RH8 vsftp error 553 could not create file

[paleogryph]

RH8 running vsftp won't allow a user to put files in /var/

http://www/html,

gets "error 553 could not create file". He can see the files/dirs though. The user can put files in his home dir. User is part of the group "webadmin". /var/

http://www/html's

group ownership is that group, "webadmin". Perms for /var/

http://www/html

are 755, have tried 775 also, same results.

Any ideas?
thanks


>Think for yourself<
...or someone else will do it for you.

 

[thedaver]

Can he save files using a local shell session? There are tons of parms available in vsftpd's config file that can mandate against writing files even if the user has appropriate local access.

Check local first, then check vsftpd.conf

Surfinbox.com Business Internet Services - National Dialup, DSL, T-1 and more.

http://www.surfinbox.com/business/

 

[paleogryph]

No, it appears only root can write to this dir and subdirs. User can only write to his $HOME. Does this user need to have the same UID as root to fix this? That seems kind of extreme.


>Think for yourself<
...or someone else will do it for you.

 

[thedaver]

vsftpd ENFORCES the rights on the local file system and does so with the identity of the USER that is signed in through FTP NOT THE DAEMON user running the FTP service.

Thus, user FRED signs into FTPD which is running locally as user 'FTP'. FRED's session is restricted to the rights that FRED had on the directories PLUS any additional restrictions that vsftpd.conf holds.

Therefore, vsftpd will NOT make file access less restrictive. Only MORE restrictive.

You need to make a change. You COULD change the rights to the directory in question. It's probably not appropriate to go adding people to root's groups or setuid. In fact, that's a very bad idea.

Finally, NO this isn't extreme, this is the way Unix, Linux, and vsftpd are designed to work. You need to properly set the file and directory access priviliges on the system and the applications will follow along.

Therefore, don't be surprised that a directory exclusive to 'root' doesn't allow other people to mess with it. That's by design.

Surfinbox.com Business Internet Services - National Dialup, DSL, T-1 and more.

http://www.surfinbox.com/business/