Gentoo Archives: gentoo-user

From: Nikolay Balov <dragnipur@×××.bg>
To: gentoo-user@l.g.o
Subject: Re: [gentoo-user] web & ftp server
Date: Thu, 15 Feb 2007 09:26:27
Message-Id: 45D425D9.3040706@vip.bg
In Reply to: Re: [gentoo-user] web & ftp server by support@stonki.de
1 Thanks a lot it was very helpfull :)
2
3 support@××××××.de wrote:
4 > Hi,
5 >
6 >
7 >> Hi guys, i have a web server with IP based virtual hosts (3-4) and i
8 >> want to make a ftp account for every host. I'm thinking to use proftpd
9 >> and to make the root dir in /var/www so then every user will have home
10 >> directory to different web account (/var/www/domain1, /var/www/domain2,
11 >> etc.). For the ownership of the files i'm thinking to start the ftp
12 >> server with user and group apache to make possible for the web server to
13 >> read the files. Is my ideas right?
14 >> I'm open for other ideas :)
15 >>
16 >
17 > well, in general you are right, but please allow me some comments:
18 >
19 > ProFTPD is supporting alternative user/passwd sources like files or a
20 > mysql db. While mysql is a good solution for mass hosting, I would go for
21 > "authuserfile" in your case. This allows you to work with FTP users
22 > without adding any system users to your system. As well you can also give
23 > the user an invidual UID and GID, so I would suggest the UID and GID of
24 > apache.
25 >
26 > I am not sure, if the ftpasswd program to handle this accounts is included
27 > in the gentoo package. You will find it in the contrib directory of
28 > proftpd.
29 >
30 > Usuage: (example taken from an SuSE System I worked on last week):
31 > ftpasswd --file /usr/local/etc/proftpd.user --home <HOME> --name <NAME>
32 > --shell /bin/false --passwd --uid 30 --gid 8
33 >
34 > proftpd.conf:
35 > AuthUserFile /usr/local/etc/proftpd.user
36 > RequireValidshell off
37 >
38 > the syntax should be clear, otherwise just ask.
39 >
40 > If I am correct you have to recompile ProFTPD with the correct Useflag.
41 > Also please note, that you still can login as a system user. To prevent
42 > this you have to add the authorder option to your proftp.conf
43 >
44 > Hope that helps
45 >
46 > Stonki
47 >
48 >
49 >
50
51
52 --
53 Cyberly yours,
54 Nikolay Balov
55
56 mail: dragnipur@×××.bg
57 Linux Registered User #382280
58 http://keyserver.linux.it/
59 Key fingerprint = D80E A05B 5727 B40C 7431 2CC0 0845 E79E 428A 1109
60
61 --
62 gentoo-user@g.o mailing list