[lug] How to set up a private FTP account for a user?

[Michael Belanger]

On Saturday 01 April 2006 12:07 am, Sean Reifschneider found the courage to 
say:
> On Thu, Mar 30, 2006 at 10:30:25AM -0700, Bill Thoen wrote:
> >I've got a need to provide upload/download FTP service for one of my
> >clients, and I'm not sure how to go about it. I've got a RedHat FC2
> >server set up with vsftpd, and I have set up a public FTP download
>
> vsftpd doesn't support it, AFAIK.  I do that with proftpd.  Set up a
> dedicated /etc/proftpd/passwd and /etc/proftpd/group file for it to use, so
> that there is no system account.  You can also tune it to allow or deny
> directory listing, overwriting existing files, downloading but not
> uploading or the converse, etc...

vsftpd does it using tcpwrappers.  You can setup multiple vsftpd.conf files 
for various users and user groups.  This is how we do it so that some have 
upload rights and others don't.

from /etc/hosts.allow:
vsftpd: 192.168.0.5: setenv VSFTPD_LOAD_CONF /etc/vsftpd/limited.class
vsftpd: 192.168.0.100: setenv VSFTPD_LOAD_CONF /etc/vsftpd/guest.class

The class files listed are just vsftpd.conf files.  Each class inherits the 
conf listed in the main vsftpd.conf file, the class files will override or 
add to the main conf.

I used this site for figuring out how to make it work how I want:
http://www.muug.mb.ca/tutorials/vsftpd-class.html

You can either use system accounts or virtual users.. though I don't have much 
experience with the virtual users.
The docs may cover that in /usr/share/doc/vsftpd-xxx



-- 
Michael Belanger
CICLOPS, Space Science Institute
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 191 bytes
Desc: not available
URL: <http://lists.lug.boulder.co.us/pipermail/lug/attachments/20060403/642cb398/attachment.pgp>