vsftpd on Debian Slug

View: New views
4 Messages — Rating Filter:   Alert me  

vsftpd on Debian Slug

by Sunspot :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

I have a named user fred who can ftp upload and download to (only) his
/home/fred folder.

But if I try to log in as root with my system password I am rejected.

This may well be a security feature but I am on a private network so
no problem!!!

I want full read/write access to all folders so I can do external text
editing on my Mac.

Can someone show me a vsftpd.conf file that gives me full freedom?

(Sorry - new user...)


Re: vsftpd on Debian Slug

by Sunspot :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

--- In nslu2-linux@..., "Graham" <fgmarshall@...> wrote:

>
> I have a named user fred who can ftp upload and download to (only) his
> /home/fred folder.
>
> But if I try to log in as root with my system password I am rejected.
>
> This may well be a security feature but I am on a private network so
> no problem!!!
>
> I want full read/write access to all folders so I can do external text
> editing on my Mac.
>
> Can someone show me a vsftpd.conf file that gives me full freedom?
>
> (Sorry - new user...)
>
aha!

You have to set SFTP (not FTP) in Fetch FTP on the Mac
Now root can see and change all files.



Re: vsftpd on Debian Slug

by ev013 :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

You'll get a ton of people telling you not to do this (since ftp does  
passwords in cleartext); if you know what you're getting yourself  
into: with vsftpd I believe you need to remove 'root' from /etc/vsftpd/
user_list and /etc/vsftpd/ftpusers (this is where the files live on  
Fedora anyway). Also check that 'userlist_enable=YES' in vsftpd.conf.

-Eric

On Jul 12, 2008, at 3:06 PM, Graham wrote:

> I have a named user fred who can ftp upload and download to (only) his
> /home/fred folder.
>
> But if I try to log in as root with my system password I am rejected.
>
> This may well be a security feature but I am on a private network so
> no problem!!!
>
> I want full read/write access to all folders so I can do external text
> editing on my Mac.
>
> Can someone show me a vsftpd.conf file that gives me full freedom?
>
> (Sorry - new user...)
>
>
>


Re: vsftpd on Debian Slug

by sruckh :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

This is what you said Graham

> I have a named user fred who can ftp upload and download to (only) his
> /home/fred folder.
>
> But if I try to log in as root with my system password I am rejected.
>
> This may well be a security feature but I am on a private network so
> no problem!!!
>
> I want full read/write access to all folders so I can do external text
> editing on my Mac.
>
> Can someone show me a vsftpd.conf file that gives me full freedom?
>
> (Sorry - new user...)

Here is an example vsftpd.conf file (used on a NSLU2/SlugOS):

listen=NO
anonymous_enable=NO
local_enable=YES
write_enable=YES
local_umask=002
anon_umask=077
anon_upload_enable=NO
anon_mkdir_write_enable=NO
dirmessage_enable=YES
xferlog_enable=YES
connect_from_port_20=YES
xferlog_file=/var/log/vsftpd.log
xferlog_std_format=YES
nopriv_user=ftp
chroot_list_enable=YES
chroot_list_file=/etc/vsftpd.chroot_list
userlist_deny=NO
userlist_enable=YES
userlist_file=/etc/vsftpd.userlist
max_clients=5
max_per_ip=3
ssl_enable=YES
allow_anon_ssl=NO
force_local_data_ssl=NO
force_local_logins_ssl=YES
ssl_tlsv1=YES
ssl_sslv2=NO
ssl_sslv3=YES
rsa_cert_file=/etc/pki/tls/certs/vsftpd.pem
pasv_min_port=15000
pasv_max_port=15005

Users listed in /etc/vsftpd.userlist have FTP access.  Anyone not listed in
this file does not have access.

Users in /etc/vsftpd.chroot_list are put in a chroot jail.  If not then you
have access to the file system as you would in an interactive shell session.

This configuration supports authorization using SSL so password is not sent in
clear text (vsftpd must be compiled with openssl support; which the SlugOS/BE
repository's version did not include openssl support).

LightInTheBox - Buy quality products at wholesale price