_rate=200000
anon_max_rate=200000
#local_max_rate=0
#anon_max_rate=0

# virtualni useri
guest_enable=YES
guest_username=vftp
virtual_use_local_privs=YES
user_config_dir=/etc/vsftpd_user_conf
pam_service_name=ftp

no a na zaver k tomu dodam, ze tabulka v mysql obsahuje dva sloupce "username" a "password", ale na to jiste prijdete sam ;0)

a jako bonus vam k tomu dodam, ze parametr

crypt=

muze krome 0 obsahovat i jina cisla, napriklad 1,2,3 a 4, ktere rikaji zdali je ulozen pouze hash hesla (md5, sha1, viz README u pam_mysql), ale me to chodi jen pouze s paramtrem 0, coz je plaintext. takze mam usery a jejich hesla v db v plaintextu, ale coz sem usoudil, ze vzhledem k tomu, ze hesla k ftp stejne litaj netem v plaintextu a mysql je pristupne pouze z localhostu, tak ze to az tak nevadi.