Pro-FTP 要如何設定USER只能下載不能上傳呢?【求助】



贊助商連結


bigmichael
2003-06-20, 03:05 PM
我的Pro-FTP版本是proftpd-1.2.5
我的以下是我的proftpd.conf的設定檔內容


[root@linux root]# vi /usr/local/etc/proftpd.conf

# This is a basic ProFTPD configuration file (rename it to
# 'proftpd.conf' for actual use. It establishes a single server
# and a single anonymous login. It assumes that you have a user/group
# "nobody" and "ftp" for normal operation and anon.

ServerName "ProFTPD Default Installation"
ServerType inetd
DefaultServer on

# Port 21 is the standard FTP port.
Port 21
# Umask 022 is a good standard umask to prevent new dirs and files
# from being group and world writable.
Umask 022

# To prevent DoS attacks, set the maximum number of child processes
# to 30. If you need to allow more than 30 concurrent connections
# at once, simply increase this value. Note that this ONLY works
# in standalone mode, in inetd mode you should use an inetd server
# that allows you to limit maximum number of processes per service
# (such as xinetd)
MaxInstances 30

# Set the user and group that the server normally runs at.
User nobody
Group nobody

# Normally, we want files to be overwriteable.
<Directory /*>
AllowOverwrite on
</Directory>

# A basic anonymous configuration, no upload directories.
<Anonymous ~ftp>
User ftp
Group ftp
# We want clients to be able to login with "anonymous" as well as "ftp"
UserAlias anonymous ftp

# Limit the maximum number of anonymous logins
MaxClients 10

# We want 'welcome.msg' displayed at login, and '.message' displayed
# in each newly chdired directory.
DisplayLogin welcome.msg
DisplayFirstChdir .message

# Limit WRITE everywhere in the anonymous chroot
<Limit WRITE>
DenyAll
</Limit>

</Anonymous>


我建個test的帳號
[root@linux home]# ll
drwx------ 3 test test 4096 May 18 10:49 test


這個test帳號登入時權限是全開的,可上傳也可下載。
我有試著改成
dr-x------ 3 test test 4096 May 18 10:49 test
一樣是可上傳也可下載。
我再試著改成
dr-------- 3 test test 4096 May 18 10:49 test
完全無法登入



我猜是要改proftpd.conf這個設定檔內容的
<Directory /*>
AllowOverwrite on
</Directory>


可是不知要如何改才能讓,某些帳號權限全,開可上傳也可下載。
又某些帳號只能下載不能上傳呢?

有哪位大大知道可以告訴我嗎?
謝謝啦!

贊助商連結


repsol
2003-06-23, 09:58 PM
1.目錄一定要有x的權限,才可以進入(root 例外)。你自己先試試看,不行再問。

2.建議你看看這邊所寫的
http://www.proftpd.org/docs/directives/linked/config_ref_Limit.html
http://www.proftpd.org/docs/directives/linked/config_ref_DenyUser.html


上面已經寫的很清楚了,不難。

靈活交叉運用即可!!

貼個自己的範例給你看,不要照抄,因為這應該不是你的需求。
建議你先弄懂上面網址的意義。



<Directory /home/somebody>
<Limit WRITE>
DenyUser somebody
</Limit>
<Limit READ>
DenyUser somebody
</Limit>
<Limit CWD>
DenyUser somebody
</Limit>
</Directory>

achilles
2003-06-26, 11:06 AM
請參考 http://www.vixual.net/wikka/wikka.php?wakka=Archive2003060901

bigmichael
2003-06-26, 11:23 PM
最初由 achilles 發表
請參考 http://www.dreamer.cc/xoops/modules/news/article.php?storyid=20
感謝各位大大的指導!:D :D :D :king: :king: :king: :jocky: :jocky: :jocky: :jocky: :jump: :jump: :jump: :jump2: :jump2: :jump2: :circle: :circle: :circle: :boldred: :boldred: