LinuxSir.cn,穿越时空的Linuxsir!

 找回密码
 注册
搜索
热搜: shell linux mysql
查看: 620|回复: 1

proftpd网站上文档第2个例子

[复制链接]
发表于 2005-11-6 00:08:06 | 显示全部楼层 |阅读模式
这个例子中有三个不同类型的匿名用户,主要是后面两个不知道怎么做,能写个操作步骤吗?

原文内容如下:
# This sample configuration file illustrates configuring two
# anonymous directories, and a guest (same thing as anonymous but
# requires a valid password to login)

ServerName                        "roFTPD Anonymous Server"
ServerType                        standalone

# Port 21 is the standard FTP port.
Port                                21

# If you don't want normal users logging in at all, uncomment this
# next section
#<Limit LOGIN>
#  DenyAll
#</Limit>

# Set the user and group that the server normally runs at.
User                                nobody
Group                                nogroup

# To prevent DoS attacks, set the maximum number of child processes
# to 30.  If you need to allow more than 30 concurrent connections
# at once, simply increase this value.  Note that this ONLY works
# in standalone mode, in inetd mode you should use an inetd server
# that allows you to limit maximum number of processes per service
# (such as xinetd)
MaxInstances                    30

# Set the maximum number of seconds a data connection is allowed
# to "stall" before being aborted.
TimeoutStalled                        300

# We want 'welcome.msg' displayed at login, and '.message' displayed
# in each newly chdired directory.
DisplayLogin                        welcome.msg
DisplayFirstChdir                .message

# Our "basic" anonymous configuration, including a single
# upload directory ("uploads")
<Anonymous ~ftp>

  # Allow logins if they are disabled above.
  <Limit LOGIN>
    AllowAll
  </Limit>

  # Maximum clients with message
  MaxClients                        5 "Sorry, max %m users -- try again later"

  User                                ftp
  Group                                ftp
  # We want clients to be able to login with "anonymous" as well as "ftp"
  UserAlias                        anonymous ftp

  # Limit WRITE everywhere in the anonymous chroot
  <Limit WRITE>
    DenyAll
  </Limit>

  # An upload directory that allows storing files but not retrieving
  # or creating directories.
  <Directory uploads/*>
    <Limit READ>
      DenyAll
    </Limit>

    <Limit STOR>
      AllowAll
    </Limit>
  </Directory>
</Anonymous>

# A second anonymous ftp section.  Users can login as "private".  Here
# we hide files owned by root from being manipulated in any way.

<Anonymous /usr/local/private>
  User                                bobf
  Group                                users
  UserAlias                        private bobf
  UserAlias                        engineering bobf

  # Deny access from *.evil.net and *.otherevil.net, but allow
  # all others.
  <Limit LOGIN>
    Order                        deny,allow
    Deny                         from .evil.net, .otherevil.net
    Allow                        from all
  </Limit>

  # We want all uploaded files to be owned by 'engdept' group and
  # group writable.
  GroupOwner                        engdept
  Umask                                006

  # Hide all files owned by user 'root'
  HideUser                        root

  <Limit WRITE>
    DenyAll
  </Limit>

  # Disallow clients from any access to hidden files.
  <Limit READ DIRS>
    IgnoreHidden                        on
  </Limit>

  # Permit uploading and creation of new directories in
  # submissions/public

  <Directory submissions/public>
    <Limit READ>
      DenyAll
      IgnoreHidden                        on
    </Limit>

    <Limit STOR MKD RMD XMKD XRMD>
      AllowAll
      IgnoreHidden                        on
    </Limit>
  </Directory>
</Anonymous>

# The last anonymous example creates a "guest" account, which clients
# can authenticate to only if they know the user's password.

<Anonymous ~guest>
  User                                guest
  Group                                nobody
  AnonRequirePassword                on

  <Limit LOGIN>
    AllowAll
  </Limit>

  # Deny write access from all except trusted hosts.
  <Limit WRITE>
    Order                        allow, deny
    Allow                        from 10.0.0.
    Deny                        from all
  </Limit>
</Anonymous>
 楼主| 发表于 2005-11-6 18:50:51 | 显示全部楼层
自己说说吧,不知道是什么原因,开发者为何不给出直接可用的例子,上面至少应加上下面一行:
DefaultServer        on
才能启动服务。
在Anonymous区块必须有下面一行:
RequireValidShell        off
才能让anonymous和guest之类的匿名用户登录。
当然,其它的什么新建目录、用户、权限之类的就不说了。
回复 支持 反对

使用道具 举报

您需要登录后才可以回帖 登录 | 注册

本版积分规则

快速回复 返回顶部 返回列表