VSFTP Virtualhost

[demo]

wie mache ich das mit vsftp

Code: Select all

9. Edit ProFTPD 1.2.7 (/usr/local/etc/proftpd.conf) file
for RedHat you should have installed ProFTPD with that configuration
./configure --prefix=/usr --sysconfdir=/etc --with-modules=mod_sql:mod_sql_mysql --with-includes=/usr/include/mysql --with-libraries=/usr/lib/mysql

#----------> ProFTPD Configuration for XPanel <--------------------------------#
<VirtualHost 111.222.333.444>
	SQLConnectInfo XPanel@localhost:3306 root Put_Your_MySQL_PassWord_Here
	SQLUserInfo users domainName password id id homedir NULL
	SQLGroupInfo users status id domainName
	SQLAuthTypes Plaintext
	RequireValidShell off
	SQLUserWhereClause "status = 'Active'" 
	DefaultRoot	~ Active
	<Directory />
		AllowOverwrite	on
	</Directory>
	PathAllowFilter ^[A-Za-z0-9._-]+$
	PathDenyFilter "((^|/)[-.])|(\.(js|vbs|shs|scr|exe|mov|avi|mpg|sql|pl|cgi|shtml)$)"
	#for download restrictions
	MaxRetrieveFileSize 100 Kb
	#for upload restrictions
	MaxStoreFileSize 1 Mb
</VirtualHost>
#----------> End ProFTPD Configuration for XPanel <----------------------------#

[captaincrunch]

Den hier verschiebe ich mal ins Datentransfer und Backup, da ich das als "Fortgeschrittenenfrage" ansehe ...

[dodolin]

Also mir ist ja immer noch nicht ganz klar, was Virtual Hosts bei FTP bringen sollen. Erst kürzlich hat hier irgendwo im rootforum doch jemand erklärt, dass das im FTP-Protokoll eben nicht vorgesehen ist - im Gegensatz zu HTTP. Ok, davon mal abgesehen, würde ich es halt mal mit der vorhandenen Doku versuchen (IOW: RTFM. In sofern sehe ich jetzt noch nicht das "Fortgeschrittene" an der Frage ):

http://vsftpd.beasts.org/

Features
* Virtual IP configurations.
* Virtual users.
* [...]

Also mal FAQ gucken... ftp://vsftpd.beasts.org/users/cevans/un ... -1.1.3/FAQ

Q) Help! Does vsftpd do virtual hosting setups?
A1) Yes. If you integrate vsftpd with xinetd, you can use xinetd to bind to
several different IP addresses. For each IP address, get xinetd to launch
vsftpd with a different config file. This way, you can get different behaviour
per virtual address.
A2) Alternatively, run as many copies as vsftpd as necessary, in standalone
mode. Use "listen_address=x.x.x.x" to set the virtual IP.

Q) Help! Does vsftpd support virtual users?
A) Yes, via PAM integration. Set "guest_enable=YES" in /etc/vsftpd.conf. This
has the effect of mapping every non-anonymous successful login to the local
username specified in "guest_username". Then, use PAM and (e.g.) its pam_userdb
module to provide authentication against an external (i.e. non-/etc/passwd)
repository of users.
Note - currently there is a restriction that with guest_enable enabled, local
users also get mapped to guest_username.
There is an example of virtual users setup in the "EXAMPLE" directory.

[demo]

das kommt aber nicht auf das gleiche raus, was ich machen will,
so wie ich es sehe geht das überhaupt nicht oder doch ?

http://mitglied.lycos.de/xports/README

bis auf das er noch den ftp account anlegt funktioniert es.

[dodolin]

das kommt aber nicht auf das gleiche raus, was ich machen will,
so wie ich es sehe geht das überhaupt nicht oder doch ?

Ehrlich gesagt, ist mir überhaupt nicht klar, was du eigentlich überhaupt genau machen willst, da ich von proftpd keine Ahnung habe und deshalb mit deinem obigem Code-Schnipsel nicht viel anfangen kann. Könntest du das vielleicht nochmal mit Worten beschreiben, was du genau vorhast?

http://mitglied.lycos.de/xports/README

1.1 About the Script
-------------------------------------------------------------------------
XPanel is a community product that allows webmasters to provide individual
websites (name.yourdomain.com) for their users in a secure, administered
environment. It allows you to automatically accept user signups or approve
each user from admin area.

