Re: [Proftpd-user] GroupOwner directive and gids

Hi Matus
Yes, setgid is what I ultimately ended up doing.  From the FTP server point of view, the directories in question are 2775 with the owner as known to the FTP server and the numeric gid as known to the other remote system mounting the same filesystem.  This allows me to have a user on the other remote system as part of the group be able to manipulate these files.  I also had to create a .ftpaccess that contained 'Umask 002'.

Eg, from the FTP server side we see:
MyUser@ProftpServer /var/ftp/chroot/ftp-AnotherUser $ ls -al
total 48
drwxrwsr-x.   2 ftp-AnotherUser   1154073000  4096 Sep 23 23:01 .
drwxr-xr-x. 389 root         root         36864 Sep 19 11:06 ..
-rw-r--r--.   1 root           1154073000    10 Sep 21 11:12 .ftpaccess
MyUser@ProftpServer /var/ftp/chroot/ftp-AnotherUser $


And from the other server side we see:
[MyUser@AppServer ftp-AnotherUser] 0 $ ls -la
total 16
drwxrwsr-x.  2   16784393 proftpd_accounts_AppServer 4096 Sep 23 23:01 .
drwxrwsr-x.  6 root root                  4096 Sep 18 16:32 ..
-rw-r--r--.  1 root       proftpd_accounts_AppServer   10 Sep 21 11:12 .ftpaccess
[MyUser@AppServer ftp-AnotherUser] 0 $ 


Not really an elegant solution, but it's the one that works with the lowest common denominator here which is NFSv3.

Thanks for the reply.


________________________________________
From: Matus UHLAR - fantomas <[email protected]>
Sent: Saturday, September 22, 2018 09:24
To: [email protected]
Subject: Re: [Proftpd-user] GroupOwner directive and gids

On 19.09.18 14:52, Ian Ehrenwald wrote:
>I have a problem I am trying to work around using the GroupOwner directive
> in a .ftpaccess file. I can get Proftp to set the gid of a newly uploaded
> file when the group specified in a .ftpaccess exists on the FTP server.
> However, I need to set the gid of files to a group that does NOT exist on
> the FTP server. I've tried 'GroupOwner 1154073000' (the gid of the group
> that exists on a remote system that is also mounting this FTP user share
> via NFS) but proftp instead falls back to the primary group. Is there a
> way to force Proftp to just set a gid on files without looking up if it
> actually exists on the local system? Thank you.

I'm afraid that proftpd uses standard system functions, which don't allow
you to set group to any you are not member of.

setgid directories are often use for this case.

--
Matus UHLAR - fantomas, [email protected] ; http://www.fantomas.sk/<https://protect-us.mimecast.com/s/Xl0PC73yW3Fm4J2QsBLDH7?domain=fantomas.sk>
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Enter any 12-digit prime number to continue.


_______________________________________________
ProFTPD Users List <[email protected]>
Unsubscribe problems?
http://www.proftpd.org/list-unsub.html<https://protect-us.mimecast.com/s/S0lsC82zB2ijDKWziM_o04?domain=proftpd.org>


_______________________________________________
ProFTPD Users List   <[email protected]>
Unsubscribe problems?
http://www.proftpd.org/list-unsub.html