PDA

View Full Version : Groups permissions


wooolF[RM]
11-01-2003, 05:13 AM
Mmkay, for 3rd day I'm trying to figure out how to get this to work:

I have 3 groups:
SiTEOP : can upload anywhere
TRADER : can upload anywhere but can't delete folders/files from any folder except under /UPLOAD (ONLY their own folders/files)
LEECH : can't upload anywhere except under /UPLOAD and can't delete folder/files from any folder except under /UPLOAD (ONLY their own folders/files)

I have chmodded all folders on FTP to 777
User flags:
SiTEOP :1THL
TRADER : 3U
LEECH : 3F

in my ioFTPD.ini I have this :Upload = /UPLOAD/* * Everybody can upload here
Upload = * !=LEECH * Leecher can't upload anywhere, but above
Resume = * *
Download = * *
MakeDir = /UPLOAD/* Everybody can create dirs here
MakeDir = * !=LEECH * Leecher can't make a dir anywhere but in upload
RemoveOwnDir = * *
RemoveDir = * 1VM
Rename = * 1VM
RenameOwn = * *
Overwrite = * 1VM
Delete = * 1VM
DeleteOwn = * *
..skipped..Right now it works so anyone (except SiTEOPs) can upload only under /UPLOAD... SiTEOPs are ok, their permissions are good enough...
I have tried to figure those perms for 3 days now and finally gave up :(
I would be very apreciatted if anyone could help me, thanx

Mouton
11-01-2003, 09:21 AM
# Everyone can upload in /UPLOAD/ and delete their own stuff
MakeDir = /UPLOAD/* *
Upload = /UPLOAD/* *
Resume = /UPLOAD/* *
RemoveOwnDir = /UPLOAD/* *
DeleteOwn = /UPLOAD/* *

# LEECH can't upload in any other dir
MakeDir = * !=LEECH *
Upload = * !=LEECH *
Resume = * !=LEECH *

# Nobody can delete their files outside /UPLOAD/
RemoveOwnDir = * !*
DeleteOwn = * !*

wooolF[RM]
11-01-2003, 10:22 AM
I have tried your settings and it looks like this now in my ioftpd.ini :###
# Detailed permissions for directories
#
# priviledge = <virtual path> <rights>
#
# Everyone can upload in /UPLOAD/ and delete their own stuff
MakeDir = /UPLOAD/* *
Upload = /UPLOAD/* *
Resume = /UPLOAD/* *
RemoveOwnDir = /UPLOAD/* *
DeleteOwn = /UPLOAD/* *
# LEECH can't upload in any other dir
MakeDir = * !=LEECH *
Upload = * !=LEECH *
Resume = * !=LEECH *
# Nobody can delete their files outside /UPLOAD/
RemoveOwnDir = * !*
DeleteOwn = * !*
RemoveDir = * 1VM
Rename = * 1VM
RenameOwn = * *
Overwrite = * 1VM
Delete = * 1VM
NoStats = * !*
ShowActivity = * *And the first problem I got was people in both groups (LEECH and TRADER) could not download any files... O_O
So I was forced to paste my old settings and rehash cfg :( I haven't tried if upload to other folders worked or not...
I don't know, but I really find it a bit confusing. If anyone can help in this subject, please do :) Thank you in advance :)

Harm
11-01-2003, 10:28 AM
Mouton has posted only the lines you had to change.
You need to add those as well :


Download = * *
Delete = * 1VM
Overwrite = * VM

wooolF[RM]
11-01-2003, 10:30 AM
###
# Detailed permissions for directories
#
# priviledge = <virtual path> <rights>
#
# Everyone can upload in /UPLOAD/ and delete their own stuff
MakeDir = /UPLOAD/* *
Upload = /UPLOAD/* *
Resume = /UPLOAD/* *
RemoveOwnDir = /UPLOAD/* *
DeleteOwn = /UPLOAD/* *
# LEECH can't upload in any other dir
MakeDir = * !=LEECH *
Upload = * !=LEECH *
Resume = * !=LEECH *
# Nobody can delete their files outside /UPLOAD/
RemoveOwnDir = * !*
DeleteOwn = * !*
Download = * *
RemoveDir = * 1VM
Rename = * 1VM
RenameOwn = * *
Overwrite = * 1VM
Delete = * 1VM
NoStats = * !*
ShowActivity = * *

