PDA

View Full Version : VSFTPD Setup


carlwill
2005-07-21, 10:02 AM CDT
I just got FC4 with the latest version of vsftpd (2.0.3) and I am able to login fine to my server with my user name and password.

My question now is how can I set up the FTP directories and permissons? Is there a online guide that will show me how I can set up my server for public access?

I am only pointing port 21 > to my linux server, should I be opening more?

AngryKeebler
2005-07-21, 10:32 AM CDT
/etc/vsftpd/vsftpd.conf is a good place to start

Also, vsftpd has some walk throughs on some different setups.

ftp://vsftpd.beasts.org/users/cevans/untar/vsftpd-2.0.3/

In the example folder there are some examples and walk throughs of some different secure setups.

What exactly are you wanting to do with your FTP server?

carlwill
2005-07-21, 11:37 AM CDT
What exactly are you wanting to do with your FTP server?

I want to disable anonymous login so not just anyone can hot my server and browse my files.

I then want to allow specific users to connect to the server and access specific directories and admin their permissions to the directories.

brandor
2005-07-21, 11:46 AM CDT
To disable anonymous login, jsut edit vsftpd.conf.

There is also a file for allowing which users can NOT log in. The default is only root. I can't remember the exact name off the top of my head, but it's something like ftpusers.

carlwill
2005-07-21, 12:08 PM CDT
To disable anonymous login, jsut edit vsftpd.conf.

There is also a file for allowing which users can NOT log in. The default is only root. I can't remember the exact name off the top of my head, but it's something like ftpusers.

Yes, I am checking it out now...

[root@localhost vsftpd]# nano ftpusers
GNU nano 1.3.5-cvs File: ftpusers

# Users that are not allowed to login via ftp
root
bin
daemon
adm
lp
sync
shutdown
halt
mail
news
uucp
operator
games
nobody


Now my question is how can I create someone an FTP account on my server and give them permissions. I am checking the vsftpd.conf file as you read this.

This is my vsftpd.conf file in case it matters...

VSFTPD

Example config file /etc/vsftpd/vsftpd.conf
#
# The default compiled in settings are fairly paranoid. This sample file
# loosens things up a bit, to make the ftp daemon more usable.
# Please see vsftpd.conf.5 for all compiled in defaults.
#
# READ THIS: This example file is NOT an exhaustive list of vsftpd options.
# Please read the vsftpd.conf.5 manual page to get a full idea of vsftpd's
# capabilities.
#
# Allow anonymous FTP? (Beware - allowed by default if you comment this out).
anonymous_enable=YES
#
# Uncomment this to allow local users to log in.
local_enable=YES
#
# Uncomment this to enable any form of FTP write command.
write_enable=YES

AngryKeebler
2005-07-21, 03:08 PM CDT
Go here . . .

ftp://vsftpd.beasts.org/users/cevans/untar/vsftpd-2.0.3/EXAMPLE/

Read the virtual users example, that should let you do what you want to do. That is what I did. It is rather simple and more secure than just allowing local users the ability to login.

If you have any questions regarding that help file, i've used it several times, so i might be able to help you out.

carlwill
2005-07-21, 06:33 PM CDT
For some reason I am only able to access my FTP server from CLI both via Windows and Linux.

Why does my ftp server not come up in my URL field on the browser?

ftp://carlwill.dyndns.org

I know it is working since CLI is allowing full access and I can login as my user account.

Please help.

AngryKeebler
2005-07-25, 09:46 PM CDT
I really don't know what the problem is but here are a few suggestions I came up with off the top of my head. . .I think I had a similar problem once, and I just played around. . .restarting the service and trying various things.

Try restarting the service on your server. Or connecting to it from a browser on your server (if have a gui installed) i dunno about text based browsers.

Maybe you need to turn on folder view for FTP sites in your Internet Options if you are using IE.

Also, try just throwing in your IP addres instead of the URL or using something like fireFTP or SmartFTP. Maybe using an FTP client would help.

These could narrow down some of the possible problems it could be.