www.ProFTPD.de

anakin:/etc# cat proftpd.conf
# This is a basic ProFTPD configuration file (rename it to
# 'proftpd.conf' for actual use.  It establishes a single server
# and a single anonymous login.  It assumes that you have a user/group
# "nobody" and "ftp" for normal operation and anon.

ServerName                      "anakin.xxxxxxxx.xxx"
ServerType                      standalone
DeferWelcome                    off

ShowSymlinks                    on
MultilineRFC2228                on
DefaultServer                   on
ShowSymlinks                    on
AllowOverwrite                  on

TimeoutNoTransfer               600
TimeoutStalled                  600
TimeoutIdle                     1200

DisplayLogin                    welcome.msg
DisplayFirstChdir               .message
ListOptions                     "-l"

DenyFilter                      \*.*/

# Uncomment this if you are using NIS or LDAP to retrieve passwords:
#PersistentPasswd               off

# Port 21 is the standard FTP port.
Port                            21

AuthPAM                         on
AuthPAMAuthoritative            off

# To prevent DoS attacks, set the maximum number of child processes
# to 30.  If you need to allow more than 30 concurrent connections
# at once, simply increase this value.  Note that this ONLY works
# in standalone mode, in inetd mode you should use an inetd server
# that allows you to limit maximum number of processes per service
# (such as xinetd)
MaxInstances                    30

# Set the user and group that the server normally runs at.
User                            nobody
Group                           nogroup

# Normally, we want files to be overwriteable.
<Directory /*>
  # Umask 022 is a good standard umask to prevent new files and dirs
  # (second parm) from being group and world writable.
  Umask                         022  022
  AllowOverwrite                on
</Directory>

# chroot für alle User der Gruppe ftpuser
DefaultRoot ~ ftpuser

# Login nur von Mitgliedern der Gruppe ftpuser erlauben
<Limit LOGIN>
         DenyGroup !ftpuser
</Limit>

# Root-Login verbieten und gültige Shell verlangen (in /etc/shells)
<Global>
 RootLogin off
 RequireValidShell on
</Global>

# Speed erhoehen
UseReverseDNS off
IdentLookups off

# Logging Formate
LogFormat default "%h %l %u %t \"%r\" %s %b"
LogFormat auth "%v [%P] %h %t \"%r\" %s"
LogFormat write "%h %l %u %t \"%r\" %s %b"

# alle logins
ExtendedLog /var/log/ftp_auth.log AUTH auth

# file/dir Zugriff
ExtendedLog /var/log/ftp_access.log WRITE,READ write

# FXP unterstuetzung
AllowForeignAddress on

# Maximal Werte setzen
MaxClientsPerHost 2 "Nicht mehr als %m Verbindungen"
MaxClients 8 "Leider sind schon %m Clients verbunden"
MaxLoginAttempts 3

# Restart erlauben
AllowStoreRestart on
AllowRetrieveRestart on

# SQL
SQLAuthTypes Plaintext
SQLAuthenticate users* groups*
SQLConnectInfo ftp@localhost xxxxxxx xxxxx
SQLUserInfo users username passwd NULL NULL homedir NULL
SQLGroupInfo groups groupname id username
SQLUserWhereClause "valid = 1"
SQLDefaultGID 100
SQLDefaultUID 500
SQLHomedirOnDemand on
SQLLog PASS updatelogin
SQLNamedQuery updatelogin UPDATE "count=count+1, lastlogin=NOW() WHERE username = '%u'" users
RequireValidShell off

# Log trafic (STOR, RETR commands)
SQLLog RETR,STOR logtrafic
SQLNamedQuery logtrafic FREEFORM "INSERT INTO history (username, filename, transfertype, transfersize, transferhost, transfertime, transferdate) VALUES('%u', '%F', '%m', %b, '%a', '%T', NOW())"

# Log user error events (ERR_* commands)
SQLLog ERR_* logevents
SQLNamedQuery logevents FREEFORM "INSERT INTO userevents (username, eventtype, description, eventdate) VALUES ('%u', '%m', '%r', NOW())"

anakin:/etc#

users[*]:   Wenn angegeben, wird mod_sql User Abfragen durchführungen. Wenn ein Sternchen "*" [Users*] angehängt wird, dann wird mod_sql die exklusive Benutzer Abfrage. Keine andere Authentifizierungs Maánahme (z.B. PAM) wird durchgeführt.
Falls nicht vorhanden, wird mod_sql überhaupt keine User Abfragen durchführen, inklusive den "{set|get|end}pwent" Aufrufen (siehe unten).
groups[*]: Wenn angegeben, wird mod_sql Gruppen durchführen. Wenn ein Sternchen "*" angehängt wird, dann wird mod_sql die exklusive Gruppen Abfrage.
Falls nicht vorhanden, wird mod_sql überhaupt keine Gruppen Abfrage durchführen, inklusive den "{set|get|end}grent" Aufrufen (siehe unten)