FTPd Configuration

[Benjamin Scott]

On Wed, 26 Jan 2005, at 8:32pm, s_ingham at comcast.net wrote:
> I am trying to setup an FTP server on a Fedora Core 3 system that will
> allow users to login in via LDAP/Kerberos login and restrict access to
> their individual home directories only. I do not want them to be able to
> access ANY other directory on the system.

  With vsftpd, the restrict-to-home bit is easy.  Just set
"chroot_local_user=YES" in your vsftpd.conf file.  It's even better then
disabling commands in the FTP software, because the OS enforces the
directory restriction.

  I'm thinking the LDAP/Kerberos bit might happen automatically thanks to
PAM, but that's more of a wild speculation then anything else.  I don't even
know if vsftpd uses PAM.

-- 
Ben Scott <bscott at ntisys.com>
| The opinions expressed in this message are those of the author and do  |
| not represent the views or policy of any other person or organization. |
| All information is provided without warranty of any kind.              |