Restrict FTP user access on shared IP server

Discussion in 'Installation/Configuration' started by bplgonzo, Jun 7, 2007.

  1. bplgonzo

    bplgonzo New Member

    I setup Debian Sarge 3.1 and ProFTPD with ISPConfig. It all works OK. Only problem I have is that all my website ftp users have access to root when login with client (WS-FTP Pro). When they log with Web-FTP from ISPConfig everything works fine, they only can see their home dir.
    Another thing is than when creating sites I have only 'Admin' as group...

    Any help?
     
  2. bplgonzo

    bplgonzo New Member

  3. falko

    falko Super Moderator ISPConfig Developer

    This setup is incompatible with ISPConfig. ISPConfig uses system users, not virtual users...

    Do you have
    Code:
    DefaultRoot  ~
    in /etc/proftpd.conf?
     
  4. bplgonzo

    bplgonzo New Member

    Yes, I do.

    Files from /etc are like this:

    proftpd.conf

    DefaultRoot ~
    IdentLookups off
    ServerIdent on "FTP Server ready."
    Include /etc/proftpd_ispconfig.conf


    proftpd_ispconfig.conf

    ###################################
    #
    # ISPConfig proftpd Configuration File
    # Version 1.0
    #
    ###################################
    DefaultAddress 127.0.0.1
    <VirtualHost XXX.XXX.XXX.XXX>
    DefaultRoot ~
    AllowOverwrite on
    Umask 002
    </VirtualHost>


    XXX.XXX.XXX.XXX - Server external IP
     
  5. falko

    falko Super Moderator ISPConfig Developer

    Please comment out DefaultAddress 127.0.0.1 and restart Proftpd. Does it work then?
     
  6. bplgonzo

    bplgonzo New Member

    No, still the same. Login user to his home dir, but he can still go up all the way to the root
     
  7. till

    till Super Moderator Staff Member ISPConfig Developer

    Please post the output of:

    netstat -tap | grep ftp

    and:

    locate proftpd.conf
     
  8. bplgonzo

    bplgonzo New Member

    server:# netstat -tap | grep ftp
    tcp6 0 0 *:ftp *:* LISTEN 6527/proftpd: (acce

    server:/etc# locate proftpd.conf
    /etc/proftpd.conf
    /etc/proftpd.conf.orig
    /etc/proftpd/proftpd.conf
    /usr/share/proftpd/templates/proftpd.conf
    /var/lib/dpkg/info/proftpd.conffiles
    /var/lib/dpkg/info/proftpd.config
     
  9. till

    till Super Moderator Staff Member ISPConfig Developer

    Please add:

    DefaultRoot ~
    IdentLookups off
    ServerIdent on "FTP Server ready."
    Include /etc/proftpd_ispconfig.conf

    at the end of the file:

    /etc/proftpd/proftpd.conf

    if it is not there already and restart proftpd.
     
  10. bplgonzo

    bplgonzo New Member

    That did the trick! All the time i was changing in /etc/proftpd.conf, which is as i recall just a linkage...

    Thanks for all the patience and your help.
     

Share This Page