proftpd.conf配置实例(proftpd+mysql用户认证+quota磁盘限额)

2008年12月23日 由 月影鹏鹏 留言 »

# This is a basic ProFTPD configuration file (rename it to
# ‘proftpd.conf’ for actual use.  It establishes a single server
#   来自月影鹏鹏 http://jacky.scanmon.com

# and a single anonymous login.  It assumes that you have a user/group
# “nobody” and “ftp” for normal operation and anon.

ServerName            “ProFTPD Default Installation”
ServerType            standalone
DefaultServer            on

# Port 21 is the standard FTP port.
Port                21

# Umask 022 is a good standard umask to prevent new dirs and files
# from being group and world writable.
Umask                022

# To prevent DoS attacks, set the maximum number of child processes
# to 30.  If you need to allow more than 30 concurrent connections
# at once, simply increase this value.  Note that this ONLY works
# in standalone mode, in inetd mode you should use an inetd server
# that allows you to limit maximum number of processes per service
# (such as xinetd).
MaxInstances            30

# Set the user and group under which the server will run.
User                nobody
Group                nogroup

# To cause every FTP user to be “jailed” (chrooted) into their home
# directory, uncomment this line.
#DefaultRoot ~

# Normally, we want files to be overwriteable.
AllowOverwrite        on

#设置MySQL认证:
#数据库联接的信息,DatabaseName是数据库名, HostName是主机名,
#Port是端口号,UserName是连接数据库的用户名,Password是密码。
SQLConnectInfo FTP@localhost:3306 ftp 123456

#数据库认证的类型:
SQLAuthTypes Backend Plaintext

#指定用来做用户认证的表的有关信息。(“FTPUSERS”和”FTPGRPS”是数据表名字,等一会而在下面建立)
SQLUserInfo  FTPUSERS  userid passwd uid gid home shell

#SQLGroupInfo FTPGRPS groupname gid members

#设置如果shell为空时允许用户登录:
RequireValidShell off

#数据库的鉴别
#SQLAuthenticate users groups usersetfast groupsetfast
SQLAuthenticate users

#如果home目录不存在,则系统会为根据它的home项新建一个目录:
SQLHomedirOnDemand on

#磁盘限额部分
QuotaDirectoryTally on

#磁盘限额单位 b”|”Kb”|”Mb”|”Gb”
QuotaDisplayUnits “Kb”

QuotaEngine on

#磁盘限额日志记录
QuotaLog “你的LOG路径”

# 打开磁盘限额信息,当登陆FTP帐户后,使用命令 “quote SITE QUOTA” 后可显示当前用户的磁盘限额
QuotaShowQuotas on

SQLNamedQuery get-quota-limit SELECT “name, quota_type, per_session, limit_type, bytes_in_avail, bytes_out_avail, bytes_xfer_avail, files_in_avail, files_out_avail, files_xfer_avail FROM quotalimits WHERE name = ‘%{0}’ AND quota_type = ‘%{1}’”

SQLNamedQuery get-quota-tally SELECT “name, quota_type, bytes_in_used, bytes_out_used, bytes_xfer_used, files_in_used, files_out_used, files_xfer_used FROM quotatallies  WHERE name = ‘%{0}’ AND quota_type = ‘%{1}’”

SQLNamedQuery update-quota-tally UPDATE “bytes_in_used = bytes_in_used + %{0}, bytes_out_used = bytes_out_used + %{1}, bytes_xfer_used = bytes_xfer_used + %{2}, files_in_used = files_in_used + %{3}, files_out_used = files_out_used + %{4}, files_xfer_used = files_xfer_used + %{5} WHERE name = ‘%{6}’ AND quota_type = ‘%{7}’” quotatallies

SQLNamedQuery insert-quota-tally INSERT “%{0}, %{1}, %{2}, %{3}, %{4}, %{5}, %{6}, %{7}” quotatallies

QuotaLimitTable sql:/get-quota-limit
QuotaTallyTable sql:/get-quota-tally/update-quota-tally/insert-quota-tally

# Bar use of SITE CHMOD by default
<Limit SITE_CHMOD>
DenyAll
</Limit>

# A basic anonymous configuration, no upload directories.  If you do not
# want anonymous users, simply delete this entire <Anonymous> section.
<Anonymous ~ftp>
User                ftp
Group                ftp

# We want clients to be able to login with “anonymous” as well as “ftp”
UserAlias            anonymous ftp

# Limit the maximum number of anonymous logins
MaxClients            10

# We want ‘welcome.msg’ displayed at login, and ‘.message’ displayed
# in each newly chdired directory.
DisplayLogin            welcome.msg
DisplayFirstChdir        .message

# Limit WRITE everywhere in the anonymous chroot
<Limit WRITE>
DenyAll
</Limit>
</Anonymous>
ExtendedLog /usr/local/proftpd/var/ftp.log

广告位

留言