How Can I Restrict VSFTPD to a Particular Local Group?

Posted by Aaron Copley on Server Fault See other posts from Server Fault or by Aaron Copley
Published on 2011-02-22T23:24:26Z Indexed on 2011/02/22 23:26 UTC
Read the original article Hit count: 420

Filed under:

pam

|

vsftpd

|

groups

|

access-control

I'd like to control VSFTPD access by adding users to a group such that only members of the defined group can access the FTP services. I am thinking I can do this by modifying /etc/pam.d/vsftpd, but am not sure how to get started. Or is this only for virtual users in VSFTPD?

I am aware of user_list and this does not seem to support groups. This doesn't provide the function I am looking for which is described above. If I am mistaken though this would be great.

Thanks,
Aaron

© Server Fault or respective owner

Related posts about pam

Likewise DomainJoin hangs on Finishing krb5.conf configuration

as seen on Server Fault - Search for 'Server Fault'
Hello, I have a problem when joining a CentOS release 5.4 (Final) x64 machine to the domain after running domainjoin-cli --loglevel info --log . join domain.local password I obtain the following, which seems to hang on "20100428112821:INFO:Finishing krb5.conf configuration" 20100428112817:INFO:Domainjoin… >>> More
Using PAM and vsftpd without root access

as seen on Server Fault - Search for 'Server Fault'
I'm trying to set up a few vsftpd instances on a machine that I have no root access to. The authentication should be done through PAM with pam_listfile, like this: pam_listfile.so item=group sense=allow file=/path/filename onerr=fail I can ask the administrator to set up a PAM service for me and… >>> More
Decoding PAM configuration files ...

as seen on Server Fault - Search for 'Server Fault'
Could someone point me to some (recent) documentation that would help me with decoding PAM configuration file lines like this: auth [success=2 default=ignore] pam_unix.so nullok_secure auth [success=1 default=ignore] pam_winbind.so krb5_auth krb5_ccache_type=FILE cached_login try_first_pass I'm… >>> More
Requiring SSH-key Login Via PAM From Specific IP Ranges

as seen on Server Fault - Search for 'Server Fault'
I need to be able to access my server (Ubuntu 8.04 LTS) from remote sites, but I'd like to worry a bit less about password complexity. Thus, I'd like to require that SSH keys be used for login instead of name/password. However, I still have a lot to learn about security, and having already badly… >>> More
Suggest methods for testing changes to "pam.d/common-*" files

as seen on Server Fault - Search for 'Server Fault'
How do I test the changes to the pam.d configuration files: Do I need to restart the PAM service to test the changes? Should I go through every service listed in the /etc/pam.d/ directory? I'm about to make changes to the pam.d/common-* files in an effort to put an Ubuntu box into an active… >>> More

Related posts about vsftpd

sftpd: No available certificate or key corresponds to the SSL cipher suites which are enabled?

as seen on Super User - Search for 'Super User'
Hello. I'm trying to setup vsftpd on Fedora 12. I need to require use of FTPS, and for now need to use a self-signed SSL certificate. I managed to get the vsftpd service running and to connect as my user. I can list the home directory, but as soon as I try to list another directory, download or… >>> More
XUbuntu vsftpd couldnt restart

as seen on Super User - Search for 'Super User'
# sudo /etc/init.d/vsftpd restart Rather than invoking init scripts through /etc/init.d, use the service(8) utility, e.g. service vsftpd restart Since the script you are attempting to invoke has been converted to an Upstart job, you may also use the stop(8) and then start(8) utilities, e.g. stop… >>> More
Can't Get Virtual Users Setup in VSFTPD -Tried Everything

as seen on Server Fault - Search for 'Server Fault'
Have Ubuntu 11.10 with vsftpd installed and working. Can not get virtual users setup at all? Vsftpd will allow main Ubuntu owner account to login, but nothing else? I've followed several tutorials on adding virtual users, but nothing works? I just need to add 2 virtual users and have them be able… >>> More
Trouble connecting to vsftpd on ubuntu server

as seen on Server Fault - Search for 'Server Fault'
I have installed Ubuntu Server 10.10 and I am using it to host a domain that I have. I am trying to set up FTP for the server, but I am running into some problems. I have successfully installed vsFTPd and I have opened up ports 20, 21 on my firewall. In my vsFTPd configuration, I have enabled SSL… >>> More
vsftpd restrict local users to home and group directories

as seen on Server Fault - Search for 'Server Fault'
i've got vsftpd install on an ubuntu server 9.10 i can use chroot to restrict users to their own home directories but i also want to give them access to a group shared folder for example, users foo1 and foo2 are local users in the group foos i want foo1 to have access to /home/foo1 and /svr/foos… >>> More