Topic: Anonymous FTP access

[Librarian]

Good morning

I will appreciate it if somebody can help me here ...

I would like to set up anonymous FTP access on my SME server, but read-only so that nobody can upload stuff.

Where is the FTP directory located? If I copy the FTP files and subdirectories over from a Windoze PC, then what attributes and rights do I need to set on the files and directories to allow read-only operation?

As for the Web server, the html files go into the html directory on the primary ibay, am I correct?

BTW - I'm chucking out our Win2k server - it is giving problems at this stage, and I'm looking for something that I can install and go without having to fiddle around configuring, patching and so on for hours. I just don't have the time for that.

The SME Server is set-up for server-only operation, and it is behind a firewall in a DMZ.

Kind regards

Librarian

 

[cc_skavenger]

If you want the ftp access on the Primary Ibay, then the files would go in the files directory in the primary ibay.  When setting up the ibay, specify that the group is Admin and that User access via file sharing or user ftp is set for Write=Group, Read=Everyone.  This will setup the ftp to only allow Admin to write to the folder and everyone to be allowed to read it.

HTH

[CharlieBrady]

I would like to set up anonymous FTP access on my SME server, but read-only so that nobody can upload stuff.

Enable public ftp access. Copy files, as admin, to the files subdirectory of the Primary i-bay. Done - you have read-only anon ftp access - if your firewall allows ftp passthrough, that is.

[Librarian]

If you want the ftp access on the Primary Ibay, then the files would go in the files directory in the primary ibay.  When setting up the ibay, specify that the group is Admin and that User access via file sharing or user ftp is set for Write=Group, Read=Everyone.  This will setup the ftp to only allow Admin to write to the folder and everyone to be allowed to read it.

Enable public ftp access. Copy files, as admin, to the files subdirectory of the Primary i-bay. Done - you have read-only anon ftp access - if your firewall allows ftp passthrough, that is.

Thanks for the information.

Done and done.

Web server works - I just copied our Web server's directory and dumped it into the correct directory on the SME server - works like a treat, no need to do funny setups. Am I glad for this...

FTP access for anonymous works, you can now download stuff, but not upload stuff, which is what I want.

However, when user FTP in, he starts in his home directory, and not in this primary ibay dir. (This is NOT the anonymous user, this is any user on the system)

1) What I want to do is to have the user go directly to the ibay without having to configure the FTP client, or having to use the cd command to change to the correct directory.

2) One user (not admin) must have read-write access for uploads to this ftp directory only, and nowhere else.

3) Final question. (I am using 6.5 RC1) When wanting to edit i-bay properties, you cannot edit the Primary i-bay's properties to allow

Code: [Select]

...group is Admin and that User access via file sharing or user ftp is set for Write=Group, Read=Everyone...
this set-up. Only by adding a new i-bay am I allowed to do so. Is there any way to change the properties of the primary i-bay?

Is this possible?

Thanks for your help so far.

Kind regards

Librarian

[cc_skavenger]

what you want is to chroot the user to the primary ibay, not his home directory.  In sme 6.0.1-01, I use this contrib:
http://www.ccskavenger.info/SME/contribs/ftp-chroot/dungog-proftpd-chroot-0.1-5.noarch.rpm

I do not know if this works in SME 6.5.

HTH