Lemme try it :x

wooolF[RM]
11-01-2003, 10:52 AM
[L] MKD blaaaaaaaaaaaaaaaaa
[L] 550 blaaaaaaaaaaaaaaaaa: Permission denied.

nobody can make any folders outside UPLOAD... even SiTEOP group... :x

I'm totally lost :x

can it have something to do with the message I'm getting from time to time in the IRC chan:
-:: xxx error ::- 11-01-2003 16:51:12 AcceptEx() failed with error: 64

Mouton
11-01-2003, 11:00 AM
MakeDir = * !=LEECH *

That rule allows MKD anywhere, for everyone except LEECH group users.

If you get permission denied, you didn't rehash properly or your chmod isn't correct.

wooolF[RM]
11-01-2003, 11:15 AM
17:12:25 > SITE CONFIG SHOW VFS
17:12:26 200- ### [VFS]
17:12:26 200- 000: ###
17:12:26 200- 001: # Default attributes for files & directories
17:12:26 200- 002: #
17:12:26 200- 003: # Required Parameters: <filemode> <owner uid>:<owner gid>
17:12:26 200- 004: #
17:12:26 200- 005:
17:12:26 200- 006: Default_Directory_Attributes = 755 0:0
17:12:26 200- 007: Default_File_Attributes = 644 0:0
17:12:26 200- 008:
17:12:26 200- 009:
17:12:26 200- 010: ###
17:12:26 200- 011: # Command specific rules
17:12:26 200- 012: #
17:12:26 200- 013: Modify_Stats_On_Delete = False
17:12:26 200- 014:
17:12:26 200- 015: ###
17:12:26 200- 016: # Detailed permissions for directories
17:12:26 200- 017: #
17:12:26 200- 018: # priviledge = <virtual path> <rights>
17:12:26 200- 019: #
17:12:26 200- 020: # Everyone can upload in /UPLOAD/ and delete their own stuff
17:12:26 200- 021: MakeDir = /UPLOAD/* *
17:12:26 200- 022: Upload = /UPLOAD/* *
17:12:26 200- 023: Resume = /UPLOAD/* *
17:12:26 200- 024: RemoveOwnDir = /UPLOAD/* *
17:12:26 200- 025: DeleteOwn = /UPLOAD/* *
17:12:26 200- 026: # LEECH can't upload in any other dir
17:12:26 200- 027: MakeDir = * !=LEECH *
17:12:26 200- 028: Upload = * !=LEECH *
17:12:26 200- 029: Resume = * !=LEECH *
17:12:26 200- 030: # Nobody can delete their files outside /UPLOAD/
17:12:26 200- 031: RemoveOwnDir = * !*
17:12:26 200- 032: DeleteOwn = * !*
17:12:26 200- 033: Download = * *
17:12:26 200- 034: RemoveDir = * 1VM
17:12:26 200- 035: Rename = * 1VM
17:12:26 200- 036: RenameOwn = * *
17:12:26 200- 037: Overwrite = * 1VM
17:12:26 200- 038: Delete = * 1VM
17:12:26 200- 039: NoStats = * !*
17:12:26 200- 040: ShowActivity = * *
17:12:26 200- 041:
17:12:26 200 CONFIG command successful.
17:13:36 > CWD APPZ
17:13:36 250 CWD command successful.
17:13:47 > MKD TEST
17:13:47 257 "TEST" created.
17:14:06 > RMD TEST
17:14:06 250 RMD command successful.

