proftpd conf

[SkOrPiOn`87]

Ho creato un user avente la home dir su /share, quando mi loggo via ftp, mi ritrovo in /share, però riesco ad usicre dalla root dir, come faccio ad impedire questo?

PS: con gli altri user non riesco ad uscirci


Questo è su global:
DefaultRoot ~

<Anonymous ~share>

User share
RequireValidShell on
AnonRequirePassword on

# We want clients to be able to login with "anonymous" as well as "ftp"
# UserAlias anonymous ftp

# Limit the maximum number of federico logins
MaxClients 3

# We want 'welcome.msg' displayed at login, and '.message' displayed
# in each newly chdired directory.
DisplayLogin welcome.msg
DisplayFirstChdir .message

# Limit WRITE everywhere in the anonymous chroot
<Limit WRITE READ STOR>
AllowAll
</Limit>

# An upload directory that allows storing files but not retrieving
# or creating directories.
# <Directory incoming>


# <Limit READ>
# DenyAll
# </Limit>
#
# <Limit STOR>
# AllowAll
# </Limit>
# </Directory>

</Anonymous>

[SkOrPiOn`87]

[SkOrPiOn`87]

nessuno?

[Caleb]

dalle faq di proftpd.org

How can I limit users to a particular directory tree?

For general open access you can use an <Anonymous> directive context block, possibly in combination with a UserPassword/AnonRequirePassword directive.

However if you wish to jail an entire group (or groups) of users, you can use the DefaultRoot directive. DefaultRoot lets you specify a root jailed directory (or "~" for the user's home directory), and an optional group-expression argument which can be used to control which groups of users the jail will be applied to. For example:

...
<VirtualHost myhost.mynet.foo>
DefaultRoot ~
...
</VirtualHost>


This creates a configuration where all users who log into myhost.mynet.foo are jailed into their home directories (cannot chdir into a higher level directory). Alternatively, you could:

...
<VirtualHost myhost.mynet.foo>
DefaultRoot /u2/public users,!staff
...
</VirtualHost>

[SkOrPiOn`87]

Quello è per i virtual host, io non ne uso...

Cmq la cosa strana è che da /home/federico non evado, mentre con l'utente share riesco ad avadere da /share

[SkOrPiOn`87]

[UNIX-based]

ciao...
non capisco queste righe:

DefaultRoot ~
<Anonymous ~share>
User share

DefaultRoot indica la rootdir del servizio ftp, quindi ~ indica che ogni utente che si connette, che non sia anonymous, viene fatto partire dalla propria home.
con ~share non capisco cosa intendi...
poi... ti logghi con l'utente share?

io uso proftpd, comunque non mi ricodo bene però, la configurazione l'ho fatta diverso tempo fa ed ogni volta uso quella.
se vuoi ti posto il mio proftpd.conf...

[SkOrPiOn`87]

se mi passi il tuo mi fa un favore...

cmq <Anonymous ~federico> questo funziona

[UNIX-based]

ProFTPD Version 1.2.5rc1

ServerName                      "nomeserver"
ServerType                      standalone
DeferWelcome                    off
ShowSymlinks                    on
MultilineRFC2228                on
DefaultServer                   on
ShowSymlinks                    on
AllowOverwrite                  on
TimeoutNoTransfer               600
TimeoutStalled                  600
TimeoutIdle                     1200
DisplayLogin                    welcome.msg
DisplayFirstChdir               .message
LsDefaultOptions                "-l"
DenyFilter                      \*.*/
Port                            21
MaxInstances                    30
User                            ftp
Group                           ftp
ExtendedLog /var/log/proftpd.log ALL
DefaultRoot /ftprootdir staff
<Directory /*>
  Umask                         022  022
  AllowOverwrite                on
</Directory>
<Anonymous /ftprootdir/public>
  User                          ftp
  Group                         ftp
  UserAlias                     anonymous ftp
  RequireValidShell             off
  MaxClients                    10
  DisplayLogin                  welcome.msg
  DisplayFirstChdir             .message
  <Limit WRITE>
    DenyAll
  </Limit>

  <Directory /ftprootdir/public/incoming>
    Umask                       022  022
    <Limit READ WRITE>
      DenyAll
    </Limit>
    <Limit STOR>
      AllowAll
    </Limit>
  </Directory>
</Anonymous>