Das hat mit Virtual Hosts ja IMHO nur sekundär zu tun. Dieses Skript ist in meinen Augen eher sowas wie Confixx, d.h. ein Admin-Tool zur Userverwaltung. Warum man dafür jetzt unbedingt Virtual Hosts braucht, ist mir auch noch nicht ganz klar... (s.o.)

AFAIK kann vsftpd nicht direkt mit SQL-DBs, aber das sollte sich über den PAM-Support von vsftpd mit einem ensprechenden PAM-Modul erledigen lassen, sofern gewünscht.

Das entspricht halt eher der Philosophie von vsftpd, so wenig Code wie möglich... Und warum noch SQL-Support in einen FTPD packen, wo es doch PAM zur Userauthentifizierung gibt und PAM ja sämtliche erdenkliche Authentifizierungsvarianten unterstützt?

Entscheide dich: Entweder sicher (vsftpd) oder eierlegende Wollmilchsau (proftpd)...

[demo]

jetzt hab ich proftpd-1.2.2release-125.i386.rpm installiert und das läuft auch, aber wenn ich nun den virtual host ins proftpd.conf rein schreibe kann ich nicht mehr connecten

Code: Select all

<VirtualHost 111.222.333.444> 
   SQLConnectInfo XPanel@localhost:3306 root Put_Your_MySQL_PassWord_Here 
   SQLUserInfo users domainName password id id homedir NULL 
   SQLGroupInfo users status id domainName 
   SQLAuthTypes Plaintext 
   RequireValidShell off 
   SQLUserWhereClause "status = 'Active'" 
   DefaultRoot   ~ Active 
   <Directory /> 
      AllowOverwrite   on 
   </Directory> 
   PathAllowFilter ^[A-Za-z0-9._-]+$ 
   PathDenyFilter "((^|/)[-.])|(\.(js|vbs|shs|scr|exe|mov|avi|mpg|sql|pl|cgi|shtml)$)" 
   #for download restrictions 
   MaxRetrieveFileSize 100 Kb 
   #for upload restrictions 
   MaxStoreFileSize 1 Mb 
</VirtualHost> 

