Je n'arrive pas à configurer proftpd comme je le souhaite.

Je n'arrive pas à configurer proftpd comme je le souhaite. - Logiciels - Linux et OS Alternatifs

Marsh Posté le 28-05-2009 à 15:43:47    

Bonjour amis linuxiens.
 
Voilà, dans ma grande folie, j'ai décidé de monter mon serveur Web mais je n'arrive pas à gérer les utilisiteurs FTP comme je le voudrais ... voici donc ce que je tente de faire :
 
- des utilisateurs principaux, appelons le domaine1 pour l'exemple, ayant accès à leur arborescence /home/domaine1/
- des utilisateurs secondaires, appelons le domaine1_user1, ayant uniquement accès à des sous dossiers du domaine1 ... par exemple /home/domaine1/www/user1/
 
J'ai essayé de jouer avec la directive DefaultRoot comme suit :
 

Code :
  1. DefaultRoot   ~ !domaine1_user1
  2. DefaultRoot   /home/domaine1/www/user1/ domaine1_user1


 
Mais ca ne marche pas ... Impossible de trouver le dossier quand j'essaie de me connecter avec domaine1_user1 ...
 
J'ai aussi essayé de passer par des directives Directory ... mais le FTP s'entête à démarrer dans /home/domaine1_user1 ...
 
Je vous montre mon proftpd.conf actuel pour que vous puissiez commenter et me dire ce qui bloque :
 

Code :
  1. #
  2. # /etc/proftpd/proftpd.conf -- This is a basic ProFTPD configuration file.
  3. # To really apply changes reload proftpd after modifications.
  4. #
  6. # Includes DSO modules
  7. Include /etc/proftpd/modules.conf
  9. # Set off to disable IPv6 support which is annoying on IPv4 only boxes.
  10. UseIPv6    on
  11. # If set on you can experience a longer connection delay in many cases.
  12. IdentLookups   off
  14. ServerName   "toTOW's home"
  15. ServerType   standalone
  16. DeferWelcome   on
  18. MultilineRFC2228  on
  19. DefaultServer   on
  20. ShowSymlinks   off
  22. TimeoutNoTransfer  600
  23. TimeoutStalled   600
  24. TimeoutIdle   1200
  26. DisplayLogin     welcome.msg
  27. DisplayChdir       .message true
  28. ListOptions     "-l"
  30. DenyFilter   \*.*/
  32. # Use this to jail all users in their homes
  33. # DefaultRoot   ~
  35. # Users require a valid shell listed in /etc/shells to login.
  36. # Use this directive to release that constrain.
  37. # RequireValidShell  off
  39. # Port 21 is the standard FTP port.
  40. Port    21
  42. # In some cases you have to specify passive ports range to by-pass
  43. # firewall limitations. Ephemeral ports can be used for that, but
  44. # feel free to use a more narrow range.
  45. # PassivePorts      49152 65534
  47. # If your host was NATted, this option is useful in order to
  48. # allow passive tranfers to work. You have to use your public
  49. # address and opening the passive ports used on your firewall as well.
  50. # MasqueradeAddress  1.2.3.4
  52. # This is useful for masquerading address with dynamic IPs:
  53. # refresh any configured MasqueradeAddress directives every 8 hours
  54. <IfModule mod_dynmasq.c>
  55. # DynMasqRefresh 28800
  56. </IfModule>
  58. # To prevent DoS attacks, set the maximum number of child processes
  59. # to 30.  If you need to allow more than 30 concurrent connections
  60. # at once, simply increase this value.  Note that this ONLY works
  61. # in standalone mode, in inetd mode you should use an inetd server
  62. # that allows you to limit maximum number of processes per service
  63. # (such as xinetd)
  64. MaxInstances   30
  66. # Set the user and group that the server normally runs at.
  67. User    proftpd
  68. Group    nogroup
  70. # Umask 022 is a good standard umask to prevent new files and dirs
  71. # (second parm) from being group and world writable.
  72. Umask    022  022
  73. # Normally, we want files to be overwriteable.
  74. AllowOverwrite   on
  76. # Uncomment this if you are using NIS or LDAP via NSS to retrieve passwords:
  77. # PersistentPasswd  off
  79. # This is required to use both PAM-based authentication and local passwords
  80. # AuthOrder   mod_auth_pam.c* mod_auth_unix.c
  82. # Be warned: use of this directive impacts CPU average load!
  83. # Uncomment this if you like to see progress and transfer rate with ftpwho
  84. # in downloads. That is not needed for uploads rates.
  85. #
  86. # UseSendFile   off
  88. TransferLog /var/log/proftpd/xferlog
  89. SystemLog   /var/log/proftpd/proftpd.log
  91. <IfModule mod_quotatab.c>
  92. QuotaEngine off
  93. </IfModule>
  95. <IfModule mod_ratio.c>
  96. Ratios off
  97. </IfModule>
  100. # Delay engine reduces impact of the so-called Timing Attack described in
  101. # http://security.lss.hr/index.php?p [...] 2004-10-02
  102. # It is on by default.
  103. <IfModule mod_delay.c>
  104. DelayEngine on
  105. </IfModule>
  107. <IfModule mod_ctrls.c>
  108. ControlsEngine  off
  109. ControlsMaxClients 2
  110. ControlsLog     /var/log/proftpd/controls.log
  111. ControlsInterval   5
  112. ControlsSocket  /var/run/proftpd/proftpd.sock
  113. </IfModule>
  115. <IfModule mod_ctrls_admin.c>
  116. AdminControlsEngine off
  117. </IfModule>
  119. #
  120. # Alternative authentication frameworks
  121. #
  122. #Include /etc/proftpd/ldap.conf
  123. #Include /etc/proftpd/sql.conf
  125. #
  126. # This is used for FTPS connections
  127. #
  128. #Include /etc/proftpd/tls.conf
  130. #Liste des utilisateurs authorises
  131. <Limit LOGIN>
  132. AllowUser domaine1
  133. AllowUser domaine1_user1
  134. AllowUser domaine1_user2
  135. DenyALL
  136. </Limit>
  137. #
  138. #Liste des dossier utilisateurs
  139. <Directory /home/domaine1/*>
  140. Umask 022 022
  141. AllowOverwrite on
  142. <Limit ALL>
  143.  Order Allow,Deny
  144.  AllowUser domaine1
  145.  DenyALL
  146. </Limit>
  147. </Directory>
  149. <Directory /home/domaine1/www/user1/*>
  150. Umask 022 022
  151. AllowOverwrite on
  152. <Limit ALL>
  153.  Order Allow,Deny
  154.  AllowUser domaine1
  155.  AllowUser domaine1_user1
  156.  DenyALL
  157. </Limit>
  158. </Directory>
  160. <Directory /home/domaine1/www/user2/*>
  161. Umask 022 022
  162. AllowOverwrite on
  163. <Limit ALL>
  164.  Order Allow,Deny
  165.  AllowUser domaine1
  166.  AllowUser domaine1_user2
  167.  DenyALL
  168. </Limit>
  169. </Directory>


 
Vous voyez ce que je tente de faire ? Une idée de comment le faire (ca commence à me faire tourner en bourrique) ?


---------------
[b] FAH-Addict, première source d'information francophone sur le projet Folding@Home.  
Reply

Marsh Posté le 28-05-2009 à 15:43:47   

Reply

Sujets relatifs:

Leave a Replay

Make sure you enter the(*)required information where indicate.HTML code is not allowed