Re: [Proftpd-user] User permission and group permissions

my service file lists (so the service "starts" as root)
>
> User=root
> Group=root


but my proftpd.conf lists (so the service actually runs as proftpuser)

> User                    proftpuser
> Group                   proftpgroup


In my mod_sftp section, I have

> DirFakeUser on ~

DirFakeGroup on globalgroup
>

and I have mod_vroot enabled

> <IfModule mod_vroot.c>
>     VRootEngine         on
>     DefaultRoot         ~
>

all of my folders are chown'd to proftpuser:proftpgroup
and when a virtual user logs into their home, they see the virtual owners
as "eachuser:globalgroup"

I'm also using a database for login, but I don't think your database is the
problem

What are your on disk permissions for your folders? Do they match your
serviceUser:serviceGroup?
Do you have vroot enabled?

On Sun, Aug 30, 2020 at 5:37 PM Brad Knorr <[email protected]> wrote:

> I run proftpd using mysql as my authentication method.  So each of my
> users DOES NOT have a linux account on the box. I will call them virtual
> users. I have read over the docs to sort out how to configure things but I
> am running into users being able to login but not allowed to upload files.
> It does the upload,using the temporary file, but when it goes to finish the
> upload and rename the file to the right name it gives me a permissions
> error.
>
> In the mysql table ftpuser  column uid is null, and column gid is "2000"
> for every user (which is the gid of the linux group "foundry" on the
> server). Table ftpgroup has (foundry, 2000, www-data) for its data.
>
> In proftpd.conf the User is "www-data" and the Group is "foundry"
>
> Proftpd.service has the service running under user=root and group=foundry
>
> The file structure has all files and dir set with user=www-data and
> group=foundry and the perms are  775.
>
> So I am struggling with the user/group setup of proftpd to reliably access
> this file system.  Each user in the mysql table, all have the same
> permissions, they  are chrooted to their specific home directories via the
> homedir column.
>
> I don't think this is a bug, I think it is a config error.  I have tried
> the logs but they are no help.  It doesn't seem to put any comment in the
> logs about the permissions error.  My log settings are:
>
> athAllowFilter [[:print:]]
> SyslogLevel     debug
> SystemLog       /mnt/ramdisk/proftp/system.log
> #ExtendedLog   /mnt/foundry/logs/proftpd/paranoid_log  ALL default
> TransferLog   /mnt/ramdisk/proftp/xferlog.log
>
> thanks for taking the  time to look this over. I am hoping it is a simple
> fix.
>
> Brad
> _______________________________________________
> ProFTPD Users List   <[email protected]>
> Unsubscribe problems?
> http://www.proftpd.org/list-unsub.html

_______________________________________________
ProFTPD Users List   <[email protected]>
Unsubscribe problems?
http://www.proftpd.org/list-unsub.html