Setup users to Log into own web directory using Proftd

More Info:

You also might check out:
http://vsftpd.beasts.org/ (notice the bit about Proftpd)
http://bsdftpd-ssl.sc.ru/

and this might interest you too:
http://www.glub.com/products/secureftp/

Sorry for the multi-post:  All of those have instructions online regarding use.

Good luck,
TNC

I worte this question quite late at night, and it appears that ive missed the point.

 I am looking for step by step instructions on setting up the ftp server (vsftpd sounds like the go). Sorry about the misleading post.

Cheers

Travis

Download this:
ftp://vsftpd.beasts.org/users/cevans/vsftpd-1.2.1.tar.gz

Step by step instructions:
http://www.fbunet.de/vsftpd.shtml
-or-
ftp://vsftpd.beasts.org/users/cevans/untar/vsftpd-1.2.1/INSTALL

In /etc/vsftpd.conf, you'll find the line:
# Allow anonymous FTP?
anonymous_enable=NO
*Be sure it does say NO!*

Check this out too:
ftp://vsftpd.beasts.org/users/cevans/untar/vsftpd-1.2.1/FAQ

Does that help?
TNC

Hi,

I had a read the faq's and install instructions, but I cannot find anywhere to set up folders that a given user can access when they log in. Ie have a user put their username and password and restrict their access to their own html folder.

I assume that I have to setup a user for each site, make their home directory the html folder for their site and use the

"chroot_local_user=YES"

directive in the vsftpd.conf file.

Will this restrict them from accessing other folders on the system??

Please excuse my ignorance, I am very new to linux and this has been a steep learning curve :)

Cheers
Travis

Ah.  You want to create users for these accounts and direct their home directories to their home directories (I know that makes no sense).

Read: http://www.linuxheadquarters.com/howto/basic/adduser.shtml

if you have a user that has webpage www.experts-exchange.com and that user ID is eedotcom and that webpage is hosted from ./htdocs/ee/ then you want to use:
/usr/sbin/adduser -d ./htdocs/ee/ -p eepass

if you want multiple users to access this public html directory, then add a group and add users to the group.
Read this: http://www.linuxheadquarters.com/howto/basic/groupadd.shtml

Ok, I've installed vsftpd, left the vsftpd.conf file as is except for uncommenting the lines

anonymous_enable=NO
local_enable=YES
write_enable=YES

Ive configured xinetd to run when ftp requests are made

ive setup a number of accounts, 1 for each business that im hosting with their home directories set to the directory that stores their web site.

When I attempt to connect to the ftp server using cuteftp on another machine on the network, i get the following error

STATUS:>      Connect: Sunday 17:12:26 01-18-2004
STATUS:>      Connecting to 192.168.1.50
STATUS:>      Connecting to 192.168.1.50 (ip = 192.168.1.50)
STATUS:>      Socket connected. Waiting for welcome message...
      500 OOPS: vsftpd: security: 'one_process_model' is anonymous only
ERROR:>      Unknown response code: 500
ERROR:>      Can't log in. Disconnecting...
STATUS:>      Disconnect: Sunday 17:12:26 01-18-2004

Is there a configuration directive that I can change for that?
Is this configuration going to prevent a given buiness from accessing other directories on the system other than their own web folder and subfolders?

Cheers

Travis

in vsftpd.conf, find one_process_model and make sure that it is disabled.

TNC

Ok, i think im nearly there :)

Ive got it attempting to login now without throwing errors, but now it doesnt accept any of the user/password combinations, i've even tried root/*password*

Below is my vsftpd.conf file:

# Access rights
anonymous_enable=NO
local_enable=YES
write_enable=YES
anon_upload_enable=NO
anon_mkdir_write_enable=NO
anon_other_write_enable=NO
# Security
anon_world_readable_only=YES
connect_from_port_20=YES
hide_ids=YES
pasv_min_port=50000
pasv_max_port=60000
# Features
xferlog_enable=YES
ls_recurse_enable=NO
ascii_download_enable=NO
async_abor_enable=YES
chroot_local_user=YES
# Performance
one_process_model=NO
idle_session_timeout=120
data_connection_timeout=300
accept_timeout=60
connect_timeout=60
anon_max_rate=50000

Cheers

Travis

What does the cuteftp "log" say about the attempted connection?

