LinuxForum.Fans
Тема

Proftpd не пускает анонимуса

Автор: lecksys 4 сообщений 2638 просмотров
#230811

вобщем установлен сабж ниже конфиг и вывод дебагера:

text
# video.lan ProFTPD configuration file
#

# # misc server settings # DefaultServer on ServerType standalone DefaultAddress 127.0.0.1

# To prevent DoS attacks, set the maximum number of child processes # to 30. If you need to allow more than 30 concurrent connections # at once, simply increase this value. Note that this ONLY works # in standalone mode, in inetd mode you should use an inetd server # that allows you to limit maximum number of processes per service # (such as xinetd) MaxInstances 30

# Define the log formats LogFormat default "%h %l %u %t \"%r\" %s %b" LogFormat auth "%v [%P] %h %t \"%r\" %s"

# No DNS lookups UseReverseDNS off SystemLog /var/log/proftpd/proftpd.log

# # global vhost configuration # <Global> # Umask 022 is a good standard umask to prevent new dirs and files # from being group and world writable. Umask 022 # Default to show dot files in directory listings ListOptions "-a" # Don't chroot ftp.video.lan admin DefaultRoot ~ !video DefaultChdir /mnt video # Set the user and group that the server normally runs at. User nobody Group nobody # Use pam to authenticate AuthPAM on AuthPAMConfig proftpd # Do not perform ident lookups (hangs when the port is filtered) IdentLookups off # Allow to resume not only the downloads but the uploads too AllowRetrieveRestart on AllowStoreRestart on # Disable handling of .ftpaccess AllowOverride off # Normally, we want users to do a few things. AllowOverwrite on # Delete partially uploaded files if the # transfer is stopped via the ABOR command DeleteAbortedStores on <Limit ALL SITE_CHMOD> AllowAll </Limit> # Default to CP1251 for non-UTF8 clients <IfModule mod_lang.c> UseEncoding utf8 cp1251 </IfModule> #CharsetLocal UTF-8 #CharsetRemote CP1251 # Enable chown() CapabilitiesSet +CAP_CHOWN </Global>

# # ftp virtual hosts # <VirtualHost video.lan> ServerName ftp.video.lan ServerAdmin dvurik@sysert.ru ServerIdent on "Welcome to video.lan FTP Service." # Port 21 is the standard FTP port. Port 21 # Explicit logging ExtendedLog /var/log/proftpd/video.lan-access.log WRITE,READ default ExtendedLog /var/log/proftpd/video.lan-auth.log AUTH auth # Users allowed to login to this vhost <Limit LOGIN> AllowUser ftp,video AllowGroup wheel DenyAll </Limit> <Directory /srv/ftp/videolan/incoming> UserOwner ftp GroupOwner ftp Umask 002 </Directory> <Anonymous /srv/ftp/videolan> User ftp Group ftp LoginPasswordPrompt on DirFakeUser on ftp DirFakeGroup on ftp DirFakeMode 644 UserAlias anonymous ftp # Don't write anonymous accesses to the system wtmp file (good idea!) WtmpLog off # Restrict simultaenous downloads MaxClientsPerHost 3 # Restrict writing to upload dir AllowStoreRestart off AllowOverwrite off <Limit WRITE> DenyAll </Limit> <Directory /srv/ftp/videolan/incoming> <Limit STOR MKD XMKD> AllowAll </Limit> Umask 002 </Directory> # Hide our disks #<Directory /var/ftp/video.lan> # HideFiles "^video|feed$" #</Directory> # Disable chmod by anonymous users <Limit SITE_CHMOD> DenyAll </Limit> </Anonymous> </VirtualHost>

