[6330] in RedHat Linux List

home help back first fref pref prev next nref lref last post

Re: MKDIR problems with ftp server

daemon@ATHENA.MIT.EDU (Joe Shaw)
Tue Nov 26 19:13:32 1996

To: redhat-list@redhat.com
In-reply-to: Your message of "Mon, 25 Nov 1996 12:25:13 PST."
             <1.5.4.32.19961125202513.00314c84@mail.islandnet.com> 
Date: Tue, 26 Nov 1996 19:10:45 -0500
From: Joe Shaw <joeshaw@joeshaw.bevc.blacksburg.va.us>
Resent-From: redhat-list@redhat.com
Reply-To: redhat-list@redhat.com


Ron wrote:
> Hi.  I am hoping someone can give me a suggestion on how to correct a
> problem we are having with our FTP server setup.

I just noticed that I'm having the exact same problem, and
thought I'd add a few details.

> What I am trying unsuccessfully to do is to allow valid maintainers of ftp
> directories the ability to create subdirectories.  These "maintainers" do
> not have shell access and are strictly allowed to access thier directories
> via ftp.  When anyone attempts to create a subdirectory they are greeted
> with a "permission denied (MKDIR)" reply from ftpd.  The ftpaccess file has
> no specific lines dealing with this other than the "upload" section and
> these users are not coming in as "anonymous".  From what I can tell, ftpd is
> intercepting the mkdir command so it has nothing to do with the actual
> directory permissions (i.e. I can go a+rwx and it makes no difference).  

ftpd intercepts the command so you can restrict your users from
creating directroies even in the directory they own.  If the
user has permission from ftpd to create directories, then the
permissions/ownership of the actual directory comes into play.

When the mkdir fails because of permission on the actual directory,
the error message is:

550 test: Permission denied.

When the mkdir fails because the user has not beengiven mkdir permision
in the ftpaccess file, the error message is:

530 test: Permission denied.  (Mkdir)


> Is there a config option that will allow this or am I going to have to
> modify the source to get this work?

The "dirs|nodirs" option to the upload statements in the ftpaccess
*is* the config option.  It just doesn't seem to be working.

Question:  Do you have those users set up as "guest" acounts
in the ftpaccess file?

For example, here's what I'm doing in my ftp access file to give
ftp only user "bob" access:

===
upload  /home/ftp  /pub/bob          yes  bob   bob   0644 dirs
upload  /home/ftp  /pub/bob/*        yes  bob   bob   0644 dirs

guestgroup bob
===

This setup allowed bob to create directories when I was running wu.ftpd
under Slackware 2.3; bob can no longer create directories with the ftpd
from RedHat 4.0.


While I'm on the subject, I noticed that I also get the following
message showing up in the syslog every time a guestgroup user
(but not anonymous or real users) logs in or exits:

ftpd[1511]: open of pid file failed: No such file or directory

I have
class   all   real,guest,anonymous  *

in the ftpaccess file, and /var/run/ftp.pids-all exists
and is readable.

Possibly related, ftpwho appers to only show anonymous users and
not real or guest users, even though they're all in the same class.


Anyone out there actually have this working under RedHat 4.0?
And if so, how do you have it configured.

- Joe
------
Joe Shaw -- joeshaw@joeshaw.bevc.blacksburg.va.us
http://joeshaw.bevc.blacksburg.va.us/~joeshaw/
"Sometimes I get the urge to break into the Post
Office and lick all the stamps." --Dogbert


--
  PLEASE read the Red Hat FAQ, Tips, Errata and the MAILING LIST ARCHIVES!
  ________________________________________________________________________
  http://www.redhat.com/RedHat-FAQ   http://www.redhat.com/RedHat-Errata
  http://www.redhat.com/RedHat-Tips  http://www.redhat.com/mailing-lists
  ------------------------------------------------------------------------
To unsubscribe: mail -s unsubscribe redhat-list-request@redhat.com < /dev/null


home help back first fref pref prev next nref lref last post