SOLVED proftpd "unable to use '~/'"

Status
Not open for further replies.

EsTaF

Contributor
Joined
Sep 20, 2013
Messages
163
Hi all.
Can somebody help me with next one.

1. FreeNAS-9.1.1-RELEASE-x64 (a752d35)
2. user win (win:$6$xxxxx.../xxx....:1002:1002::0:
0:win:/mnt/ess/media/win:/sbin/nologin)

2. ls -l /mnt/ess/media/ | grep win
drwxrwxrwx 20 nobody wheel 20 Nov 7 12:50 win/

getfacl /mnt/ess/media/win/
# file: /mnt/ess/media/win/
# owner: iron
# group: wheel
user:win:rwxpDdaARWcCos:fd----:allow
user:nobody:rwxpDdaARWcCos:fd----:allow
user:921:rwxpDdaARWcCos:fd----:allow
user:iron:rwx--d--------:fd----:allow
owner@:rwxp--aARWcCos:------:allow
group@:------a-R-c--s:------:allow
everyone@:------a-R-c--s:------:allow

3. passwd win
insert 111 one twice

4. from other host:
lftp ftp://win@somehost
password: < insert 111 one
lftp win@somehost:~> ls
ls: ….: 530 Login incorrect.

5. Nov 20 11:53:48 nia proftpd[13457]: 127.0.0.1 (192.168.1.1[192.168.1.1]) - notice: unable to use '~/' [resolved to '/mnt/ess/media/win/']: Permission denied
Nov 20 11:53:48 nia proftpd[13457]: 127.0.0.1 (192.168.1.1[192.168.1.1]) - chroot to '~/' failed for user 'win': Operation not permitted
Nov 20 11:53:48 nia proftpd[13457]: 127.0.0.1 (192.168.1.1[192.168.1.1]) - error: unable to set default root directory

from other hosts have a similar problem.
If I create another user with ftp group and needed home folder I have a similar problem
The problem beginning today. before it I haven't a such problem about a full year.

what is it?
 

EsTaF

Contributor
Joined
Sep 20, 2013
Messages
163
Solved.
chmod ugo+rx /mnt/ess/media

rechange permissions..
Code:
find /mnt/ess/media/ -type d -print0 | xargs -0 chown iron:wheel
find /mnt/ess/media/ -type f -print0 | xargs -0 chown iron:wheel
find /mnt/ess/media/ -type d -print0 | xargs -0 chmod 0700
find /mnt/ess/media/ -type f -print0 | xargs -0 chmod 0600
chmod ugo+rx /mnt/ess/media
find /mnt/ess/media/ -type d | setfacl -b -
find /mnt/ess/media/ -type f | setfacl -b -
find /mnt/ess/media/ -type d | setfacl -m u:nobody:full_set:fd:allow,u:921:full_set:fd:allow,u:iron:rwxd:fd:allow -
find /mnt/ess/media/ -type f | setfacl -m u:nobody:full_set:allow,u:921:full_set:allow,u:iron:rwxd:allow -
find /mnt/ess/media/win -type d | setfacl -m u:win:rxd:fd:allow -
find /mnt/ess/media/win -type f | setfacl -m u:win:rxd:allow -
find /mnt/ess/media/Music -type d | setfacl -m u:music:rxd:fd:allow -
find /mnt/ess/media/Music -type f | setfacl -m u:music:rxd:allow -
find /mnt/ess/media/in -type d | setfacl -m u:in:full_set:fd:allow -
find /mnt/ess/media/in -type f | setfacl -m u:in:full_set:allow -p/code]
 
Status
Not open for further replies.
Top