ProFTP is lot limiting access to specified members of group -- suggestions?

We're running ProFTPD 1.2.7 on Red Hat 7.3, and I want to limit FTP
access to only members of the ftpusers group. Below is my
proftpd.conf file, which I do limit access to this group -- but it's
not working. Anyone with a valid username and password, whether
they're in the ftpusers group or not can successfully FTP in.

ServerName "The FTP Server"
ServerType standalone
DefaultServer on
DefaultRoot ~
TransferLog /ftplog/proftpxferlog
LogFormat default "%h %l %u %t \"%r\" %s %b"
LogFormat auth "%v [%P] %h %t \"%r\" %s"
LogFormat write "%h %l %u %t \"%r\" %s %b"
LogFormat read "%h %l %u %t \"%r\" %s %b"
Port 21
Umask 022
MaxInstances 500
User nobody
Group nogroup
<Directory />
AllowOverwrite on
# This should limit access to only members of the ftpusers group
# but it apparently isn't working as any user can FTP in.
<Limit READ WRITE DIRS>
AllowGroup ftpusers
DenyALL
</Limit>
</Directory>
<Global>
</Global>

Any suggestions? Thanks,

Alex.

On 23 Apr 2004 07:28:56 -0700, Alex wrote:
> We're running ProFTPD 1.2.7 on Red Hat 7.3, and I want to limit FTP
> access to only members of the ftpusers group. Below is my
> proftpd.conf file, which I do limit access to this group -- but it's
> not working. Anyone with a valid username and password, whether
> they're in the ftpusers group or not can successfully FTP in.
>
><Directory />
> AllowOverwrite on
> # This should limit access to only members of the ftpusers group
> # but it apparently isn't working as any user can FTP in.
> <Limit READ WRITE DIRS>

Order deny,allow


> AllowGroup ftpusers
> DenyALL
> </Limit>
></Directory>

Just a guess, but try to modify it in the above way.

Ingo

--
Ingo Strauch ---- Registered Linux User #227900 (http://counter.li.org/)
http://www.the-one-brack.org/

(E-Mail Removed) (Alex) wrote news:2ba4b4eb.0404230628.666b4c03
@posting.google.com:
> <Directory />
> AllowOverwrite on
> # This should limit access to only members of the ftpusers group
> # but it apparently isn't working as any user can FTP in.
> <Limit READ WRITE DIRS>
> AllowGroup ftpusers
> DenyALL
> </Limit>
> </Directory>

According to your configuration, any user should be abe to log in the ftp
server, but shouldn't be able to browse an read the content. Is that
correct ?

The Limit directive can't limit login except on the ip (using <Limit
LOGIN>).

You have many choice to block ftp login :

- use the /etc/ftpusers file :
http://proftpd.linux.co.uk/localsite...g_ref_UseFtpUs
ers.html

- use AuthGroupFile and maybe AuthUserFile on alternate (limited)
group/user file.

- use RequireValidShell and disable shell on invalid user.

- use a mysql database authentification where you copy allowed user, and
use the proftpd mysql directive.



Regards