TNC

STATUS:>      Connect: Monday 19:05:57 01-19-2004
STATUS:>      Connecting to 192.168.1.50
STATUS:>      Connecting to 192.168.1.50 (ip = 192.168.1.50)
STATUS:>      Socket connected. Waiting for welcome message...
      220 (vsFTPd 1.2.1)
STATUS:>      Connected. Authenticating...
COMMAND:>      USER root
      331 Please specify the password.
COMMAND:>      PASS **********
      530 Login incorrect.
ERROR:>      Can't log in. Still trying...

It then pops up a dialog box to retype the username and password

Try this:

Following these directions (http://www.siliconvalleyccie.com/linux-hn/ftp-server.htm#_Toc57733510), see if you can log into it on the local host.

You might need to add "vsftpd: ALL" in the /etc/hosts.allow file.

Let me know,
TNC

The link posted above appears to be broken??

Ive tried adding "vsftpd:ALL" and creating a file called vsftpd.chroot_list that contains all the usernames that I want to be able to log into the server

Still dont work :(

Is the server trying to authenticate using PAM (i have no idea what that means - but ive read it in vsftpd install guides) I dont think i need to use PAM, because im not using virtual users - all the users that im trying to log in as exist on the system.

I tried loggin in using the command "ftp localhost" and that rejects the username/password combinations im giving it to :(

I had a look into this PAM thingy, and if i run ldd vsftpd, it tells me that the PAM is linked with vsftpd.

following the FAQ "ftp://vsftpd.beasts.org/users/cevans/untar/vsftpd-1.2.1/FAQ" i copied the sample PAM file from /RedHat/vsftpd.pam to /etc/pam.d

What else do i have to do to get the users to authenticate properly??

Did you do this: Enable FTP. Edit the /etc/xinetd.d/vsftp and set the disable value to "no"?  The link above works for me.  It's helpful.

what does it say when you use ftp localhost?

We'll get you fixed up!

TNC

Yeah, the ftp client is being run when the machine receives data to port 21, cos when I type ftp localhost on the console i get:

220 (vsFTPd 1.2.1)
Name (localhost:root):

and when i try to cuteftp in from another machine i get:

STATUS:>     Connect: Monday 19:05:57 01-19-2004
STATUS:>     Connecting to 192.168.1.50
STATUS:>     Connecting to 192.168.1.50 (ip = 192.168.1.50)
STATUS:>     Socket connected. Waiting for welcome message...
     220 (vsFTPd 1.2.1)
STATUS:>     Connected. Authenticating...
COMMAND:>     USER root
     331 Please specify the password.
COMMAND:>     PASS **********
     530 Login incorrect.
ERROR:>     Can't log in. Still trying...

So the process is being run, It must be an authentication problem. I think that this PAM thing is the problem, cos according to the FAQ, PAM is being used. Ugghh

Okay,

  Set it up for anonymous access, restart it, and try to login to it anonymously.  Let me know if it works and we'll start from there.

TNC

I turned the anonymous_enable=NO to anonymous_enable=YES
and tried to log in at the command prompt
Now i get

[root@webserver root]# ftp localhost
Connected to localhost (127.0.0.1).
220 (vsFTPd 1.2.1)
Name (localhost:root): ftp
331 Please specify the password.
Password:
500 OOPS: cannot change directory:/var/ftp
Login failed.
421 Service not available, remote server has closed connection

the same happens when i use the username anonymous

okay,

  did you set up the ftp user and group?
  did you create user nobody?

   I dont remember; did you add vsftpd: ALL to /etc/hosts.allow?

  did you create the directory /var/ftp

Let me know,
TNC

Hi,

i didnt make the dir ftp - so i put it in, now it works for anon users ie:

[root@webserver ftp]# ftp localhost
Connected to localhost (127.0.0.1).
220 (vsFTPd 1.2.1)
Name (localhost:root): anonymous
331 Please specify the password.
Password:
230 Login successful.
Remote system type is UNIX.
Using binary mode to transfer files.
ftp> ls
227 Entering Passive Mode (127,0,0,1,231,166)
150 Here comes the directory listing.
-rw-r--r--    1 ftp      ftp             0 Jan 23 06:49 testfile.txt
226 Directory send OK.
ftp>

But the other users do not work still:

[root@webserver ftp]# ftp localhost
Connected to localhost (127.0.0.1).
220 (vsFTPd 1.2.1)
Name (localhost:root): root
331 Please specify the password.
Password:
530 Login incorrect.
Login failed.

Ok, I had a mate around today that is pretty unix savvy, the problem was that the file ftp in the pam.d directory I had named vsftpd by mistake :|

Ive disabled the anon ftp access and it all works good - users cant cd .. out of thier own directory, just the way i wanted it.

Thanks heaps for the help tho :)