habe noch en bischen rum probiert. jetzt funktioniert "mount --rbind" optimal
, nur mein Anonymous geht noch nicht. Als anonymous soll man im verzeichniss "/stuff/ftproot/" landen und nur auf den "public" ordner zugriff haben. die restlichen ordner soll man sehen aber nicht zugreifen.
theoretisch sollt das so funktionieren. nur kommt beim login als anomymous folgendes.
client:
USER anonymous
331 Anonymous login ok, send your complete email address as your password.
PASS (hidden)
530-Unable to set anonymous privileges.
530 Login incorrect.
Connection failed
proftpd -nd9:
sanni (10.84.0.2[10.84.0.2]) - ident lookup disabled
sanni (10.84.0.2[10.84.0.2]) - ROOT PRIVS at main.c:977
sanni (10.84.0.2[10.84.0.2]) - SETUP PRIVS at main.c:982
sanni (10.84.0.2[10.84.0.2]) - performing module session initializations
sanni (10.84.0.2[10.84.0.2]) - ROOT PRIVS at mod_auth.c:130
sanni (10.84.0.2[10.84.0.2]) - opening scoreboard '/var/run/proftpd/proftpd.scoreboard'
sanni (10.84.0.2[10.84.0.2]) - RELINQUISH PRIVS at mod_auth.c:150
sanni (10.84.0.2[10.84.0.2]) - connected - local : 10.84.0.1:21
sanni (10.84.0.2[10.84.0.2]) - connected - remote : 10.84.0.2:1276
sanni (10.84.0.2[10.84.0.2]) - FTP session opened.
sanni - FS: using system lstat()
sanni - FS: using system lstat()
sanni (10.84.0.2[10.84.0.2]) - dispatching PRE_CMD command 'USER anonymous' to mod_tls
sanni (10.84.0.2[10.84.0.2]) - dispatching PRE_CMD command 'USER anonymous' to mod_core
sanni (10.84.0.2[10.84.0.2]) - dispatching PRE_CMD command 'USER anonymous' to mod_core
sanni (10.84.0.2[10.84.0.2]) - dispatching PRE_CMD command 'USER anonymous' to mod_auth
sanni (10.84.0.2[10.84.0.2]) - dispatching auth request "endpwent" to module mod_auth_file
sanni (10.84.0.2[10.84.0.2]) - dispatching auth request "endpwent" to module mod_auth_unix
sanni (10.84.0.2[10.84.0.2]) - dispatching auth request "endgrent" to module mod_auth_file
sanni (10.84.0.2[10.84.0.2]) - dispatching auth request "endgrent" to module mod_auth_unix
sanni (10.84.0.2[10.84.0.2]) - dispatching CMD command 'USER anonymous' to mod_auth
sanni (10.84.0.2[10.84.0.2]) - dispatching LOG_CMD command 'USER anonymous' to mod_log
sanni (10.84.0.2[10.84.0.2]) - dispatching PRE_CMD command 'PASS (hidden)' to mod_tls
sanni (10.84.0.2[10.84.0.2]) - dispatching PRE_CMD command 'PASS (hidden)' to mod_core
sanni (10.84.0.2[10.84.0.2]) - dispatching PRE_CMD command 'PASS (hidden)' to mod_core
sanni (10.84.0.2[10.84.0.2]) - dispatching PRE_CMD command 'PASS (hidden)' to mod_auth
sanni (10.84.0.2[10.84.0.2]) - dispatching auth request "endpwent" to module mod_auth_file
sanni (10.84.0.2[10.84.0.2]) - dispatching auth request "endpwent" to module mod_auth_unix
sanni (10.84.0.2[10.84.0.2]) - dispatching auth request "endgrent" to module mod_auth_file
sanni (10.84.0.2[10.84.0.2]) - dispatching auth request "endgrent" to module mod_auth_unix
sanni (10.84.0.2[10.84.0.2]) - dispatching CMD command 'PASS (hidden)' to mod_auth
sanni (10.84.0.2[10.84.0.2]) - dispatching auth request "getpwnam" to module mod_auth_file
sanni (10.84.0.2[10.84.0.2]) - dispatching auth request "getpwnam" to module mod_auth_unix
sanni (10.84.0.2[10.84.0.2]) - dispatching auth request "gid_name" to module mod_auth_file
sanni (10.84.0.2[10.84.0.2]) - dispatching auth request "gid_name" to module mod_auth_unix
sanni (10.84.0.2[10.84.0.2]) - dispatching auth request "getgroups" to module mod_auth_file
sanni (10.84.0.2[10.84.0.2]) - dispatching auth request "getgroups" to module mod_auth_unix
sanni (10.84.0.2[10.84.0.2]) - dispatching auth request "setgrent" to module mod_auth_file
sanni (10.84.0.2[10.84.0.2]) - dispatching auth request "setgrent" to module mod_auth_unix
sanni (10.84.0.2[10.84.0.2]) - ROOT PRIVS at mod_auth.c:550
sanni (10.84.0.2[10.84.0.2]) - RELINQUISH PRIVS at mod_auth.c:552
sanni (10.84.0.2[10.84.0.2]) - ROOT PRIVS at mod_auth.c:1002
sanni (10.84.0.2[10.84.0.2]) - SETUP PRIVS at mod_auth.c:1017
sanni (10.84.0.2[10.84.0.2]) - ROOT PRIVS at mod_auth.c:1034
sanni (10.84.0.2[10.84.0.2]) - SETUP PRIVS at mod_auth.c:1049
sanni (10.84.0.2[10.84.0.2]) - ftp: Directory /stuff/ftproot/ is not accessible.
