Link to home
Start Free TrialLog in
Avatar of ampranti
amprantiFlag for Greece

asked on

proftpd: One user to administrate all

Hi all

I have configured proftpd using virtual users; various users have permission over directories etc.

Now I have to create a user (ftpadmin) that will have access to all folders and will be able to delete, move and/or rename files and directories.
Although ftpadmin has access and enough permissions from proftpd.conf it ISNT allowed to delete files that were created by an other user!!! (as the filesystem permissions are not sufficient)

Is any way to overcome this?! Do I have to use a umask different from 022 / 022 ?
Thank you
SOLUTION
Avatar of Maciej S
Maciej S
Flag of Poland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of ampranti

ASKER

I have two group of users: admins (ftpadmin) & allusers (user1 & user2)

At the moment my files are created with user virtual ID and groupID: 1500.1500.
By using umask 002, also user1 and use2 can delete each other files. Correct?

Are u using "UserOwner" to change all users to proftpd.nogroup ?
May you give me an example of file configuration with permission set?

An other idea i had is to add ftpadmin to all groups. But:
Can a user belong to two groups?! Which group will be macthed when doing checks for permissions?!

Thank you
ASKER CERTIFIED SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
So its enough to use umask 002 and add ftpdadmin to allusers group.

On the other hand I have to accept the fact that user1 and user2 will be able to change each other files (as have access to same directories and I cant  use LIMIT)
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
I dont want  because I am searching a way to implement that functionality easier than using  LIMIT.
(to tell the true I have no idea how can I do that using LIMIT|)!!

Any ideas ? ;-)
Both users must have access to write,upload/download, resume etc files but do not delete or alter files that dont own!
> Both users must have access to write,upload/download,
> resume etc files but do not delete or alter files that dont own!
Well, I already wrote it. Umask 002, different users, same group (ftpadm in my previous post). Owner of the file can do anything with this file, while other users cannot.