That was done from ioGUI by ioFTPD@MASTER (1MTHL)
as u see my config is rehashed :x

wooolF[RM]
11-01-2003, 11:24 AM
17:21:29 +-------------------------------+
17:21:29 | ADDUSER |
17:21:29 +-------------------------------+
17:21:29 > gadduser TRADER Mouton Mouton *
17:21:29 200 User 'Mouton' successfully added.
17:21:29 > site change Mouton credits 0
17:21:29 200- Mouton (Account modified)
17:21:29 200 Command successful.
17:21:29 > site change Mouton tagline bla
17:21:29 200- Mouton (Account modified)
17:21:29 200 Command successful.
17:21:29 > site change Mouton logins 5 ftp
17:21:29 200- Mouton (Account modified)
17:21:29 200 Command successful.
17:21:29 > site change Mouton logins 0 telnet
17:21:30 200- Mouton (Account modified)
17:21:30 200 Command successful.
17:21:30 > site change Mouton logins 0 http
17:21:30 200- Mouton (Account modified)
17:21:30 200 Command successful.
17:21:30 > site change Mouton ratio 0
17:21:30 200- Mouton (Account modified)
17:21:30 200 Command successful.
17:21:30 > site change Mouton flags 3
17:21:30 200- Mouton (Account modified)
17:21:30 200 Command successful.
17:21:30 > site change Mouton speedlimit 0 0
17:21:30 200- Mouton (Account modified)
17:21:30 200 Command successful.
17:21:30 +-------------------------------+

[17:20:02] 230 User Mouton logged in.

[17:20:26] CWD APPZ
[17:20:27] 250 CWD command successful.
[17:20:27] PWD
[17:20:27] 257 "/APPZ/" is current directory.

[17:20:50] MKD TEST
[17:20:50] 550 TEST: Permission denied.
[17:20:50] PWD
[17:20:51] 257 "/APPZ/" is current directory.


RAW DIR

drwxrwxrwx 21 ioFTPD MASTER 17950 Jan 01 00:00 UPLOAD
drwxrwxrwx 16 ioFTPD MASTER 0 Jan 01 00:00 APPZ

Mouton
11-01-2003, 11:27 AM
17:12:26 200- 006: Default_Directory_Attributes = 755 0:0
17:12:26 200- 007: Default_File_Attributes = 644 0:0

This should be 777, not 755.
Told you that already.
Edit your ioftpd.ini and change that.

What's in your GroupIdTable ?

wooolF[RM]
11-01-2003, 11:37 AM
Originally posted by Mouton
This should be 777.
Told you that already.
Edit your ioftpd.ini and change that. I don't get it, sorry :(

the file u've asked about :

LEECH:4:STANDARD
MASTER:0:STANDARD
NUKER:2:STANDARD
SiTEOP:1:STANDARD
TRADER:3:STANDARD

Mouton
11-01-2003, 11:37 AM
open ioftpd.ini in notepad

find the line

change it!

Mouton
11-01-2003, 11:37 AM
http://www.ioftpd.com/documentation/10-userfiles.php

red bold text

wooolF[RM]
11-01-2003, 11:43 AM
Edited ioFTPD.ini

###
# Default attributes for files & directories
#
# Required Parameters: <filemode> <owner uid>:<owner gid>
#
Default_Directory_Attributes = 777 0:0
Default_File_Attributes = 644 0:0

Rehashed...

[17:39:37] CWD APPZ
[17:39:37] 250 CWD command successful.
[17:39:37] PWD
[17:39:37] 257 "/APPZ/" is current directory.
[17:39:37] List (cached)
[17:39:37] List Complete.
[17:39:54] MKD OMG.IT.WORKS.OR.DOES.IT
[17:39:55] 550 OMG.IT.WORKS.OR.DOES.IT: Permission denied.

Restarted server...

now I get error when I start it up :eek:

geez man... :( :( :( very :confused:

wooolF[RM]
11-01-2003, 11:54 AM
Edited GroupIDTable to:

LEECH:4:STANDARD
MASTER:0:STANDARD
NoGroup:1:STANDARD
NUKER:3:STANDARD
SiTEOP:2:STANDARD
TRADER:4:STANDARD

still can't start ioFTPd :(

Mouton
11-01-2003, 12:00 PM
can't start io = config error.
u probably made a typo when u changed something.

wooolF[RM]
11-01-2003, 12:19 PM
fixed ... all works :x but damn... after 3 days... :eek:

should say thanx to al that helped :) thanx guys and sorry for so many qs... beginning is always fscked up :p