ftp user can't access

Virtualmin
1

Hi all,

I had an ftp user on Edit Mail and FTP Users section with these details (Name: name@domain.com, Ftp login enabled: yes)

When I login via ftp I insert calum.domain for the username like I can see in the datails after ftp user creation (POP3/FTP login name.domain) but i can’t login.

I have 3.48.gpl

Thank you very much :wink:

2

Check the shell of the user, and see if that shell is listed in /etc/shells. /bin/false, I believe, is the default shell for FTP+Mail users in Virtualmin…but if it’s not listed in /etc/shells, the FTP server will refuse the login.

3

And, of course, if that’s not the problem, we need to see something from the logs! /var/log/secure is probably where this one will show up.

4

Joe wrote:

Check the shell of the user, and see if that shell is listed in /etc/shells. /bin/false, I believe, is the default shell for FTP+Mail users in Virtualmin...but if it's not listed in /etc/shells, the FTP server will refuse the login.

This is the file and i don’t see /bin/false. What can I do?

# /etc/shells: valid login shells /bin/ash /bin/csh /bin/sh /usr/bin/es /usr/bin/ksh /bin/ksh /usr/bin/rc /usr/bin/tcsh /bin/tcsh /usr/bin/zsh /bin/sash /bin/zsh /usr/bin/esh /bin/dash /usr/bin/screen /bin/bash /bin/rbash /usr/bin/scponly

Thank you very much Joe :wink:

5

add the line /bin/false

6

it works. When i login with name.domain I see its home directory for email (home/site/homes/name) and i can see the /home/site/public_html too but it’s possible to see all directory of the server too in /

It’s quite dangerous :frowning: How can I allow this user to see only /home/site ?

thanks dan

7
it's possible to see all directory of the server too in /

It’s quite dangerous :frowning: How can I allow this user to see only /home/site ?

Why is that dangerous? You reckon in 35 years, UNIX hasn’t figured out security pretty well? :wink:

But, you can enable chroot in the ProFTPd configuration, if you really think it’s an issue. (In Webmin’s ProFTPd module this option is labeled “Limit users to directories” in the Files and Directories page, and set it to “Home directory”.)

8

I set up it to home directory and user groups to everyone but it doesn’t work (I see the /)

It’s dangerous because it’s my personal website and if i want to give a new ftp access to a user, this user can view and edit all the server.

Thanks Joe

9

Sorry, it works: i don’t remember to apply the current configuration by sending a SIGHUP signal to the running ProFTPD process with apply button.