sanni (10.84.0.2[10.84.0.2]) - dispatching LOG_CMD_ERR command 'PASS (hidden)' to mod_log
sanni (10.84.0.2[10.84.0.2]) - dispatching LOG_CMD_ERR command 'PASS (hidden)' to mod_auth
sanni (10.84.0.2[10.84.0.2]) - dispatching auth request "endpwent" to module mod_auth_file
sanni (10.84.0.2[10.84.0.2]) - dispatching auth request "endpwent" to module mod_auth_unix
sanni (10.84.0.2[10.84.0.2]) - dispatching auth request "endgrent" to module mod_auth_file
sanni (10.84.0.2[10.84.0.2]) - dispatching auth request "endgrent" to module mod_auth_unix
sanni (10.84.0.2[10.84.0.2]) - FTP session closed.
"sanni (10.84.0.2[10.84.0.2]) - ftp: Directory /stuff/ftproot/ is not accessible."
keine ahnung warum das kommt, obwohl die rechte von "/stuff/ftproot" auf 777 stehen. das ist das letzte problem was ich noch habe.
_____________________________________________________________
so mounte ich jetzt:
mount --bind /stuff/medien/ /stuff/ftproot/medien/
mount --rbind /stuff/movies/ /stuff/ftproot/movies/ #submounts
mount --bind /stuff/daten/programme/ /stuff/ftproot/programme/
mount --bind /stuff/spiele/ /stuff/ftproot/spiele/
mount --bind /stuff/public/ /stuff/ftproot/public/
mount --rbind /stuff/todo/ /stuff/ftproot/todo/ #submounts
mount --bind /stuff/daten/upload/ /stuff/ftproot/upload/
hier nochmal meine neue config:
ServerName "sanni"
ServerType standalone
ServerIdent on "Sanni's Ftp Server"
DefaultServer on
Port 21
PassivePorts 49152 65534
Umask 022
MaxInstances 30
User nobody
Group nobody
AllowOverwrite off
AllowRetrieveRestart on
AllowStoreRestart on
IdentLookups off
UseReverseDNS off
####################
## Global Section ##
####################
<Global>
DefaultRoot /stuff/ftproot
MaxClients 20 "too many users"
MaxClientsPerHost 2 "too many connections from your host"
DeleteAbortedStores off
HiddenStor off
RootLogin off
IdentLookups off
AllowForeignAddress on
RequireValidShell on
<Limit LOGIN>
DenyGroup !ftpuser
</Limit>
</Global>
#######################
## Anonymous Section ##
#######################
<Anonymous /stuff/ftproot>
User ftp
Group ftp
UserAlias anonymous ftp
MaxClients 4
MaxClientsPerHost 1
AnonRequirePassword off
DisplayLogin welcome.msg
DisplayFirstChdir .message
DefaultChdir /stuff/ftproot
<Limit write>
DenyAll
</Limit>
<Limit LOGIN>
AllowAll
</Limit>
</Anonymous>
#######################
## Directory Section ##
#######################
<Directory /stuff/ftproot/programme>
<Limit read appe retr list rest cwd>
DenyGroup !ftpuser
</Limit>
<Limit stor dele mkd write site feat help rmd rnfr rnto>
DenyAll
</Limit>
</Directory>
<Directory /stuff/ftproot/medien>
<Limit read appe retr list rest cwd>
DenyGroup !ftpuser
</Limit>
<Limit stor dele mkd write site feat help rmd rnfr rnto>
DenyAll
</Limit>
</Directory>
<Directory /stuff/ftproot/movies>
<Limit read appe retr list rest cwd>
DenyGroup !ftpuser
</Limit>
<Limit stor dele mkd write site feat help rmd rnfr rnto>
DenyAll
</Limit>
</Directory>
<Directory /stuff/ftproot/spiele>
<Limit read appe retr list rest cwd>
DenyGroup !ftpuser
</Limit>
<Limit stor dele mkd write site feat help rmd rnfr rnto>
DenyAll
</Limit>
</Directory>
<Directory /stuff/ftproot/todo>
<Limit read appe retr list rest cwd>
DenyGroup !ftpuser
</Limit>
<Limit stor dele mkd write site feat help rmd rnfr rnto>
DenyAll
</Limit>
</Directory>
<Directory /stuff/ftproot/upload>
<Limit read appe retr list rest cwd stor mkd site feat help rnfr rnto>
DenyGroup !ftpuser
</Limit>
<Limit dele rmd>
DenyAll
</Limit>
</Directory>
<Directory /stuff/ftproot/public>
<Limit read appe retr list rest cwd>
AllowAll
</Limit>
<Limit stor dele mkd write site feat help rmd rnfr rnto>
DenyAll
</Limit>
</Directory>
