vsftpd configuration problems

[willieray]

Hey team, I'm a bit stuck. Here's the deal:

I want to have an ftp user that is very restricted. I want user to be able to write only and only to one directory. Basically, we have advertisers that need to upload their content for our monthly magazine. We do not want them to be able to see any of the files in the upload directory, or download any files. Basically, i want to jail them into an unreadable directory so all they can do is upload. We do not want anonymous access. Please help.

thanks

[aenguillo]

i tried vsftp before but got troubles with it. i tried ProFTP. setting up is easy. just my opinion.

[luci2200]

Originally Posted by willieray

Hey team, I'm a bit stuck. Here's the deal:

I want to have an ftp user that is very restricted. I want user to be able to write only and only to one directory. Basically, we have advertisers that need to upload their content for our monthly magazine. We do not want them to be able to see any of the files in the upload directory, or download any files. Basically, i want to jail them into an unreadable directory so all they can do is upload. We do not want anonymous access. Please help.

thanks

Hello,
All you have to do is edit vsftpd.conf under the /etc directory. You uncomment the line chroot_list, and you create the file chroot_list and in this file you put the user name of the user you want to ahve acces in their folder, usualy their home directory. After you edit the files you restart the vsftpd and that's all. If you need help I can send you a example of configuration files that I have on my servers. Give me an e-mail. Good look!

Lucian

[willieray]

I resolved my issue. For anyone else who needs something similar:

I created an upload directory in /var/ftp
I chmod the upload dir to 753, allowing execute and write permissions to all
I allowed anon uploads in vsftpd.conf
I changed vsftpd.conf to chown files to my username after upload.

Now anon users can upload only to /var/ftp/upload , but not overwrite, or read any files there. My username has read and write perms to these files and we're good to go.

[barf]

Had you not stated that you did not want to allow anon access I'm sure several of us readers would have given you that solution!!