Re: [Proftpd-user] Issue configuring ProFTPd
"John Stoffel" <[email protected]>
| Newsgroups | gmane.network.proftpd.user |
|---|---|
| Message-ID | <[email protected]> |
>>>>> "Nikolaos" == Nikolaos Milas <[email protected]> writes: Nikolaos> On 20/9/2020 8:27 π.μ., Dieter Bloms via Proftp-user wrote: >> ... >> I hope its help to you in thr right way. >> PS.: is selinux or appamore enabled and blocks the access ? Nikolaos> Hi Dieter, Nikolaos> Thanks for you quick reply! Nikolaos> Following your suggestions, I suspected mod_vroot / VRootEngine Nikolaos> directive which was by default configured to ON (and I had left it Nikolaos> unchanged). This was not used at all in my other (earlier) configs! Nikolaos> After I set it to off: Nikolaos> <IfModule mod_vroot.c> Nikolaos> VRootEngine off Nikolaos> </IfModule> Nikolaos> ...everything worked fine! Nikolaos> So, it seems currently everything is running smoothly! Nikolaos> Thanks for the hint! Excellent, glad I could point you in the right direction. Nikolaos> I don't know if some additional mod_vroot directive(s) would Nikolaos> eventually provide a better and safer (but well-working!) Nikolaos> environment than the current. Nikolaos> The principle in my setup is to chroot to the path indicated by the Nikolaos> value of the homeDirectory LDAP attribute (in the associated user Nikolaos> account) and this is accomplished by: Nikolaos> # Specify ftpuser:nginx uid/gid Nikolaos> LDAPDefaultUID 500 Nikolaos> LDAPDefaultGID 987 Nikolaos> # Force default (ftpuser:nginx) owner always! Nikolaos> LDAPForceDefaultUID on Nikolaos> LDAPForceDefaultGID on Nikolaos> LDAPGenerateHomedir on Nikolaos> RequireValidShell no Nikolaos> CreateHome on 750 dirmode 750 Nikolaos> DefaultRoot ~ Nikolaos> By the way, would you happen to know how we could disable Nikolaos> systemd/journal-based logging and use the classic SystemLog Nikolaos> logging method? You want to set the "SystemLog", "TransferLog" and "TraceLog" options, and then turn off the "SysLog" option. You could probably also force the SysLog to another host without systemd. I'm slowly coming to accept SystemD, but for servers, it really sucks. For laptops and single user systems... maybe it makes more sense. But it mostly sucks in my opinion. Nikolaos> If I simply configure: Nikolaos> DebugLevel 3 Nikolaos> SystemLog /var/log/proftpd/proftpd.log Nikolaos> ...it's just getting ignored. In fact, an empty file is created indeed, Nikolaos> but logging continues to be handled exclusively by systemd journal. I Nikolaos> only get log entries in trace.log (which is configured separately / in Nikolaos> parallel). You might need to poke through all the default configuration settings to look for where it's being overridden. Did you look in /etc/default/* by any chance? And it might also be that the SystemD startup script is overriding things there. /usr/lib/systemd/service/... or something like that. John _______________________________________________ ProFTPD Users List <[email protected]> Unsubscribe problems? http://www.proftpd.org/list-unsub.html