Re: [Proftpd-user] seteuid / setegid on mySQL Authentication
Tim Gustafson <tjg <at> soe.ucsc.edu>
2008-12-10 16:45:51 GMT
> What are you using to determine this? Some tools, e.g.
> ps, may actually be showing the real UID/GID, instead
> of (or in addition to) the effective UID/GID.
The way I'm determining this behavior is that I have ProFTPd set to chroot to a folder that is chmod 700 and
owned by the user specified in the mySQL authentication table, but when the user tries to log in, I get these
error messages in my syslog:
FTP session opened.
USER Dropbox: Login successful.
Preparing to chroot to directory '/home/foo/upload'
Dropbox chroot("/home/foo/upload"): Permission denied
error: unable to set default root directory
FTP session closed.
Here is the permission for the folder in question:
drwx------ 2 foo users 512 Dec 9 02:07 /home/foo/upload
And here is the entry in the mySQL authentication table:
UserName: Dropbox
Password: *0B3D2B373D9CEBB443E2A5D954C23A954EBB8D7E
UID: 3554
GID: 100
HomeDirectory: /home/
Shell: /bin/sh
The "foo" user's ID looks like this:
uid=3554(foo) gid=100(users)
So, maybe ProFTPd needs to seteuid/setegid before it tries to do a chroot, or is that not possible? The
folder is NFS-mounted, and root does not have root privileges on the mount. Could that be the problem? Do I
need to have my file server export that mount with root permissions for this to work?
Tim Gustafson
SOE Webmaster
UC Santa Cruz
tjg <at> soe.ucsc.edu
831-459-5354
------------------------------------------------------------------------------
SF.Net email is Sponsored by MIX09, March 18-20, 2009 in Las Vegas, Nevada.
The future of the web can't happen without you. Join us at MIX09 to help
pave the way to the Next Web now. Learn more and register at
http://ad.doubleclick.net/clk;208669438;13503038;i?http://2009.visitmix.com/
_______________________________________________
ProFTPD Users List <proftpd-users <at> proftpd.org>
Unsubscribe problems?
http://www.proftpd.org/list-unsub.html