beim installieren kommt

Code: Select all

xxxxxx:/home/vhosts/proftpd-1.2.8 # ./configure --with-modules=mod_sql:mod_sql_mysql --with-includes=/usr/include/mysql --with-libraries=/usr/lib/mysql
checking build system type... i686-pc-linux-gnu
checking host system type... i686-pc-linux-gnu
checking target system type... i686-pc-linux-gnu
checking for gcc... gcc
checking for C compiler default output... a.out
checking whether the C compiler works... yes
checking whether we are cross compiling... no
checking for suffix of executables... 
checking for suffix of object files... o
checking whether we are using the GNU C compiler... yes
checking whether gcc accepts -g... yes
checking for gcc option to accept ANSI C... none needed
checking whether make sets $(MAKE)... yes
checking for a BSD-compatible install... /usr/bin/install -c
checking for ranlib... ranlib
checking for special C compiler options needed for large files... no
checking for _FILE_OFFSET_BITS value needed for large files... 64
checking for _LARGE_FILES value needed for large files... no
checking whether the C compiler accepts -Wall... yes
checking whether gcc accepts -Wno-long-double... no
checking for standalone crypt... no
checking for crypt in -lcrypt... yes
checking for standalone gethostbyname... yes
checking for standalone inet_aton... yes
checking for standalone nsl functions... yes
checking for standalone socket functions... yes
checking for _pw_stayopen variable... no
checking for set_auth_parameters in -lsecurity... no
checking for setprpwent in -lsec... no
checking how to run the C preprocessor... gcc -E
checking for egrep... grep -E
checking for ANSI C header files... yes
checking for sys/types.h... yes
checking for sys/stat.h... yes
checking for stdlib.h... yes
checking for string.h... yes
checking for memory.h... yes
checking for strings.h... yes
checking for inttypes.h... yes
checking for stdint.h... yes
checking for unistd.h... yes
checking sys/security.h usability... no
checking sys/security.h presence... no
checking for sys/security.h... no
checking krb.h usability... no
checking krb.h presence... no
checking for krb.h... no
checking prot.h usability... no
checking prot.h presence... no
checking for prot.h... no
checking for set_auth_parameters... no
checking for getprpwent... no
checking hpsecurity.h usability... no
checking hpsecurity.h presence... no
checking for hpsecurity.h... no
checking for hpsecurity.h workaround... no
checking for dirent.h that defines DIR... yes
checking for library containing opendir... none required
checking for ANSI C header files... (cached) yes
checking for sys/wait.h that is POSIX.1 compatible... yes
checking fcntl.h usability... yes
checking fcntl.h presence... yes
checking for fcntl.h... yes
checking sys/ioctl.h usability... yes
checking sys/ioctl.h presence... yes
checking for sys/ioctl.h... yes
checking sys/time.h usability... yes
checking sys/time.h presence... yes
checking for sys/time.h... yes
checking for unistd.h... (cached) yes
checking for memory.h... (cached) yes
checking shadow.h usability... yes
checking shadow.h presence... yes
checking for shadow.h... yes
checking for struct spwd.sp_warn... yes
checking for struct spwd.sp_inact... yes
checking for struct spwd.sp_expire... yes
checking security/pam_appl.h usability... yes
checking security/pam_appl.h presence... yes
checking for security/pam_appl.h... yes
checking pam/pam_appl.h usability... no
checking pam/pam_appl.h presence... no
checking for pam/pam_appl.h... no
checking for pam_start in -lpam... yes
checking linux/capability.h usability... yes
checking linux/capability.h presence... yes
checking for linux/capability.h... yes
checking whether to enable mod_cap... yes
checking ctype.h usability... yes
checking ctype.h presence... yes
checking for ctype.h... yes
checking getopt.h usability... yes
checking getopt.h presence... yes
checking for getopt.h... yes
checking crypt.h usability... yes
checking crypt.h presence... yes
checking for crypt.h... yes
checking bstring.h usability... no
checking bstring.h presence... no
checking for bstring.h... no
checking limits.h usability... yes
checking limits.h presence... yes
checking for limits.h... yes
checking for strings.h... (cached) yes
checking stropts.h usability... yes
checking stropts.h presence... yes
checking for stropts.h... yes
checking for sys/types.h... (cached) yes
checking sys/mount.h usability... yes
checking sys/mount.h presence... yes
checking for sys/mount.h... yes
checking sys/param.h usability... yes
checking sys/param.h presence... yes
checking for sys/param.h... yes
checking sys/file.h usability... yes
checking sys/file.h presence... yes
checking for sys/file.h... yes
checking sys/uio.h usability... yes
checking sys/uio.h presence... yes
checking for sys/uio.h... yes
checking netdb.h usability... yes
checking netdb.h presence... yes
checking for netdb.h... yes
checking netinet/in.h usability... yes
checking netinet/in.h presence... yes
checking for netinet/in.h... yes
checking netinet/tcp.h usability... yes
checking netinet/tcp.h presence... yes
checking for netinet/tcp.h... yes
checking arpa/inet.h usability... yes
checking arpa/inet.h presence... yes
checking for arpa/inet.h... yes
checking for sys/stat.h... (cached) yes
checking errno.h usability... yes
checking errno.h presence... yes
checking for errno.h... yes
checking sys/socket.h usability... yes
checking sys/socket.h presence... yes
checking for sys/socket.h... yes
checking sys/termios.h usability... yes
checking sys/termios.h presence... yes
checking for sys/termios.h... yes
checking sys/termio.h usability... no
checking sys/termio.h presence... no
checking for sys/termio.h... no
checking sys/statvfs.h usability... yes
checking sys/statvfs.h presence... yes
checking for sys/statvfs.h... yes
checking sys/vfs.h usability... yes
checking sys/vfs.h presence... yes
checking for sys/vfs.h... yes
checking sys/select.h usability... yes
checking sys/select.h presence... yes
checking for sys/select.h... yes
checking dirent.h usability... yes
checking dirent.h presence... yes
checking for dirent.h... yes