#<VirtualHost mp3.lan> # ServerName ftp.mp3.lan # ServerAdmin admin@sysert.ru # ServerIdent on "Welcome to mp3.lan FTP Service." # # # Port 21 is the standard FTP port. # Port 21 # # # Explicit logging # ExtendedLog /var/log/proftpd/mp3.lan-access.log WRITE,READ default # ExtendedLog /var/log/proftpd/mp3.lan-auth.log AUTH auth # ExtendedLog /var/ftp/mp3.lan/logs/uploads.log WRITE default # # Users allowed to login to this vhost # <Limit LOGIN> # AllowUser ftp,mp3lan # AllowGroup wheel # DenyAll # </Limit> # # <Directory /var/ftp/mp3.lan/incoming> # UserOwner ftp # GroupOwner ftp # # Umask 002 # </Directory> # # <Anonymous /var/ftp/mp3.lan> # User ftp # Group ftp # # DirFakeUser on ftp # DirFakeGroup on ftp # DirFakeMode 644 # # UserAlias anonymous ftp # # # Don't write anonymous accesses to the system wtmp file (good idea!) # WtmpLog off # # # Restrict writing to upload dir # AllowStoreRestart off # AllowOverwrite off # # <Limit WRITE> # DenyAll # </Limit> # # <Directory /var/ftp/mp3.lan/incoming> # <Limit STOR MKD XMKD> # AllowAll # </Limit> # # Umask 002 # </Directory> # # # Disable chmod by anonymous users # <Limit SITE_CHMOD> # DenyAll # </Limit> # </Anonymous> #</VirtualHost>

и вывод proftpd -n -d 9 при попытке подключиться анонимно:

