server ftp

[Kevin Fries]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Alejandro Lemus (alejo) wrote:
| i want to do ftp server in my Fedora box, how config my box?

There is no good answer to such a question.  Like everything it depends
on so many factors, your question is badly formed.

Our FTP Server is configured as follows:

- - 1.6 GHz P4
- - 512 MB Ram
- - 80 GB Hard drive (Hardware based RAID-5)

This machine runs several functions, but the three most critical are
DNS, Mail and FTP.  Our machine generally runs quite quickly.

We pull our system accounts from LDAP which is cached on the localhost
port of the machine from a central server.

The server we choose to use is PureFTPd, which works excellent.

We maintain our accounts using GOsa on the back office server, so we do
not have maintenance tools for the FTP on the actual FTP server.  When
we add the check mark before the FTP in GOsa and save the record,
PureFTPd will begin accepting FTP requests for that user.  If I remove
the check mark, the change is made in FTP and the account is now blocked
from FTP access.

I achieve this by a slight alteration of the PureFTPd configuration file
for LDAP.  Normally it allows FTP for all Posix accounts.  I changed the
filter to require the PureFTPdUser objectclass instead.  GOsa adds or
removes that object class as I add or remove the check box.  This allows
the FTP to respond to LDAP, and not require separate FTP admin tools.

I have also turned on soft chroot, which limits the user to their home
directory.  PureFTPd's soft chroot allows it to follow symlinks outside
the jail (its hard chroot works conventionally).  I can then allow
access to internal resources on a user by user basis by using normal
Linux directory utilities.

That is what we do... What is appropriate for you is impossible to tell
from your question.

- --
Kevin Fries
Network Administrator
Hydrologic Consultants, Inc of Colorado
(303) 969-8033    FAX: (303) 969-8357
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.6 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFCX9qiiFq1Eo16+CgRAqERAJ9d5gpydB359uS6Elt6dSkZYniZAACfY3fJ
qRcwBiWeUxHUgriTufYr0kc=
=tO/L
-----END PGP SIGNATURE-----