HOWTO : Create a FTP server with user access (proftpd)

[frodon]

All about what is root rights and how to use them here :
https://help.ubuntu.com/community/RootSudo

[Jackaniny]

Hey,

I've been having a hell of a time trying to get my server working with multiple logins (and diferent permission for each login).

What I'm trying to setup is:

A home dir (/home/ftp) that I can control with the main ftp user account and a dir (/home/ftp/clientclips) that, when logged in as a second account, is read only.
I would like to have full control the main dir (and all sub-dir) using the main ftp account and still have the clientclips dir read only for the second ftp account.

So far the best I've been able to do is have the main dir be read/write for the main account (anarchyftp) and the clientsclips be read only, or have all dir and sub-dir be read/write for the anarchyftp account and get PWD or PORT errors (often both) when logging in as the second account (creativeftp)

I've attached my current conf.
with it I'm able to read/write while logged in as anarchyftp, but I get this error when logged in as creativeftp:

"Could not determine current path. Server said: PWD: Permission denied. Error -124: PWD failed"

Does anyone have any tips? I'm getting kind of desperate.

[espo100583]

Hi Guys,

Just a quick question,

I am able to connect locally to the FTP server but not externally. I have set the passive prots in the proftpd.conf file and matche the ports the router allows through to the server but when I connect externally I get

Response: 500 Illegal PORT command
Error: Could not retrieve directory listing

Any ideas would be greatly appreciated as I'm all out.

Thanks

[Jackaniny]

I figured out the PWD error!

the problem was I had set the permissions like this:

<Directory /home/ftp/*>
Umask 022 022
AllowOverwrite on

        <Limit ALL>
		Order Allow,Deny
		AllowUser anarchyftp
		AllowUser macwrech
		AllowUser caadmin
		Deny ALL
	</Limit>

	<Limit READ MKD STOR CWD DELE XMKD RNEF RNTO RMD XRMD>
	AllowAll
	</Limit>
</Directory>

<Directory> /home/ftp/clientclips/*>
Umask 022 022
AllowOverwrite on

       <Limit ALL>
		Order Allow,Deny
		AllowUser anarchyftp
		AllowUser macwrech
		AllowUser caadmin
		AllowUser creativeftp
		Deny ALL
	</Limit>

When I should have set them like this:

<Directory /home/ftp/*>
Umask 022 022
AllowOverwrite on

        <Limit ALL>
		Order Allow,Deny
		AllowUser anarchyftp
		AllowUser macwrech
		AllowUser caadmin
		AllowUser creativeftp
		Deny ALL
	</Limit>

	<Limit READ MKD STOR CWD DELE XMKD RNEF RNTO RMD XRMD>
	AllowAll
	</Limit>
</Directory>

<Directory> /home/ftp/clientclips/*>
Umask 022 022
AllowOverwrite on

       <Limit ALL>
		Order Allow,Deny
		AllowUser anarchyftp
		AllowUser macwrech
		AllowUser caadmin
		AllowUser creativeftp
		Deny ALL
	</Limit>

The problem was I didn't give the read-only user permission to use the root dir, so it couldn't get access to the sub-dir.

E.g.

This gave me the PWD and PORT errors:

<Directory /home/ftp/*>
Umask 022 022
AllowOverwrite on

        <Limit ALL>
		Order Allow,Deny
		AllowUser anarchyftp
		AllowUser macwrech
		AllowUser caadmin
		Deny ALL
	</Limit>

<Directory> /home/ftp/clientclips/*>
Umask 022 022
AllowOverwrite on

       <Limit ALL>
		Order Allow,Deny
		AllowUser anarchyftp
		AllowUser macwrech
		AllowUser caadmin
		AllowUser creativeftp
		Deny ALL
	</Limit>

This worked:

<Directory /home/ftp/*>
Umask 022 022
AllowOverwrite on

        <Limit ALL>
		Order Allow,Deny
		AllowUser anarchyftp
		AllowUser macwrech
		AllowUser caadmin
		AllowUser creativeftp
		Deny ALL
	</Limit>

<Directory> /home/ftp/clientclips/*>
Umask 022 022
AllowOverwrite on

       <Limit ALL>
		Order Allow,Deny
		AllowUser anarchyftp
		AllowUser macwrech
		AllowUser caadmin
		AllowUser creativeftp
		Deny ALL
	</Limit>

Hope that helps someone.