text
# proftpd -n -d 9
 - using TCP receive buffer size of 87380 bytes
 - using TCP send buffer size of 16384 bytes
 - setting default address to 127.0.0.1
 - ROOT PRIVS at mod_log.c:535
 - RELINQUISH PRIVS at mod_log.c:540
 - <IfModule>: skipping 'mod_lang.c' section at line 72
 - <Directory /srv/ftp/videolan/incoming>: adding section for resolved path '/srv/ftp/videolan/incoming'
 - <Directory /srv/ftp/videolan/incoming>: adding section for resolved path '/srv/ftp/videolan/incoming'
127.0.0.1 - 
127.0.0.1 - Config for ProFTPD:
127.0.0.1 - DefaultServer
127.0.0.1 - Limit
127.0.0.1 -  AllowAll
127.0.0.1 - Umask
127.0.0.1 - ListOptions
127.0.0.1 - DefaultRoot
127.0.0.1 - DefaultChdir
127.0.0.1 - UserID
127.0.0.1 - UserName
127.0.0.1 - GroupID
127.0.0.1 - GroupName
127.0.0.1 - AuthPAM
127.0.0.1 - AuthPAMConfig
127.0.0.1 - IdentLookups
127.0.0.1 - AllowRetrieveRestart
127.0.0.1 - AllowStoreRestart
127.0.0.1 - AllowOverride
127.0.0.1 - AllowOverwrite
127.0.0.1 - DeleteAbortedStores
127.0.0.1 - CapabilitiesSet
127.0.0.1 - 
127.0.0.1 - Config for ftp.video.lan:
127.0.0.1 - /srv/ftp/videolan/
127.0.0.1 -  Limit
127.0.0.1 -   DenyAll
127.0.0.1 -  /srv/ftp/videolan/incoming
127.0.0.1 -   Limit
127.0.0.1 -    AllowAll
127.0.0.1 -   Umask
127.0.0.1 -   LoginPasswordPrompt
127.0.0.1 -   DirFakeUser
127.0.0.1 -   DirFakeGroup
127.0.0.1 -   DirFakeMode
127.0.0.1 -   WtmpLog
127.0.0.1 -   MaxClientsPerHost
127.0.0.1 -   AllowStoreRestart
127.0.0.1 -   AllowOverwrite
127.0.0.1 -   ListOptions
127.0.0.1 -   DefaultChdir
127.0.0.1 -   AllowRetrieveRestart
127.0.0.1 -   AllowOverride
127.0.0.1 -   DeleteAbortedStores
127.0.0.1 -  Limit
127.0.0.1 -   DenyAll
127.0.0.1 -  UserName
127.0.0.1 -  GroupName
127.0.0.1 -  LoginPasswordPrompt
127.0.0.1 -  DirFakeUser
127.0.0.1 -  DirFakeGroup
127.0.0.1 -  DirFakeMode
127.0.0.1 -  UserAlias
127.0.0.1 -  WtmpLog
127.0.0.1 -  MaxClientsPerHost
127.0.0.1 -  AllowStoreRestart
127.0.0.1 -  AllowOverwrite
127.0.0.1 -  Umask
127.0.0.1 -  ListOptions
127.0.0.1 -  DefaultChdir
127.0.0.1 -  AllowRetrieveRestart
127.0.0.1 -  AllowOverride
127.0.0.1 -  DeleteAbortedStores
127.0.0.1 - /srv/ftp/videolan/incoming
127.0.0.1 -  UserOwner
127.0.0.1 -  GroupOwner
127.0.0.1 -  Umask
127.0.0.1 -  ListOptions
127.0.0.1 -  DefaultChdir
127.0.0.1 -  AllowRetrieveRestart
127.0.0.1 -  AllowStoreRestart
127.0.0.1 -  AllowOverride
127.0.0.1 -  AllowOverwrite
127.0.0.1 -  DeleteAbortedStores
127.0.0.1 - Limit
127.0.0.1 -  AllowUser
127.0.0.1 -  AllowGroup
127.0.0.1 -  DenyAll
127.0.0.1 - ServerIdent
127.0.0.1 - ExtendedLog
127.0.0.1 - ExtendedLog
127.0.0.1 - Limit
127.0.0.1 -  AllowAll
127.0.0.1 - Umask
127.0.0.1 - ListOptions
127.0.0.1 - DefaultRoot
127.0.0.1 - DefaultChdir
127.0.0.1 - UserID
127.0.0.1 - UserName
127.0.0.1 - GroupID
127.0.0.1 - GroupName
127.0.0.1 - AuthPAM
127.0.0.1 - AuthPAMConfig
127.0.0.1 - IdentLookups
127.0.0.1 - AllowRetrieveRestart
127.0.0.1 - AllowStoreRestart
127.0.0.1 - AllowOverride
127.0.0.1 - AllowOverwrite
127.0.0.1 - DeleteAbortedStores
127.0.0.1 - CapabilitiesSet
127.0.0.1 - ROOT PRIVS at mod_delay.c:354
127.0.0.1 - RELINQUISH PRIVS at mod_delay.c:359
127.0.0.1 - ROOT PRIVS at mod_ctrls.c:1139
127.0.0.1 - RELINQUISH PRIVS at mod_ctrls.c:1141
127.0.0.1 - SETUP PRIVS at main.c:3127
127.0.0.1 - ROOT PRIVS at main.c:2151
127.0.0.1 - RELINQUISH PRIVS at main.c:2158
127.0.0.1 - ROOT PRIVS at main.c:2486
