Linux – PROFTPD – Why permissions denied

ftplinuxproftpd

I have installed proftpd on my server, I tried to connect to the server but I get LOGIN INCORRECT. I have seen the log and I found this:

Apr 26 13:02:39 vmi**** proftpd[16738] vmi*****.*********.com (*********[::ffff:...*]): notice: unable to use '~/' [resolved to '/home/lighttpd/vhosts/mywebsite.com/web/']: Permission denied

The permission of /home/lighttpd/vhosts/mywebsite/web are:

drwxr-x--- 2 mywebsite.com mywebsite.com 4096 2011-04-26 12:04 web

PROFTPD runs with proftpd:proftpd permissions.

TO solve this I have added proftpd user to mywebsite.com group.

Take a look at /etc/group

mywebsite.com:x:1003:proftpd

So I have added proftpd to the group and set RW permissions to /web directory.

I don't understand why I get PERMISSION DENIED.

Best Answer

Every directory in the full path has to have x (execute) permission for the mywebsite.com user, otherwise he'll not be able to cwd into it. So you have to check permissions of:

/home 
/home/lighttpd
/home/lighttpd/vhosts
/home/lighttpd/vhosts/mywebsite
/home/lighttpd/vhosts/mywebsite/web

not only /home/lighttpd/vhosts/mywebsite/web

Additionally /home/lighttpd/vhosts/mywebsite/web should have r permission set to allow read the directory, i.e. list its content.

Related Solutions

Linux – How to Set Up Permissions for the WWW Folder

After more research it seems like another (possibly better way) to answer this would be to setup the www folder like so.

sudo usermod -a -G developer user1 (add each user to developer group)
sudo chgrp -R developer /var/www/site.com/ so that developers can work in there
sudo chmod -R 2774 /var/www/site.com/ so that only developers can create/edit files (other/world can read)
sudo chgrp -R www-data /var/www/site.com/uploads so that www-data (apache/nginx) can create uploads.

Since git runs as whatever user is calling it, then as long as the user is in the "developer" group they should be able to create folders, edit PHP files, and manage the git repository.

Note: In step (3): '2' in 2774 means to 'set Group ID' for the directory. This causes new files and sub directories created within it to inherit the group ID of the parent directory (instead of the primary group of the user) Reference: http://en.wikipedia.org/wiki/Setuid#setuid_and_setgid_on_directories

Mysql – ProFTPd, MySQL, virtual users and permissions

You will have to give your proftpd virtual users ownership of their files and directories just like you would a real user. You can do this with chown. As the users aren't system users you will have to use the numeric UID:GID e.g. if username is UID 10001 and GID 1111 (from the mysql database) then

chown  10001:1111 /var/www/vhosts/sites/username
chown  -R 10001:1111 /var/www/vhosts/sites/username

should give username control over their own files. Ensure that www-data user has suitable read only access to the file & directories e.g. give world r-x to directories and r-- to files.

If you set the

DefaultRoot  ~

directive then the users will be confined within their own directory tree.

Best Answer

Related Solutions

Linux – How to Set Up Permissions for the WWW Folder

Mysql – ProFTPd, MySQL, virtual users and permissions

Related Topic