offenbar zu lang mein beitrag :-)
hier der rest:
mein ftp zugang:
>ftp 192.168.1.163
Verbindung mit 192.168.1.163 wurde hergestellt.
220 ProFTPD 1.2.10 Server (FTP-Server) [192.168.1.163]
Benutzer (192.168.1.163:(none)): test
331 Password required for test.
Kennwort:
Verbindung beendet durch Remotehost.
und restlichen logfiles:
==> /var/log/mysql.log <==
050822 22:17:41 62 Query "SELECT userid, passwd, uid, gid, homedir, shell FROM proftpd_users WHERE (userid='test') LIMIT 1"
62 Quit
050822 22:18:18 63 Connect proftpd@localhost on SysConfig_db1
==> proftpd.auth_log <==
FTP-Server [16668] 192.168.1.232 [22/Aug/2005:22:18:20 +0200] "USER test" 331
==> proftpd.paranoid_log <==
FTP-Server [16668] 192.168.1.232 [22/Aug/2005:22:18:20 +0200] "USER test" 331
und meine proftpd.conf
debian:/home# cat /etc/proftpd.conf
#
# /etc/proftpd.conf -- This is a basic ProFTPD configuration file.
# To really apply changes reload proftpd after modifications.
#
ServerName "FTP-Server"
ServerType standalone
DeferWelcome off
MultilineRFC2228 on
DefaultServer on
ShowSymlinks on
TimeoutNoTransfer 600
TimeoutStalled 600
TimeoutIdle 1200
DisplayLogin welcome.msg
DisplayFirstChdir .message
ListOptions "-l"
DenyFilter \*.*/
# Uncomment this if you would use quota module:
#Quotas on
# Port 21 is the standard FTP port.
Port 21
# To prevent DoS attacks, set the maximum number of child processes
# to 30. If you need to allow more than 30 concurrent connections
# at once, simply increase this value. Note that this ONLY works
# in standalone mode, in inetd mode you should use an inetd server
# that allows you to limit maximum number of processes per service
# (such as xinetd)
MaxInstances 30
# Set the user and group that the server normally runs at.
User nobody
Group nogroup
# Umask 022 is a good standard umask to prevent new files and dirs
# (second parm) from being group and world writable.
Umask 022 022
# Normally, we want files to be overwriteable.
AllowOverwrite on
# Delay engine reduces impact of the so-called Timing Attack described in
# http://security.lss.hr/index.php?page=details&ID=LSS-2004-10-02
# It is on by default.
#DelayEngine off
#
# Logging options
#
TransferLog /var/log/ftp/proftpd.xferlog
# Some logging formats
#
LogFormat default "%h %l %u %t \"%r\" %s %b"
LogFormat auth "%v [%P] %h %t \"%r\" %s"
LogFormat write "%h %l %u %t \"%r\" %s %b"
# Log file/dir access
ExtendedLog /var/log/proftpd.access_log WRITE,READ write
# Record all logins
ExtendedLog /var/log/proftpd.auth_log AUTH auth
# Paranoia logging level....
ExtendedLog /var/log/proftpd.paranoid_log ALL
# Use the CreateHome default settings
CreateHome on 755 skel /etc/ftp/skel
RequireValidShell off
IdentLookups off
# Hiermit wird nun der User direkt in sein Heimatverzeichnis "gesperrt"
# Anschliessend kann der User keine höheren Verzeichnisse sehen
# Aufgrund der Gruppenangabe, nur Benutzer der Gruppe "user", jedoch
# nicht User der Gruppe "staff" werden in das Heimatverzeichnis gesperrt
DefaultRoot ~
#------------------------mysql Modul: 4.x
#
# Zugangskontrolle
#
SQLAuthTypes Plaintext
SQLAuthenticate users
SQLConnectInfo SysConfig_db1@localhost proftpd geheim
SQLDefaultGID 65534
SQLDefaultUID 65534
SQLMinUserGID 100
SQLMinUserUID 500
SQLUserInfo proftpd_users userid passwd uid gid homedir shell
SQLHomedirOnDemand on
aja und der mysql-db eintrag für diesen user:
userid passwd uid gid homedir shell
test test 656 656 /home/test /bin/false
was mir auffällt ist z.b.:
im debug logging: no supplemental groups found for user 'test'
fällt irgend jemand ein fehler auf? stehe gerade etwas auf der leitung
zur info zum sarge-proftpd-mysql:
debian:/home# proftpd -vv
- ProFTPD Version: 1.2.10 (stable)
- Scoreboard Version: 01040002
- Built: do mrt 22 18:28:32 CET 2001
- Module: mod_core.c
- Module: mod_xfer.c
- Module: mod_auth_unix.c
- Module: mod_auth_file.c
- Module: mod_auth.c
- Module: mod_ls.c
- Module: mod_log.c
- Module: mod_site.c
- Module: mod_auth_pam.c
- Module: mod_quotatab.c
- Module: mod_sql.c
- Module: mod_sql_mysql.c
- Module: mod_quotatab_sql.c
- Module: mod_ratio.c
- Module: mod_tls.c
- Module: mod_rewrite.c
- Module: mod_radius.c
- Module: mod_wrap.c
- Module: mod_quotatab_file.c
- Module: mod_delay/0.4
- Module: mod_readme.c
- Module: mod_ifsession.c
- Module: mod_cap/1.0