127.0.0.1 - opening scoreboard '/var/run/proftpd/proftpd.scoreboard'
127.0.0.1 - RELINQUISH PRIVS at main.c:2512
127.0.0.1 - ROOT PRIVS at inet.c:348
127.0.0.1 - RELINQUISH PRIVS at inet.c:411
127.0.0.1 - ProFTPD 1.3.3d (maint) (built Tue Mar 8 2011 20:32:01 UTC) standalone mode STARTUP
127.0.0.1 - ROOT PRIVS at pidfile.c:48
127.0.0.1 - RELINQUISH PRIVS at pidfile.c:50
127.0.0.1 - ROOT PRIVS at mod_ctrls.c:693
127.0.0.1 - RELINQUISH PRIVS at mod_ctrls.c:697
127.0.0.1 - ROOT PRIVS at main.c:1238
127.0.0.1 - RELINQUISH PRIVS at main.c:1242
127.0.0.1 - no matching vhost found for ::ffff:192.168.41.3#21, using 'ProFTPD' listening on wildcard address
127.0.0.1 (::ffff:192.168.42.201[::ffff:192.168.42.201]) - ROOT PRIVS at main.c:1086
127.0.0.1 (::ffff:192.168.42.201[::ffff:192.168.42.201]) - SETUP PRIVS at main.c:1091
127.0.0.1 (::ffff:192.168.42.201[::ffff:192.168.42.201]) - session requested from client in unknown class
127.0.0.1 (::ffff:192.168.42.201[::ffff:192.168.42.201]) - performing module session initializations
127.0.0.1 (::ffff:192.168.42.201[::ffff:192.168.42.201]) - mod_cap/1.0: adding CAP_AUDIT_WRITE capability
127.0.0.1 (::ffff:192.168.42.201[::ffff:192.168.42.201]) - mod_ident/1.0: ident lookup disabled
127.0.0.1 (::ffff:192.168.42.201[::ffff:192.168.42.201]) - ROOT PRIVS at mod_delay.c:1447
127.0.0.1 (::ffff:192.168.42.201[::ffff:192.168.42.201]) - RELINQUISH PRIVS at mod_delay.c:1452
127.0.0.1 (::ffff:192.168.42.201[::ffff:192.168.42.201]) - ROOT PRIVS at mod_auth.c:133
127.0.0.1 (::ffff:192.168.42.201[::ffff:192.168.42.201]) - opening scoreboard '/var/run/proftpd/proftpd.scoreboard'
127.0.0.1 (::ffff:192.168.42.201[::ffff:192.168.42.201]) - RELINQUISH PRIVS at mod_auth.c:135
127.0.0.1 (::ffff:192.168.42.201[::ffff:192.168.42.201]) - connected - local  : ::ffff:192.168.41.3:21
127.0.0.1 (::ffff:192.168.42.201[::ffff:192.168.42.201]) - connected - remote : ::ffff:192.168.42.201:56865
127.0.0.1 (::ffff:192.168.42.201[::ffff:192.168.42.201]) - FTP session opened.
127.0.0.1 (::ffff:192.168.42.201[::ffff:192.168.42.201]) - dispatching PRE_CMD command 'USER anonymous' to mod_core
127.0.0.1 (::ffff:192.168.42.201[::ffff:192.168.42.201]) - dispatching PRE_CMD command 'USER anonymous' to mod_core
127.0.0.1 (::ffff:192.168.42.201[::ffff:192.168.42.201]) - dispatching PRE_CMD command 'USER anonymous' to mod_delay
127.0.0.1 (::ffff:192.168.42.201[::ffff:192.168.42.201]) - dispatching PRE_CMD command 'USER anonymous' to mod_auth
127.0.0.1 (::ffff:192.168.42.201[::ffff:192.168.42.201]) - dispatching CMD command 'USER anonymous' to mod_auth
127.0.0.1 (::ffff:192.168.42.201[::ffff:192.168.42.201]) - dispatching POST_CMD command 'USER anonymous' to mod_delay
127.0.0.1 (::ffff:192.168.42.201[::ffff:192.168.42.201]) - dispatching LOG_CMD command 'USER anonymous' to mod_log
127.0.0.1 (::ffff:192.168.42.201[::ffff:192.168.42.201]) - dispatching PRE_CMD command 'PASS (hidden)' to mod_core
127.0.0.1 (::ffff:192.168.42.201[::ffff:192.168.42.201]) - dispatching PRE_CMD command 'PASS (hidden)' to mod_core
127.0.0.1 (::ffff:192.168.42.201[::ffff:192.168.42.201]) - dispatching PRE_CMD command 'PASS (hidden)' to mod_delay
127.0.0.1 (::ffff:192.168.42.201[::ffff:192.168.42.201]) - dispatching PRE_CMD command 'PASS (hidden)' to mod_auth
127.0.0.1 (::ffff:192.168.42.201[::ffff:192.168.42.201]) - dispatching CMD command 'PASS (hidden)' to mod_auth