[Glitch0r]

Hello people, I installed proftpd on Ubuntu 6.10 with this tutorial and that all worked fine.

I now however want to install a third party module (mod_ban) but I really dont know how to do this. The instructions tell me to add a file (mod_ban.c) to the proftp-dir/contrib directory but I can not find this.

It also tells me to recompile using the commands below but executing these commands in terminal just give me a unknown command errors.

There must be someone out here that has done this before and who can help me out.

[frodon]

You should see in the proftpd forum for this, did you check that the module isn't installed by default ?

[Glitch0r]

You should see in the proftpd forum for this, did you check that the module isn't installed by default ?

The proftpd forum has very bad support so I thought I'd try it here especially since the problem seem to lay in the fact that I installed a packaged version as explained in this tutorial while the installation instructions from the module I want assume you have compiled it yourself as it seems.

Now I need to find a way to recompile the packaged version with the extra modules.

The module is not installed by default:

jelger@jelger-desktop:/etc/proftpd$ proftpd --list
Compiled-in modules:
  mod_core.c
  mod_xfer.c
  mod_auth_unix.c
  mod_auth_file.c
  mod_auth.c
  mod_ls.c
  mod_log.c
  mod_site.c
  mod_delay.c
  mod_dso.c
  mod_auth_pam.c
  mod_readme.c
  mod_cap.c
  mod_ctrls.c

[technics]

great howto thx!

[kptracey]

Hi,

I plan to search the 41 pages for an answer to this post but in case someone is feeling charitable...

My setup isn't working correctly and I get the following error:

kieran@samurai:/home/FTP-shared$ sudo /etc/init.d/proftpd restart
* Stopping ftp server proftpd [ ok ]
* Starting ftp server proftpd
- IPv4 getaddrinfo 'samurai' error: Name or service not known
- warning: unable to determine IP address of 'samurai'
- error: no valid servers configured
- Fatal: error processing configuration file '/etc/proftpd/proftpd.conf'


I'm very new to Ubuntu. I setup a Samba server last night with a static ip and I'm running Firestarter. I also have a wireless router.

Thanks in advance.
______________________________________

I GOT IT WORKING!!!! (even though no one has previously replied to this problem- so I will now =)

If you run into the same problem... do me a favour and in terminal type: 'hostname -f'
I bet it responds 'hostname: Unknown host'

If it does, do this:
sudo gedit /etc/hosts/

Add this line: '127.0.0.1 <hostname> <FQDN>'

FQDN stands for Fully Qualified Domain Name
hostname is the name of your machine

Mine reads something like this:
127.0.0.1 samurai samurai.phubs.net.cab.irelandrules.com

In this instance, hostname is samurai and samurai.phubs.net.cab.irelandrules.com is the FQDN.

In hindsight, this is a result of me being lazy during my Samba install and simply appending a preexisting entry with mshome and slightly altering the 127 mask.

And yes, to my fellow lazy people, you're all very very welcome =)

Happy FTPing!!!

[sputnik2012]

Hi.

I've googled this but can find no answers.
I can access my server when I type ftp localhost.

rob@ubuntu-rydal:~$ ftp localhost
Connected to ubuntu-rydal.
220 My FTPD
Name (localhost:rob): *****
331 Password required for *****.
Password:
230 User rob logged in.
Remote system type is UNIX.
Using binary mode to transfer files.
ftp>

Logins work fine.

However, when I try ftp (my.domain.name) I get:

530 Login Incorrect
Login Failed.
Remote type system is ignored.

I've checked /etc/hosts.deny (empty)
/etc/hosts.allow ALL

Any help greatly appreciated.

Rob.

