41.7. Setting Up Guest Users

A guest FTP user is a real UNIX user who is limited by WU-FTPD to a certain directory, just as anonymous clients are restricted. They still have full privileges within that directory, though, including the rights to upload files, rename, and chmod files. Limiting a user to guest access can be useful if you want to prevent him from seeing parts of your filesystem outside his home directory or some parent directory, like /home.

Every user who is designated as a guest by the FTP server configuration can have a different root directory, or some can be the same. The chosen root directories, however, must be set up in the same way as the anonymous FTP root is—with bin, lib, and etc subdirectories containing all the programs and files needed by WU-FTPD. You can just copy those directories across from the anonymous root, though, so the set up process is not that hard.

To set up a user as a guest, his home directory must be specially modified. To do this using Webmin, follow these steps:

1.
Go to the Users and Groups module (covered in Chapter 4) and click on the name of the user that you want to restrict.

2.
Change his home directory to guestroot/./homedir, in which guestroot is the root directory that you have prepared, and homedir is a subdirectory under it. If you are using /home as the root, /home/./jcameron could be the directory for the user jcameron. This special /./ entry in the path tells WU-FTPD where the root is, but should not confuse other programs.

3.
Click the Save button at the bottom of the page. Webmin will move his home directory to the new location, if necessary.

Of course, you can specify such a home when creating a new user as well. This is only the first step, though. To configure WU-FTPD to treat certain users as guests, you will need to follow these steps:

1.
In the WU-FTPD Server module, click on the Users and Classes icon to bring up the form shown in Figure 41.2.

2.
In the Unix users and UIDs to treat as guests, enter a space-separated list of usernames, UIDs, or UID ranges (like %1000-2000 or %5000-) of users to be designated as guests.

You can also enter a list of group names, IDs, and ID ranges in the Unix groups and GIDs to treat as guests field to have all their primary members treated as guests, as well.

3.
To stop some users from being converted to guests even if they are in the lists or ranges set in Step 2, fill in the Unix users and UIDs not to treat as guests and Unix groups and GIDs not to treat as guests fields. This can be useful if you want to make everyone a guest except a few trusted users.

4.
Click the Save button at the bottom of the page to activate the new guest designations.

If a user has been configured as a guest but does not have /./ in his home directory, he will not be restricted to any root directory.

..................Content has been hidden....................

You can't read the all page of ebook, please click here login for view all page.
Reset
3.138.105.89