127.0.0.1 (::ffff:192.168.42.201[::ffff:192.168.42.201]) - USER anonymous: no such user found from ::ffff:192.168.42.201 [::ffff:192.168.42.201] to ::ffff:192.168.41.3:21
127.0.0.1 (::ffff:192.168.42.201[::ffff:192.168.42.201]) - dispatching POST_CMD_ERR command 'PASS (hidden)' to mod_delay
127.0.0.1 (::ffff:192.168.42.201[::ffff:192.168.42.201]) - dispatching LOG_CMD_ERR command 'PASS (hidden)' to mod_log
127.0.0.1 (::ffff:192.168.42.201[::ffff:192.168.42.201]) - dispatching LOG_CMD_ERR command 'PASS (hidden)' to mod_auth
127.0.0.1 (::ffff:192.168.42.201[::ffff:192.168.42.201]) - FTP session closed.
127.0.0.1 - ROOT PRIVS at main.c:1238
127.0.0.1 - RELINQUISH PRIVS at main.c:1242
127.0.0.1 - no matching vhost found for ::ffff:192.168.41.3#21, using 'ProFTPD' listening on wildcard address
127.0.0.1 (::ffff:192.168.42.201[::ffff:192.168.42.201]) - ROOT PRIVS at main.c:1086
127.0.0.1 (::ffff:192.168.42.201[::ffff:192.168.42.201]) - SETUP PRIVS at main.c:1091
127.0.0.1 (::ffff:192.168.42.201[::ffff:192.168.42.201]) - session requested from client in unknown class
127.0.0.1 (::ffff:192.168.42.201[::ffff:192.168.42.201]) - performing module session initializations
127.0.0.1 (::ffff:192.168.42.201[::ffff:192.168.42.201]) - mod_cap/1.0: adding CAP_AUDIT_WRITE capability
127.0.0.1 (::ffff:192.168.42.201[::ffff:192.168.42.201]) - mod_ident/1.0: ident lookup disabled
127.0.0.1 (::ffff:192.168.42.201[::ffff:192.168.42.201]) - ROOT PRIVS at mod_delay.c:1447
127.0.0.1 (::ffff:192.168.42.201[::ffff:192.168.42.201]) - RELINQUISH PRIVS at mod_delay.c:1452
127.0.0.1 (::ffff:192.168.42.201[::ffff:192.168.42.201]) - ROOT PRIVS at mod_auth.c:133
127.0.0.1 (::ffff:192.168.42.201[::ffff:192.168.42.201]) - opening scoreboard '/var/run/proftpd/proftpd.scoreboard'
127.0.0.1 (::ffff:192.168.42.201[::ffff:192.168.42.201]) - RELINQUISH PRIVS at mod_auth.c:135
127.0.0.1 (::ffff:192.168.42.201[::ffff:192.168.42.201]) - connected - local  : ::ffff:192.168.41.3:21
127.0.0.1 (::ffff:192.168.42.201[::ffff:192.168.42.201]) - connected - remote : ::ffff:192.168.42.201:56866
127.0.0.1 (::ffff:192.168.42.201[::ffff:192.168.42.201]) - FTP session opened.
127.0.0.1 - scrubbing scoreboard
127.0.0.1 - ROOT PRIVS at scoreboard.c:1077                                                                                                                                         
127.0.0.1 - RELINQUISH PRIVS at scoreboard.c:1079                                                                                                                                   
127.0.0.1 - ROOT PRIVS at scoreboard.c:1117   

Анонимус ни в какую не заходит нет такого мол пользователя. Помогите разобраться

#230814
lecksys написал:

<Anonymous /srv/ftp/videolan>
User ftp
Group ftp

LoginPasswordPrompt on

LoginPasswordPrompt off или убери эту строчку.

#230839
lecksys написал:
Анонимус ни в какую не заходит нет такого мол пользователя. Помогите разобраться

а есть такой юзер?
[console]$ grep 'ftp' /etc/passwd
$ cat /etc/ftpusers
[/console]

#230842
lecksys написал:
и вывод proftpd -n -d 9 при попытке подключиться анонимно:

ну а что-бы входить анонимно, надо раскомментировать эту секцию

text
<Anonymous /var/ftp/mp3.lan> 
...
 </Anonymous>

(кстати, а разве можно её делать внутри виртуальных хостов?)

Войдите или зарегистрируйтесь, чтобы ответить.