#
# /etc/proftpd/proftpd.conf -- This is a basic ProFTPD configuration file.
# To really apply changes reload proftpd after modifications.
#

# Includes DSO modules
Include /etc/proftpd/modules.conf

ServerName "Sputnik_rydal"
ServerType standalone
DeferWelcome off

MultilineRFC2228 off
DefaultServer on
ShowSymlinks on

TimeoutNoTransfer 600
TimeoutStalled 600
TimeoutIdle 1200

DisplayLogin welcome.msg
DisplayFirstChdir .message
ListOptions "-l"

#DenyFilter \*.*/
AllowOverwrite on

DefaultRoot ~
# Port 21 is the standard FTP port.
Port 21

# In some cases you have to specify passive ports range to by-pass
# firewall limitations. Ephemeral ports can be used for that, but
# feel free to use a more narrow range.
# PassivePorts 49152 65534

# To prevent DoS attacks, set the maximum number of child processes
# to 30. If you need to allow more than 30 concurrent connections
# at once, simply increase this value. Note that this ONLY works
# in standalone mode, in inetd mode you should use an inetd server
# that allows you to limit maximum number of processes per service
# (such as xinetd)
MaxInstances 30

# Set the user and group that the server normally runs at.
User proftpd
Group nogroup

# Umask 022 is a good standard umask to prevent new files and dirs
# (second parm) from being group and world writable.
Umask 022 022
# Normally, we want files to be overwriteable.
AllowOverwrite on

# Uncomment this if you are using NIS or LDAP to retrieve passwords:
# PersistentPasswd off
# Be warned: use of this directive impacts CPU average load!
#
# Uncomment this if you like to see progress and transfer rate with ftpwho
# in downloads. That is not needed for uploads rates.
# UseSendFile off

TransferLog /var/log/proftpd/xferlog
SystemLog /var/log/proftpd/proftpd.log

<IfModule mod_tls.c>
TLSEngine off
</IfModule>

<IfModule mod_quota.c>
QuotaEngine on
</IfModule>

<IfModule mod_ratio.c>
Ratios on
</IfModule>


# Delay engine reduces impact of the so-called Timing Attack described in
# http://security.lss.hr/index.php?pag...LSS-2004-10-02
# It is on by default.
<IfModule mod_delay.c>
DelayEngine on
</IfModule>

<IfModule mod_ctrls.c>
ControlsEngine on
ControlsMaxClients 2
ControlsLog /var/log/proftpd/controls.log
ControlsInterval 5
ControlsSocket /var/run/proftpd/proftpd.sock
</IfModule>

<IfModule mod_ctrls_admin.c>
AdminControlsEngine on
</IfModule>

# A basic anonymous configuration, no upload directories.

# <Anonymous ~ftp>
# User ftp
# Group nogroup
# # We want clients to be able to login with "anonymous" as well as "ftp"
# UserAlias anonymous ftp
# # Cosmetic changes, all files belongs to ftp user
# DirFakeUser on ftp
# DirFakeGroup on ftp
#
# RequireValidShell off
#
# # Limit the maximum number of anonymous logins
# MaxClients 10
#
# # We want 'welcome.msg' displayed at login, and '.message' displayed
# # in each newly chdired directory.
# DisplayLogin welcome.msg
# DisplayFirstChdir .message
#
# # Limit WRITE everywhere in the anonymous chroot
# <Directory *>
# <Limit WRITE>
# DenyAll
# </Limit>
# </Directory>
#
# # Uncomment this if you're brave.
# # <Directory incoming>
# # # Umask 022 is a good standard umask to prevent new files and dirs
# # # (second parm) from being group and world writable.
# # Umask 022 022
# # <Limit READ WRITE>
# # DenyAll
# # </Limit>
# # <Limit STOR>
# # AllowAll
# # </Limit>
# # </Directory>
#
# </Anonymous>

<Directory /home/ftp/music>
Umask 022 022
AllowOverwrite off
<Limit LOGIN MKD STOR DELE XMKD RNEF RNTO RMD XRMD>
AllowAll
</Limit>
</Directory>

<Directory> /home/ftp/upload/>
Umask 022 022
AllowOverwrite on
<Limit LOGIN READ RMD DELE>
AllowAll
AllowUser All
</Limit>

<Limit LOGIN STOR CWD MKD>
AllowAll
AllowUser All
</Limit>
</Directory>