Re: [Proftpd-user] File extension AllowFiler working for f tp but not sftp

> Below config is working fine for FTP but breaks for SFTP.
> 
> (logfile shows WRITE of ‘/abc.zip' blocked by <Limit> configuration)
> 
> For SFTP filehandle is created, but than client get permission denied 
> and can’t upload
> Any idea what’s wrong or can be improved?
> 
> 
>   <Limit APPE DELE CDUP CWD PWD STOU REST SIZE DELE>
>     AllowGroup supplier
>   </Limit>
> 
>   <Limit RETR RNFR RNTO MKD RMD >
>     DenyGroup supplier
>   </Limit>

The SFTP protocol is different from FTP; this difference shows up here.  For an FTP upload, it's a single STOR command.  But for SFTP, it's a sequence of requests:
 * OPEN
 * WRITE
 * WRITE
 * WRITE
 * ...
 * CLOSE

Thus you may need to add "WRITE" to your list of allowed commands for the "supplier" group, for SFTP uploads.

Hope this helps,
TJ


_______________________________________________
ProFTPD Users List   <[email protected]>
Unsubscribe problems?
http://www.proftpd.org/list-unsub.html