Hi Laurie,

> our system. One group that we add them to is set up to restrict them to
> their own home directory in ProFTPD (using the parameter 'DefaultRoot ~
> restricted' in proftpd.conf file). Another group we add them to allows
> shared access to the files all of our users upload. Yet another group is
> for our email account only clients to prevent FTP access (again, using
> the proftpd.conf file's 'DenyGroup' parameter) We have an automated
> customer account setup routine that creates the user, adds them to the
> appropriate groups, along with several other functions, and the whole
> thing is broken now because of this issue.

Why not try a MySQL backend to ProFTPD so access can be controlled via a
database instead of system accounts?

- "DefaultRoot ~" everyone by default but have a second virtual ProFTPD
server for those users that aren't locked down by default.  WHY anyone
wouldn't be locked into their home directory is a mystery anyway.
- Email only clients wouldn't be in the MySQL database and hence wouldn't
get FTP access.
- Shared access to files could be done with a symlink perhaps?
- Automated scripts can be made to update the database very easily.

-- 
Regards,
+-----------------------------+---------------------------------+
| Peter Kiem            .^.   | E-Mail    : <[EMAIL PROTECTED]> |
| Zordah IT             /V\   | Mobile    : +61 0414 724 766    |
|   IT Consultancy &  /(   )\ | WWW       : www.zordah.net      |
|   Internet Hosting   ^^-^^  | ICQ       : "Zordah" 866661     |
+-----------------------------+---------------------------------+
       My current spamtrap address is [EMAIL PROTECTED]



-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list

Reply via email to