proftpd problem

Discussion in 'Installation/Configuration' started by nmy, May 29, 2008.

  1. nmy

    nmy New Member

    sorry for my bad english but I have a problem with proftpd+etch+mysql+quota



    here's my proftpd.conf

    #
    # /etc/proftpd/proftpd.conf -- This is a basic ProFTPD configuration file.
    # To really apply changes reload proftpd after modifications.
    #

    # Includes DSO modules
    Include /etc/proftpd/modules.conf

    # Set off to disable IPv6 support which is annoying on IPv4 only boxes.
    UseIPv6 off

    ServerName "Ftp Server Nmy.be"
    ServerType inetd
    DeferWelcome off
    DefaultRoot ~

    MultilineRFC2228 on
    DefaultServer on
    ShowSymlinks on

    #TimeoutNoTransfer 6000
    #TimeoutStalled 6000
    #TimeoutIdle 1200

    DisplayLogin welcome.msg
    DisplayFirstChdir .message
    ListOptions "-l"

    DenyFilter \*.*/

    # Port 21 is the standard FTP port.
    Port 21

    # In some cases you have to specify passive ports range to by-pass
    # firewall limitations. Ephemeral ports can be used for that, but
    # feel free to use a more narrow range.
    PassivePorts 49152 65534

    # To prevent DoS attacks, set the maximum number of child processes
    # to 30. If you need to allow more than 30 concurrent connections
    # at once, simply increase this value. Note that this ONLY works
    # in standalone mode, in inetd mode you should use an inetd server
    # that allows you to limit maximum number of processes per service
    # (such as xinetd)
    MaxInstances 100

    # Set the user and group that the server normally runs at.
    User proftpd
    Group nogroup

    # Umask 022 is a good standard umask to prevent new files and dirs
    # (second parm) from being group and world writable.
    Umask 022 022

    # Normally, we want files to be overwriteable.
    AllowOverwrite on

    # Uncomment this if you are using NIS or LDAP to retrieve passwords:
    # PersistentPasswd off

    # Be warned: use of this directive impacts CPU average load!
    #
    # Uncomment this if you like to see progress and transfer rate with ftpwho
    # in downloads. That is not needed for uploads rates.
    # UseSendFile off

    TransferLog /var/log/proftpd/xferlog
    SystemLog /var/log/proftpd/proftpd.log

    <IfModule mod_tls.c>
    TLSEngine on
    TLSLog /var/log/proftpd/tls.log
    TLSProtocol SSLv23
    TLSOptions NoCertRequest
    TLSRSACertificateFile /etc/ssl/nmy.be/proftpd/proftpd-cert.pem
    TLSRSACertificateKeyFile /etc/ssl/nmy.be/proftpd/proftpd-key.pem
    TLSVerifyClient off
    TLSRequired off
    </IfModule>


    <IfModule mod_quota.c>
    QuotaEngine on
    </IfModule>

    <IfModule mod_ratio.c>
    Ratios on
    </IfModule>


    # Delay engine reduces impact of the so-called Timing Attack described in
    # http://security.lss.hr/index.php?page=details&ID=LSS-2004-10-02
    # It is on by default.
    <IfModule mod_delay.c>
    DelayEngine on
    </IfModule>

    <IfModule mod_ctrls.c>
    ControlsEngine on
    ControlsMaxClients 5
    ControlsLog /var/log/proftpd/controls.log
    ControlsInterval 5
    ControlsSocket /var/run/proftpd/proftpd.sock
    </IfModule>

    <IfModule mod_ctrls_admin.c>
    AdminControlsEngine on
    </IfModule>

    # A basic anonymous configuration, no upload directories.

    <Anonymous ~anonymous_ftp>
    User anonymous_ftp
    Group nogroup
    # # We want clients to be able to login with "anonymous" as well as "ftp"
    UserAlias anonymous anonymous_ftp
    # # Cosmetic changes, all files belongs to ftp user
    DirFakeUser on anonymous_ftp
    DirFakeGroup on anonymous_ftp
    #
    RequireValidShell off
    #
    # # Limit the maximum number of anonymous logins
    MaxClients 10
    #
    # # We want 'welcome.msg' displayed at login, and '.message' displayed
    # # in each newly chdired directory.
    DisplayLogin welcome.msg
    DisplayFirstChdir .message
    #
    # # Limit WRITE everywhere in the anonymous chroot
    <Directory *>
    <Limit WRITE>
    AllowAll
    </Limit>
    </Directory>
    #
    # # Uncomment this if you're brave.
    <Directory incoming>
    # # # Umask 022 is a good standard umask to prevent new files and dirs
    # # # (second parm) from being group and world writable.
    Umask 022 022
    <Limit READ WRITE>
    DenyAll
    </Limit>
    <Limit STOR>
    AllowAll
    </Limit>
    </Directory>

    </Anonymous>

    ### MySQL options
    ### The passwords in MySQL are encrypted using CRYPT
    SQLAuthTypes Plaintext Crypt
    SQLAuthenticate users* groups*
    #
    ### used to connect to the database
    ### [email protected] database_user user_password
    SQLConnectInfo [email protected] proftpd mypass
    #
    ### Here we tell ProFTPd the names of the database columns in the "usertable"
    ### we want it to interact with. Match the names with those in the db
    SQLUserInfo ftpuser userid passwd uid gid homedir shell
    #
    ### Here we tell ProFTPd the names of the database columns in the "grouptable"
    ### we want it to interact with. Again the names match with those in the db
    SQLGroupInfo ftpgroup groupname gid members
    #
    ### set min UID and GID - otherwise these are 999 each
    SQLMinID 500
    #
    ### create a user's home directory on demand if it doesn't exist
    SQLHomedirOnDemand on
    #
    ### Update count every time user logs in
    SQLLog PASS updatecount
    SQLNamedQuery updatecount UPDATE "count=count+1, accessed=now() WHERE userid='%u'" ftpuser
    #
    ### Update modified everytime user uploads or deletes a file
    SQLLog STOR,DELE modified
    SQLNamedQuery modified UPDATE "modified=now() WHERE userid='%u'" ftpuser
    #
    RootLogin off
    RequireValidShell off
    IdentLookups off


    ls -la /home

    drwxr-xr-x 4 anonymous_ftp anonymous_ftp 4096 2008-05-28 19:27 anonymous_ftp
    drwxr-xr-x 2 warren warren 4096 2008-05-28 09:18 bob
    drwxr-xr-x 3 ddm ddm 4096 2008-05-19 15:15 ddm
    drwxr-xr-x 3 jade jade 4096 2008-03-20 15:11 jade
    drwxr-xr-x 4 mule mule 4096 2008-03-26 20:55 mule
    drwxr-xr-x+ 7 nmy nmy 4096 2008-05-29 11:19 nmy
    drwxr-xr-x+ 5 warren warren 4096 2008-05-28 15:48 warren

    user nmy warren and ddm can't write ,delete ,mkdir in their home

    anyone have a soluce?
     

Share This Page