topic Re: Restict some users to do vsftp in Operating System - Linux

Restict some users to do vsftp

restrict a perticular p — Tue, 09 Mar 2010 14:23:32 GMT

Hi Gurus,

I need your help in restricting some users to use the service vsftp.

My system details are as follows

OS SLES Relase 9 update 4
vsftp version vsftpd-2.0.4-0.3

Any help with this reagrds is most welcome.

Re: Restict some users to do vsftp

Michal Kapalka (mikap) — Tue, 09 Mar 2010 14:46:38 GMT

hi,

i think this could be the answer :

http://www.linuxforums.org/forum/redhat-fedora-linux-help/28309-ftp-only-account-vsftp.html

mikap

Re: Restict some users to do vsftp

restrict a perticular p — Tue, 09 Mar 2010 16:33:05 GMT

Thanks for your reply,
But that is not the solution i am looking for.

is there any other way to achieve this.

Regards
Anand

Re: Restict some users to do vsftp

Steven E. Protter — Tue, 09 Mar 2010 19:56:29 GMT

Shalom,

What kind of restrictions do you want to impose?

vsftpd has anonymous ftp enabled by default?

To provide a solution, a goal statement is needed. "Restricting some users..." Restricting them from doing what?

SEP

Re: Restict some users to do vsftp

restrict a perticular p — Wed, 10 Mar 2010 10:42:49 GMT

Hi Protter,

Thanks for your reply.
below is my requirement,

I need to restict perticular user to use the vsftp service.

That mean the perticular user should not login to the server using vsftp.

For example: Say user abc and xyz are using vsftp to login to server, then I wanted to restrict user abc to login using vsftp and user xyz is allowd on the server to use vsftp.

hope this clears my requirement.

Re: Restict some users to do vsftp

Alexander Chuzhoy — Wed, 10 Mar 2010 12:04:01 GMT

From "man vsftpd.conf":
The mentioned below options should be added to the vsftpd.conf file followed by restart of vsftpd:
userlist_deny
This option is examined if userlist_enable is activated. If you set this setting to NO, then users will be denied login unless they are
explicitly listed in the file specified by userlist_file. When login is denied, the denial is issued before the user is asked for a
password.

Default: YES

userlist_enable
If enabled, vsftpd will load a list of usernames, from the filename given by userlist_file. If a user tries to log in using a name in
this file, they will be denied before they are asked for a password. This may be useful in preventing cleartext passwords being trans-
mitted. See also userlist_deny.

Default: NO

Re: Restict some users to do vsftp

restrict a perticular p — Fri, 12 Mar 2010 14:38:20 GMT

I believe yes this is the solution.

I will try this solution in the test servers and let all of you know.

I am planning to do following in /etc/vsftpd.conf file

userlist_file/etc/vsftpd.user_list

userlist_enable=YES

userlist_deny=YES

If anyone already tried this solution or have other tested solution then please let me know.

Re: Restict some users to do vsftp

restrict a perticular p — Fri, 12 Mar 2010 14:39:50 GMT

Forgot to mention,
I will put the resticted user list in the file etc/vsftpd.user_list.