Dotaz: ftp spolecny ucet

[Michal]

Ahoj. Mam nainstalovany vhcs2 s proftpd. Potreboval bych vytvorit jeden ftp ucet, ktery by mel pristup ke vsem domenam. Zde je vypis adresare /var/www/virtual

drwxrwx---  9 vu2003 apache 4096 Jun 29 03:16 aaaa.com
drwxrwx---  9 vu2004 apache 4096 Jun 29 03:45 bbbb.com
drwxrwx---  9 vu2005 apache 4096 Jun 29 03:46 cccc.com
drwxrwx---  9 vu2006 apache 4096 Jun 29 03:47 dddd.com

Apache ma GID 48, zkousel jsem tedy do mysql databaze pridat uzivatele s UID a GID 48, ale po prihlaseni se zobrazil pouze prazdny adresar.

Konfigurace Apache:

#
#       VHCS proftpd config file
#
#

ServerName                      "nats"
ServerType                      standalone
DeferWelcome                    off

ShowSymlinks                    on
MultilineRFC2228                on
DefaultServer                   on
ShowSymlinks                    on
AllowOverwrite                  on

LogFormat                       traff "%b %u"

TimeoutNoTransfer               600
TimeoutStalled                  600
TimeoutIdle                     1200

DisplayLogin                    welcome.msg
DisplayFirstChdir               .message

#LsDefaultOptions                "-l"

DenyFilter                      \*.*/

DefaultRoot                     ~
# Uncomment this if you are using NIS or LDAP to retrieve passwords:
#PersistentPasswd               off

# Port 21 is the standard FTP port.

Port                            21

# To prevent DoS attacks, set the maximum number of child processes
# to 30.  If you need to allow more than 30 concurrent connections
# at once, simply increase this value.  Note that this ONLY works
# in standalone mode, in inetd mode you should use an inetd server
# that allows you to limit maximum number of processes per service
# (such as xinetd)

MaxInstances                    30

# Set the user and group that the server normally runs at.

User                            nobody
Group                           nobody

# Normally, we want files to be overwriteable.

<Directory /*>
  # Umask 022 is a good standard umask to prevent new files and dirs
  # (second parm) from being group and world writable.
  Umask                         022  022

  AllowOverwrite                on
  HideNoAccess on

</Directory>

<Limit ALL>
  IgnoreHidden on
</Limit>

<Global>
        TransferLog                     /var/log/xferlog
        ExtendedLog                     /var/log/ftp_traff.log read,write traff
        PathDenyFilter "\.quota$"
</Global>

<IfModule mod_delay.c>
        DelayEngine off
</IfModule>

#
# VHCS2 Managment;
SQLAuthTypes            Crypt
SQLAuthenticate         on
SQLConnectInfo          vhcs2@localhost vftp
SQLUserInfo                     ftp_users userid passwd uid gid homedir shell
SQLGroupInfo            ftp_group groupname gid members
SQLMinID                        2000

#
# VHCS2 Quota management;
#

QuotaEngine on
QuotaShowQuotas on
QuotaDisplayUnits Mb

SQLNamedQuery get-quota-limit SELECT "name, quota_type, per_session, limit_type, bytes_in_avail, bytes_out_avail, bytes_xfer_avail, files_in_avail, files_out_avail, files_xfer_avail FROM quotalimits WHERE name = '%{0}' AND quota_type = '%{1}'"
SQLNamedQuery get-quota-tally SELECT "name, quota_type, bytes_in_used, bytes_out_used, bytes_xfer_used, files_in_used, files_out_used, files_xfer_used FROM quotatallies WHERE name = '%{0}' AND quota_type = '%{1}'"
SQLNamedQuery update-quota-tally UPDATE "bytes_in_used = bytes_in_used + %{0}, bytes_out_used = bytes_out_used + %{1}, bytes_xfer_used = bytes_xfer_used + %{2}, files_in_used = files_in_used + %{3}, files_out_used = files_out_used + %{4}, files_xfer_used = files_xfer_used + %{5} WHERE name = '%{6}' AND quota_type = '%{7}'" quotatallies
SQLNamedQuery insert-quota-tally INSERT "%{0}, %{1}, %{2}, %{3}, %{4}, %{5}, %{6}, %{7}" quotatallies

QuotaLock /var/run/proftpd/tally.lock
QuotaLimitTable sql:/get-quota-limit
QuotaTallyTable sql:/get-quota-tally/update-quota-tally/insert-quota-tally

Dekuji

Odpovědi

[Martin H.]

Vyzkoušej dát do adresáře .ftpaccess tak to mám já: (Directory /home/webhosting) (Znaky () nahraď <>) (Limit All) Order Allow, Deny AllowUser admin user1 user2 DenyAll (/Limit) (/Directory)

V proFTPd.conf je to takto:
...
DefaultRoot			/home/webhosting
AllowOverwrite			on

.....
(Global)
  User				apache
  Group				apache
  DisplayLogin			proftpd.welcome
  DisplayFirstChdir		.welcome
  AllowOverwrite		yes
  IdentLookups			off

  ExtendedLog			/var/log/proftpd/access.log WRITE,READ write
  ExtendedLog			/var/log/proftpd/auth.log AUTH auth
# Paranoia logging level ...
#  ExtendedLog			/var/log/proftpd/paranoid.log ALL default
(/Global)

# Limit trusted account login...
(Limit LOGIN)
  AllowUser admin user1 user2 user3  # Jen tito lidé smí k FTP službě ...
  DenyAll
(/Limit)

(Directory ~)
 (Limit All)
      Order Allow, Deny
      AllowAll
 (/Limit)
(/Directory)

#--- Povoli standardni adresar pro Webhosting ---
(Directory /home/webhosting)
 (Limit All)
      Order Allow, Deny
      AllowAll
 (/Limit)
(/Directory>

Jinak je to v dokumentaci ...

[Michal]

Dekuji. Cyba byla, ze jsem tam mel volbu "HideNoAccess on" Ted vidim adresare, ale nemohu je otevrit "permisson denied" Zkousel jsem pouzit Vas konfiguracni soubor, ale je to stejne. Dekuji