FTP und user ohne shell

Alle weiteren Dienste, die nicht in die drei oberen Foren gehören.
Antworten
Rhed
Beiträge: 3
Registriert: 19.02.2006 14:00:18
Wohnort: Austria
Kontaktdaten:

FTP und user ohne shell

Beitrag von Rhed » 19.02.2006 14:19:19

Hallo,

Ich möchte gerne User ohne Shell Zugang einrichten welche aber Zugriff per FTP auf ihr Homeverzeichniss haben.
Als FTP Dämon läuft ProFTPD.

Ich habe den User mit folgenden Befehl erstellt:

Code: Alles auswählen

adduser --home /var/www/user1 --shell /bin/false user1
Jetzt habe ich zwar einen User der keinen Zugang zur Shell hat aber dieser kann sich auch nicht per FTP einloggen.

Danke

MfG
Rhed

ekle
Beiträge: 56
Registriert: 08.11.2005 21:02:03
Lizenz eigener Beiträge: MIT Lizenz
Kontaktdaten:

Beitrag von ekle » 19.02.2006 14:20:21

post mal dein proftpd config

Rhed
Beiträge: 3
Registriert: 19.02.2006 14:00:18
Wohnort: Austria
Kontaktdaten:

Beitrag von Rhed » 19.02.2006 14:22:40

Hallo,

Code: Alles auswählen

#
# /etc/proftpd.conf -- This is a basic ProFTPD configuration file.
# To really apply changes reload proftpd after modifications.
# 

ServerName			"TuX"
ServerType			standalone
DeferWelcome			off

MultilineRFC2228		on
DefaultServer			on
ShowSymlinks			on

TimeoutNoTransfer		600
TimeoutStalled			600
TimeoutIdle			1200

DisplayLogin                    welcome.msg
DisplayFirstChdir               .message
ListOptions                	"-l"

DenyFilter			\*.*/

# Uncomment this if you are using NIS or LDAP to retrieve passwords:
#PersistentPasswd		off

# Uncomment this if you would use TLS module:
#TLSEngine 			on

# Uncomment this if you would use quota module:
#Quotas				on

# Uncomment this if you would use ratio module:
#Ratios				on

# Port 21 is the standard FTP port.
Port				21

# To prevent DoS attacks, set the maximum number of child processes
# to 30.  If you need to allow more than 30 concurrent connections
# at once, simply increase this value.  Note that this ONLY works
# in standalone mode, in inetd mode you should use an inetd server
# that allows you to limit maximum number of processes per service
# (such as xinetd)
MaxInstances			30

# Set the user and group that the server normally runs at.
User				nobody
Group				nogroup

# Umask 022 is a good standard umask to prevent new files and dirs
# (second parm) from being group and world writable.
Umask				022  022
# Normally, we want files to be overwriteable.
AllowOverwrite			on

# Delay engine reduces impact of the so-called Timing Attack described in
# http://security.lss.hr/index.php?page=details&ID=LSS-2004-10-02
# It is on by default. 
#DelayEngine 			off

# A basic anonymous configuration, no upload directories.

# <Anonymous ~ftp>
#   User				ftp
#   Group				nogroup
#   # We want clients to be able to login with "anonymous" as well as "ftp"
#   UserAlias			anonymous ftp
#   # Cosmetic changes, all files belongs to ftp user
#   DirFakeUser	on ftp
#   DirFakeGroup on ftp
# 
#   RequireValidShell		off
# 
#   # Limit the maximum number of anonymous logins
#   MaxClients			10
# 
#   # We want 'welcome.msg' displayed at login, and '.message' displayed
#   # in each newly chdired directory.
#   DisplayLogin			welcome.msg
#   DisplayFirstChdir		.message
# 
#   # Limit WRITE everywhere in the anonymous chroot
#   <Directory *>
#     <Limit WRITE>
#       DenyAll
#     </Limit>
#   </Directory>
# 
#   # Uncomment this if you're brave.
#   # <Directory incoming>
#   #   # Umask 022 is a good standard umask to prevent new files and dirs
#   #   # (second parm) from being group and world writable.
#   #   Umask				022  022
#   #            <Limit READ WRITE>
#   #            DenyAll
#   #            </Limit>
#   #            <Limit STOR>
#   #            AllowAll
#   #            </Limit>
#   # </Directory>
# 
# </Anonymous>

UseReverseDNS off
IdentLookups off
DefaultRoot ~

DeletedUserReAsG

Beitrag von DeletedUserReAsG » 19.02.2006 16:43:05

Ich empfehle einen Blick in die Doku des Programmes: http://proftpd.org/docs/directives/link ... Shell.html

cu

Rhed
Beiträge: 3
Registriert: 19.02.2006 14:00:18
Wohnort: Austria
Kontaktdaten:

Beitrag von Rhed » 19.02.2006 17:00:18

Danke hat geklappt

Antworten