Problème de configuration de proftpd

Bonjour à tous !

J’essaye de monter un serveur proFTPd avec utilisateurs virtuels…
malheureusement j’obtiens l’erreur : ProFTPD warning: cannot start neither in standalone nor in inetd/xinetd mode. Check your configuration.
au reboot du daemon.

Voici les étapes :

mode inetd
création des utilisateurs virtuels pour le serveur FTP

cd /etc ftpasswd --passwd --name=herve --uid=1113 --gid=1113 --home=/var/www/www.monsite.fr --shell=/bin/false
par curiosité, on affiche le contenu du fichier

l’utilisateur n’a pas d’accès shell (/bin/false), si celui-ci n’est pas présent dans la liste des shells disponibles, on l’ajoute au fichier: /etc/shells

configuration du serveur FTP

[quote]# ajout du fichier /etc/ftpd.passwd
AuthUserFile /etc/ftpd.passwd

désactivation du fichier /etc/passwd pour n’utiliser que /etc/ftpd.passwd

AuthOrder mod_auth_file.c

restreint au répertoire racine tous les utilisateurs

DefaultRoot /var/www

désactivation de l’IPv6

UseIPv6 off[/quote]
reboot du service pour prendre en compte les changements :

message d’erreur :

Quelqu’un aurait une idée ?
Merci d’avance :confused:

help… :cry:

bonjour.

il devrait exister un fichier /etc/proftpd/proftpd.conf.Est il configuré?et “yum” semble indiquer que vous n’êtes pas sous debian.

Bonjour avram et merci de te pencher sur mon problème. :083

désolé pour le yum… j’ai effectivement Fedora en station de travail

Voici mon fichier proftpd.conf :

[code]#

/etc/proftpd/proftpd.conf – This is a basic ProFTPD configuration file.

To really apply changes, reload proftpd after modifications, if

it runs in daemon mode. It is not required in inetd/xinetd mode.

Includes DSO modules

Include /etc/proftpd/modules.conf

Set off to disable IPv6 support which is annoying on IPv4 only boxes.

UseIPv6 on

If set on you can experience a longer connection delay in many cases.

IdentLookups off

ServerName "Debian"
ServerType inetd
DeferWelcome off

MultilineRFC2228 on
DefaultServer on
ShowSymlinks on

TimeoutNoTransfer 600
TimeoutStalled 600
TimeoutIdle 1200

DisplayLogin welcome.msg
DisplayChdir .message true
ListOptions “-l”

DenyFilter *.*/

Use this to jail all users in their homes

DefaultRoot /var/www

Users require a valid shell listed in /etc/shells to login.

Use this directive to release that constrain.

RequireValidShell off

Port 21 is the standard FTP port.

Port 21

In some cases you have to specify passive ports range to by-pass

firewall limitations. Ephemeral ports can be used for that, but

feel free to use a more narrow range.

PassivePorts 49152 65534

If your host was NATted, this option is useful in order to

allow passive tranfers to work. You have to use your public

address and opening the passive ports used on your firewall as well.

MasqueradeAddress 1.2.3.4

This is useful for masquerading address with dynamic IPs:

refresh any configured MasqueradeAddress directives every 8 hours

# DynMasqRefresh 28800

To prevent DoS attacks, set the maximum number of child processes

to 30. If you need to allow more than 30 concurrent connections

at once, simply increase this value. Note that this ONLY works

in standalone mode, in inetd mode you should use an inetd server

that allows you to limit maximum number of processes per service

(such as xinetd)

MaxInstances 30

Set the user and group that the server normally runs at.

User proftpd
Group nogroup

Umask 022 is a good standard umask to prevent new files and dirs

(second parm) from being group and world writable.

Umask 022 022

Normally, we want files to be overwriteable.

AllowOverwrite on

Uncomment this if you are using NIS or LDAP via NSS to retrieve passwords:

PersistentPasswd off

This is required to use both PAM-based authentication and local passwords

AuthOrder mod_auth_pam.c* mod_auth_unix.c

Be warned: use of this directive impacts CPU average load!

Uncomment this if you like to see progress and transfer rate with ftpwho

in downloads. That is not needed for uploads rates.

UseSendFile off

TransferLog /var/log/proftpd/xferlog
SystemLog /var/log/proftpd/proftpd.log

Logging onto /var/log/lastlog is enabled but set to off by default

#UseLastlog on

In order to keep log file dates consistent after chroot, use timezone info

from /etc/localtime. If this is not set, and proftpd is configured to

chroot (e.g. DefaultRoot or ), it will use the non-daylight

savings timezone regardless of whether DST is in effect.

#SetEnv TZ :/etc/localtime

QuotaEngine off Ratios off

Delay engine reduces impact of the so-called Timing Attack described in

http://www.securityfocus.com/bid/11430/discuss

It is on by default.

DelayEngine on ControlsEngine off ControlsMaxClients 2 ControlsLog /var/log/proftpd/controls.log ControlsInterval 5 ControlsSocket /var/run/proftpd/proftpd.sock AdminControlsEngine off

Alternative authentication frameworks

#Include /etc/proftpd/ldap.conf
#Include /etc/proftpd/sql.conf

This is used for FTPS connections

#Include /etc/proftpd/tls.conf

Useful to keep VirtualHost/VirtualRoot directives separated

#Include /etc/proftpd/virtuals.conf

A basic anonymous configuration, no upload directories.

<Anonymous ~ftp>

User ftp

Group nogroup

# We want clients to be able to login with “anonymous” as well as “ftp”

UserAlias anonymous ftp

# Cosmetic changes, all files belongs to ftp user

DirFakeUser on ftp

DirFakeGroup on ftp

RequireValidShell off

# Limit the maximum number of anonymous logins

MaxClients 10

# We want ‘welcome.msg’ displayed at login, and ‘.message’ displayed

# in each newly chdired directory.

DisplayLogin welcome.msg

DisplayChdir .message

# Limit WRITE everywhere in the anonymous chroot

<Directory *>

DenyAll

# Uncomment this if you’re brave.

#

# # Umask 022 is a good standard umask to prevent new files and dirs

# # (second parm) from being group and world writable.

# Umask 022 022

#

# DenyAll

#

#

# AllowAll

#

#

Include other custom configuration files

#Include /etc/proftpd/conf.d/

#AuthUserFile /etc/ftpd.passwd[/code]
J’ai normalement juste changer DocumentRoot en /var/www
Les 2 dernières lignes sont commentées pour éliminer ces sources d’erreurs…

.

" User proftpd
Group nogroup "

le user proftpd et le groupe nogroup existent ils sur votre machine,et le user proftpd appartient il bien au groupe nogroup?
De plus je passerais le serveur en standalone.

le user proftpd existe contrairement au groupe nogroup.
Je souhaite utiliser des utilisateurs virtuels… pour le coup, dois-je commenter ?[code]# User proftpd

Group nogroup[/code]

Qu’entends tu par standalone ?

lisez déjà la doc de configuration de proftpd.conf(il y en a d’autres sur le net)
il faut ajouter l’utilisateur proftpd au groupe nogroup sinon le serveur ne se lancera pas et passer le serveur en standalone:

"ServerType standalone " dans proftpd.conf

quand j’utilisais proftpd je n’utilisais pas d’utilisateur virtuel donc je ne sais pas configurer cette option.

:041

tout fonctionne avec “ServerType standalone” !
j’avais lu dans un tuto :
“inetd” pour peu de connexions
“Independant” pour beaucoup de connexions

Merci avram !!! :023

si résolu mettre la flêche verte