checking ndir.h usability... no
checking ndir.h presence... no
checking for ndir.h... no
checking sys/ndir.h usability... no
checking sys/ndir.h presence... no
checking for sys/ndir.h... no
checking sys/dir.h usability... yes
checking sys/dir.h presence... yes
checking for sys/dir.h... yes
checking vmsdir.h usability... no
checking vmsdir.h presence... no
checking for vmsdir.h... no
checking utmpx.h usability... yes
checking utmpx.h presence... yes
checking for utmpx.h... yes
checking regex.h usability... yes
checking regex.h presence... yes
checking for regex.h... yes
checking syslog.h usability... yes
checking syslog.h presence... yes
checking for syslog.h... yes
checking curses.h usability... yes
checking curses.h presence... yes
checking for curses.h... yes
checking ncurses.h usability... yes
checking ncurses.h presence... yes
checking for ncurses.h... yes
checking for an ANSI C-conforming const... yes
checking for inline... inline
checking for uid_t in sys/types.h... yes
checking for pid_t... yes
checking for size_t... yes
checking for mode_t... yes
checking for off_t... yes
checking type of array argument to getgroups... gid_t
checking for timer_t... yes
checking for short... yes
checking size of short... 2
checking for int... yes
checking size of int... 4
checking for long... yes
checking size of long... 4
checking for long long... yes
checking size of long long... 8
checking for off_t... (cached) yes
checking size of off_t... 8
checking whether time.h and sys/time.h may both be included... yes
checking whether struct tm is in sys/time.h or time.h... time.h
checking for umode_t... no
checking for ino_t... yes
checking for socklen_t... yes
checking utmp.h usability... yes
checking utmp.h presence... yes
checking for utmp.h... yes
checking whether your struct utmp has ut_user... yes
checking whether your struct utmp has ut_host... yes
checking whether your struct utmp has ut_exit... yes
checking whether your syslog.h defines LOG_CRON... yes
checking whether your syslog.h defines LOG_FTP... yes
checking for d_fd in DIR structure... no
checking for dd_fd in DIR structure... no
checking for __dd_fd in DIR structure... no
checking for working alloca.h... yes
checking for alloca... yes
checking for alloca in -lucb... no
checking whether gcc needs -traditional... no
checking whether setpgrp takes no argument... yes
checking return type of signal handlers... void
checking for vprintf... yes
checking for _doprnt... no
checking for bcopy... yes
checking for crypt... yes
checking for fgetgrent... yes
checking for fgetpwent... yes
checking for flock... yes
checking for getcwd... yes
checking for gethostname... yes
checking for getopt... yes
checking for getopt_long... yes
checking for gettimeofday... yes
checking for inet_aton... yes
checking for memcpy... yes
checking for mempcpy... yes
checking for mkdir... yes
checking for mkstemp... yes
checking for rmdir... yes
checking for select... yes
checking for setgroups... yes
checking for socket... yes
checking for statfs... yes
checking for strchr... yes
checking for strcoll... yes
checking for strerror... yes
checking for strsep... yes
checking for strtol... yes
checking for setprotoent... yes
checking for endprotoent... yes
checking for vsnprintf... yes
checking for snprintf... yes
checking for setsid... yes
checking for setgroupent... no
checking for seteuid... yes
checking for setegid... yes
checking for siginterrupt... yes
checking for setpgid... yes
checking for regcomp... yes
checking for tzset... yes
checking for pathconf... yes
checking for fpathconf... yes
checking for fgetspent... yes
checking for setpassent... no
checking whether setgrent returns void... yes
checking for initscr in -lcurses... no
checking for initscr in -lncurses... yes
checking for setproctitle... no
checking libutil.h usability... no
checking libutil.h presence... no
checking for libutil.h... no
checking for setproctitle in -lutil... no
checking sys/pstat.h usability... no
checking sys/pstat.h presence... no
checking for sys/pstat.h... no
checking whether __progname and __progname_full are available... yes
checking which argv replacement method to use... writeable
configure: creating ./config.status
config.status: creating lib/Makefile
config.status: creating src/Makefile
config.status: creating modules/Makefile
config.status: creating utils/Makefile
config.status: creating Makefile
config.status: creating Make.rules
config.status: creating config.h
config.status: config.h is unchanged
config.status: executing default commands
superhostnet:/home/vhosts/proftpd-1.2.8 # make install
cd lib/ && make lib
make[1]: Entering directory `/home/vhosts/proftpd-1.2.8/lib'
make[1]: Nothing to be done for `lib'.
make[1]: Leaving directory `/home/vhosts/proftpd-1.2.8/lib'
cd src/ && make src
make[1]: Entering directory `/home/vhosts/proftpd-1.2.8/src'
make[1]: Nothing to be done for `src'.
make[1]: Leaving directory `/home/vhosts/proftpd-1.2.8/src'
cd modules/ && make modules
make[1]: Entering directory `/home/vhosts/proftpd-1.2.8/modules'
make[1]: Nothing to be done for `modules'.
make[1]: Leaving directory `/home/vhosts/proftpd-1.2.8/modules'
make[1]: Entering directory `/home/vhosts/proftpd-1.2.8/lib/libcap'
make[1]: Nothing to be done for `all'.
make[1]: Leaving directory `/home/vhosts/proftpd-1.2.8/lib/libcap'
gcc -Llib  -o proftpd src/main.o src/timers.o src/sets.o src/pool.o src/regexp.o src/dirtree.o src/support.o src/inet.o src/log.o src/bindings.o src/scoreboard.o src/feat.o src/netio.o src/response.o src/ident.o src/data.o src/modules.o src/auth.o src/fsio.o src/mkhome.o modules/mod_core.o modules/mod_xfer.o modules/mod_auth_unix.o modules/mod_auth_file.o modules/mod_auth.o modules/mod_ls.o modules/mod_log.o modules/mod_site.o modules/mod_cap.o modules/mod_auth_pam.o modules/mod_sql_mysql.o modules/mod_sql.o  modules/module_glue.o -lsupp -lcrypt  -Llib/libcap -lcap  -lm -lz -lmysqlclient  -lpam -L/usr/lib/mysql
/usr/lib/gcc-lib/i486-suse-linux/3.2/../../../../i486-suse-linux/bin/ld: cannot find -lz
collect2: ld returned 1 exit status
make: *** [proftpd] Error 1

