Hi Laurie,
> our system. One group that we add them to is set up to restrict them to
> their own home directory in ProFTPD (using the parameter 'DefaultRoot ~
> restricted' in proftpd.conf file). Another group we add them to allows
> shared access to the files all of our users upload. Yet another group is
> for our email account only clients to prevent FTP access (again, using
> the proftpd.conf file's 'DenyGroup' parameter) We have an automated
> customer account setup routine that creates the user, adds them to the
> appropriate groups, along with several other functions, and the whole
> thing is broken now because of this issue.
Why not try a MySQL backend to ProFTPD so access can be controlled via a
database instead of system accounts?
- "DefaultRoot ~" everyone by default but have a second virtual ProFTPD
server for those users that aren't locked down by default. WHY anyone
wouldn't be locked into their home directory is a mystery anyway.
- Email only clients wouldn't be in the MySQL database and hence wouldn't
get FTP access.
- Shared access to files could be done with a symlink perhaps?
- Automated scripts can be made to update the database very easily.
--
Regards,
+-----------------------------+---------------------------------+
| Peter Kiem .^. | E-Mail : <[EMAIL PROTECTED]> |
| Zordah IT /V\ | Mobile : +61 0414 724 766 |
| IT Consultancy & /( )\ | WWW : www.zordah.net |
| Internet Hosting ^^-^^ | ICQ : "Zordah" 866661 |
+-----------------------------+---------------------------------+
My current spamtrap address is [EMAIL PROTECTED]
--
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list