ftp user kann in root verzeichnisse rein gehen

Aktuell führen wir noch einige Anpassungen durch, das Forum wurde jedoch bereits live geschaltet.
  • #

    # To have more informations about Proftpd configuration

    # look at : http://www.proftpd.org/

    #


    # This is a basic ProFTPD configuration file (rename it to

    # 'proftpd.conf' for actual use. It establishes a single server

    # and a single anonymous login. It assumes that you have a user/group

    # "nobody" and "ftp" for normal operation and anon.


    ServerName "ProFTPD"

    #ServerType standalone

    ServerType inetd

    DefaultServer on


    <Global>


    # Prefer to put here directives allowed in server config and Global contexts.

    # From http://www.proftpd.org/docs/howto/Vhost.html :

    # "any configuration directives inside the "server config" section do not apply outside of the context."


    DefaultTransferMode binary

    UseFtpUsers on


    TimesGMT off

    SetEnv TZ :/etc/localtime

    # Umask 022 is a good standard umask to prevent new dirs and files

    # from being group and world writable.

    Umask 022


    # Primary log file mest be outside of system logrotate province.

    TransferLog /var/log/plesk/xferlog


    # Enable PAM authentication

    AuthPAM on

    AuthPAMConfig proftpd



    <IfModule mod_tls.c>

    # common settings for all virtual hosts

    TLSEngine on

    TLSRequired off


    TLSLog /var/log/plesk/ftp_tls.log


    TLSRSACertificateFile /opt/psa/admin/conf/httpsd.pem

    TLSRSACertificateKeyFile /opt/psa/admin/conf/httpsd.pem


    # Authenticate clients that want to use FTP over TLS?

    TLSVerifyClient off


    # Allow SSL/TLS renegotiations when the client requests them, but

    # do not force the renegotations. Some clients do not support

    # SSL/TLS renegotiations; when mod_tls forces a renegotiation, these

    # clients will close the data connection, or there will be a timeout

    # on an idle data connection.

    TLSRenegotiate none


    # As of ProFTPD 1.3.3rc1, mod_tls only accepts SSL/TLS data connections

    # that reuse the SSL session of the control connection, as a security measure.

    # Unfortunately, there are some clients (e.g. curl) which do not reuse SSL sessions.

    TLSOptions NoSessionReuseRequired

    </IfModule>

    </Global>


    # Port 21 is the standard FTP port.

    Port 21

    # To prevent DoS attacks, set the maximum number of child processes

    # to 30. If you need to allow more than 30 concurrent connections

    # at once, simply increase this value. Note that this ONLY works

    # in standalone mode, in inetd mode you should use an inetd server

    # that allows you to limit maximum number of processes per service

    # (such as xinetd)

    MaxInstances 30


    #Following part of this config file were generate by PSA automatically

    #Any changes in this part will be overwritten by next manipulation

    #with Anonymous FTP feature in PSA control panel.


    #Include directive should point to place where FTP Virtual Hosts configurations

    #preserved


    ScoreboardFile /var/run/proftpd.scoreboard


    #Change default group for new files and directories in vhosts dir to psacln


    <Directory /var/www/vhosts>

    GroupOwner httpdocs

    </Directory>



    Include /etc/proftpd.d/*.conf

    AllowOverwrite on

    UseReverseDNS off

    IdentLookups off

    DefaultRoot ~

    RequireValidShell off

    AuthOrder mod_auth_pam.c* mod_auth_unix.c mod_auth_file.c

    #AuthUserFile /etc//ftpd.passwd

    #AuthGroupFile /etc//ftpd.group

  • AuthOrder mod_auth_pam.c* mod_auth_unix.c mod_auth_file.c


    in


    AuthOrder mod_auth_pam.c* mod_auth_unix.c


    Danach dann


    service proftpd restart

    service xinetd restart


    Je nachdem wie Proftpd läuft.

    Bitte die Forumsuche und das Handbuch verwenden. Wenn die Suche erfolglos war, bitte ein Thema erstellen und das Problem ausführlich beschreiben. Dieser Ablauf spart Zeit und unnötige Fragen zu immer gleichen Problemen. Sie können aber auch im Kundenbereich ein Support-Ticket erstellen.


    Gefällt Ihnen TekLab? facebook-1.pngtwitter-1.pnglinkedin-1.png