Edit: es hatte zlib-devel pakete gefehlt

[demo]

Problem gelöst, aber jetzt kann icht kein ordner mehr mit ftp löschen, datei löschen geht

mein proftpd.conf

Code: Select all

ServerName			"ProFTPD Default Installation"
ServerType	        	inetd	
DefaultServer			on

# Port 21 is the standard FTP port.
Port				21

# Umask 022 is a good standard umask to prevent new dirs and files
# from being group and world writable.
Umask				022

# We put our mod_sql directives in a <Global> block so they'll be
# inherited by the <Anonymous> block below, and any other <VirtualHost>
# blocks we may want to add.  For a simple server these don't need to
# be in a <Global> block but it won't hurt anything.
<VirtualHost xxx.xxx.xxx>
	SQLConnectInfo XPanel@localhost:3306 root xxxx
	SQLUserInfo users domainName password id id homedir NULL
	SQLGroupInfo users status id domainName
	SQLAuthTypes Plaintext
	RequireValidShell off
	SQLUserWhereClause "status = 'Active'" 
	DefaultRoot	~ 
	<Directory />
		AllowOverwrite	on
	</Directory>
	PathAllowFilter ^[A-Za-z0-9._-]+$
	PathDenyFilter "((^|/)[-.])|(\.(js|vbs|shs|scr|exe|mov|avi|mpg|sql|pl|cgi|shtml)$)"
	#for download restrictions
	MaxRetrieveFileSize 100 Kb
	#for upload restrictions
	MaxStoreFileSize 1 Mb
</VirtualHost>


# To prevent DoS attacks, set the maximum number of child processes
# to 30.  If you need to allow more than 30 concurrent connections
# at once, simply increase this value.  Note that this ONLY works
# in standalone mode, in inetd mode you should use an inetd server
# that allows you to limit maximum number of processes per service
# (such as xinetd)
MaxInstances			30

# Set the normal user and group permissions for the server.
User				nobody
Group			nogroup	

# Normally, we want files to be overwriteable.
<Directory /*>
  AllowOverwrite		on
</Directory>

Edit: jetzt funzt alles, es lag an

Code: Select all

PathAllowFilter ^[A-Za-z0-9._-]+$