fr.CentOS.org

Code : Tout sélectionner

Warning: chown(): Operation not permitted

Code : Tout sélectionner

apache:apache /etc/vsftpd/vsftpd_user_conf/$USER

Code : Tout sélectionner

root:root /etc/vsftpd/vsftpd_user_conf/$USER

Code : Tout sélectionner

<?php [...]
$commandAdd = escapeshellcmd("sh /etc/vsftpd/addftpuser.sh ".$login);
$outputAdd = shell_exec($commandAdd);
if ($outputAdd){echo '<br/>Enregistrement de la configuration ftp  effectu&eacute; pour l\'utilisateur '.$login.'<br/>';
var_dump($outputAdd);}
else{echo '<br/>Erreur d\'&eacute;criture de la configuration ftp pour l\'utilisateur '.$login.'<br/>';
var_dump($outputAdd);}
[...] ?>

Code : Tout sélectionner

apache ALL=(ALL) NOPASSWD:/etc/vsftpd/addftpuser.sh

Code : Tout sélectionner

#!/bin/sh

var1=$1

	# cree le dossier utilisateur
	mkdir /home/ftp/users/$var1 
	chmod 775 /home/ftp/users/$var1
	sudo chown -hR vsftpd:vsftpd /home/ftp/users/$var1
        #chown -R vsftpd:vsftpd /home/ftp/users/$var1 #HS ...

	#cree le fichier de config
	echo "#Config file for "$1 >> /etc/vsftpd/vsftpd_user_conf/$var1
	echo "dirlist_enable=YES" >> /etc/vsftpd/vsftpd_user_conf/$var1
	echo "download_enable=YES" >> /etc/vsftpd/vsftpd_user_conf/$var1
	echo "local_root=/home/ftp/users/"$var1 >> /etc/vsftpd/vsftpd_user_conf/$var1
	echo "write_enable=YES" >> /etc/vsftpd/vsftpd_user_conf/$var1
	sudo chown -R root:root /etc/vsftpd/vsftpd_user_conf/$var1
        #chown -R root:root /etc/vsftpd/vsftpd_user_conf/$var1 # HS ...
	
# affiche le succés 
	echo "Utilisateur FTP "$var1" ajouté avec succès" 

Code : Tout sélectionner

# No ANONYMOUS users allowed
anonymous_enable=NO
# Allow 'local' users with WRITE permissions (0755)
local_enable=YES
write_enable=YES
local_umask=022
dirmessage_enable=YES
xferlog_enable=YES

# if you want to LOG vsftpd activity then uncomment this log_ftp_protocol
# log_ftp_protocol=YES

connect_from_port_20=YES

# uncomment xferlog_file and xferlog_std_format if you DIDN'T use the line above
# with log_ftp_protocol - it must be excluding each other
# The name of log file when xferlog_enable=YES and xferlog_std_format=YES
# WARNING - changing this filename affects /etc/logrotate.d/vsftpd.log
#xferlog_file=/var/log/xferlog
#
# xferlog_std_format Switches between logging into vsftpd_log_file and xferlog_file files.
# NO writes to vsftpd_log_file, YES to xferlog_file
# xferlog_std_format=YES

#
# You may change the default value for timing out an idle session (in seconds).
#idle_session_timeout=600
#
# You may change the default value for timing out a data connection (in seconds).
#data_connection_timeout=120
#
# define a unique user on your system which the
# ftp server can use as a totally isolated and unprivileged user.
nopriv_user=vsftpd

chroot_local_user=YES

listen=YES

# here we use the authentication module for vsftpd to check users name and passw
pam_service_name=vsftpd
userlist_enable=YES
tcp_wrappers=YES

# If userlist_deny=YES (default), never allow users in this file
# /etc/vsftpd/user_list , and do not even prompt for a password.
# Note that the default vsftpd pam config also checks /etc/vsftpd/ftpusers
# for users that are denied.
userlist_deny=yes

# here the vsftpd will allow the 'vsftpd' user to login into '/home/vsftpd/$USER directory
guest_enable=YES
guest_username=vsftpd
local_root=/home/ftp/users/$USER
user_sub_token=$USER
virtual_use_local_privs=YES
user_config_dir=/etc/vsftpd/vsftpd_user_conf

force_local_data_ssl=NO
force_local_logins_ssl=NO

# PASV - passive ports for FTP (range 44000 - 44100 ; 100 PASV ports,
# REMEMBER to OPEN FIREWALL FOR ALLOWING FTP Passive CONNECTIONS
# check "how to enable Passive FTP in IPTABLES": here or here

pasv_enable=YES
pasv_min_port=44000
pasv_max_port=44100

Code : Tout sélectionner

SHELL=/bin/bash
PATH=/sbin:/bin:/usr/sbin:/usr/bin
MAILTO=root
HOME=/

*/5 * * * * sudo chown -R vsftpd:vsftpd /home/ftp/users/
*/5 * * * * sudo chown -R root:root /etc/vsftpd/vsftpd_user_conf/ 
*/5 * * * * echo "test" >> /etc/vsftpd/vsftpdtest.txt

Code : Tout sélectionner

grep vsftp /etc/passwd
grep vsftp /etc/group