--===============0260072702==
Content-Type: multipart/alternative;
boundary="=====================_309785859==.ALT"

--=====================_309785859==.ALT
Content-Type: text/plain; charset="us-ascii"; format=flowed

At 09:53 PM 9/13/2006, TJ Saunders wrote:

> > Now, if you start ProFTPD under 'root', and you don't have "User" and
> > "Group" statements in the server context, the server continues to run
> > under 'root'.
> >
> > And 'root' can do anything, right? But, not here? Huh??

>
>It's possible that in that situation, assuming you're running on Linux,
>you are encountering mod_cap's restrictions:
>
> http://www.castaglia.org/proftpd/modules/mod_cap.html
>
>To test this hypothesis, you could add:
>
>
> CapabilitiesEngine off
>

>
>to your proftpd.conf.


Errm, I don't think I've got that enabled. I'll get to test tomorrow
(thanks for the suggestion) but wouldn't "-l" show mod_cap?
/usr/local/sbin/proftpd -l
Compiled-in modules: (and sorted)
mod_core.c mod_auth.c
mod_xfer.c mod_auth_file.c
mod_auth_unix.c mod_auth_pam.c
mod_auth_file.c mod_auth_unix.c
mod_auth.c mod_ban.c
mod_ls.c mod_conf_sql.c
mod_log.c mod_core.c
mod_site.c mod_ctrls.c
mod_delay.c mod_ctrls_admin.c
mod_auth_pam.c mod_deflate.c
mod_sql.c mod_delay.c
mod_sql_mysql.c mod_digest.c
mod_tls.c mod_gzipfs.c
mod_ifsession.c mod_ifsession.c
mod_rewrite.c mod_info.c
mod_deflate.c mod_log.c
mod_digest.c mod_ls.c
mod_md5fs.c mod_md5fs.c
mod_site_misc.c mod_msg.c
mod_conf_sql.c mod_readme.c
mod_gzipfs.c mod_rename.c
mod_info.c mod_rewrite.c
mod_readme.c mod_site.c
mod_rename.c mod_site_misc.c
mod_ctrls_admin.c mod_sql.c
mod_ban.c mod_sql_mysql.c
mod_msg.c mod_tls.c
mod_wrap.c mod_wrap.c
mod_wrap_file.c mod_wrap_file.c
mod_ctrls.c mod_xfer.c

/usr/local/sbin/proftpd -V
Compile-time Settings:
Version: 1.3.0
Platform: SOLARIS2 (SOLARIS2_10)
Built With:
configure --enable-ctrls --with-libraries=/usr/sfw/lib/
--with-includes=/usr/sfw/include/mysql
--with-modules=mod_sql:mod_sql_mysql:mod_tls:mod_ifsessio n:mod_rewrite:mod_deflate:mod_digest:mod_md5fs:mod _site_misc:mod_conf_sql:mod_gzipfs:mod_info:mod_re adme:mod_rename:mod_ctrls_admin:mod_ban:mod_msg:mo d_wrap:mod_wrap_file

Files:
Configuration File:
/usr/local/etc/proftpd.conf
Pid File:
/usr/local/var/proftpd.pid
Scoreboard File:
/usr/local/var/proftpd/proftpd.scoreboard

Features:
- Autoshadow support
+ Controls support
+ curses support
- Developer support
- DSO support
- IPv6 support
+ Largefile support
+ ncurses support
- POSIX ACL support
+ Shadow file support
+ Sendfile support

Tunable Options:
PR_TUNABLE_BUFFER_SIZE = 1024
PR_TUNABLE_GLOBBING_MAX = 8
PR_TUNABLE_HASH_TABLE_SIZE = 40
PR_TUNABLE_NEW_POOL_SIZE = 512
PR_TUNABLE_RCVBUFSZ = 49152
PR_TUNABLE_SCOREBOARD_BUFFER_SIZE = 80
PR_TUNABLE_SCOREBOARD_SCRUB_TIMER = 30
PR_TUNABLE_SELECT_TIMEOUT = 30
PR_TUNABLE_SNDBUFSZ = 49152
PR_TUNABLE_TIMEOUTIDENT = 10
PR_TUNABLE_TIMEOUTIDLE = 600
PR_TUNABLE_TIMEOUTLINGER = 180
PR_TUNABLE_TIMEOUTLOGIN = 300
PR_TUNABLE_TIMEOUTNOXFER = 300
PR_TUNABLE_TIMEOUTSTALLED = 3600
PR_TUNABLE_XFER_BUFFER_SIZE = 49152
PR_TUNABLE_XFER_SCOREBOARD_UPDATES = 10

>Cheers,
>TJ
>
>~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
>
> We shall not cease from exploration
> And the end of all our exploring
> Will be to arrive where we started
> And know the place for the first time.
>
> -T.S. Eliot
>
>~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
>
>-------------------------------------------------------------------------
>Using Tomcat but need to do more? Need to support web services, security?
>Get stuff done quickly with pre-integrated technology to make your job easier
>Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
>http://sel.as-us.falkag.net/sel?cmd=...057&dat=121642
>_______________________________________________
>ProFTPD Users List
>Unsubscribe problems?
>http://www.proftpd.org/list-unsub.html


--=====================_309785859==.ALT
Content-Type: text/html; charset="us-ascii"



At 09:53 PM 9/13/2006, TJ Saunders wrote:


> Now, if you start ProFTPD
under 'root', and you don't have "User" and

> "Group" statements in the server context, the server
continues to run

> under 'root'.

>

> And 'root' can do anything, right?  But, not here? 
Huh??


It's possible that in that situation, assuming you're running on
Linux,

you are encountering mod_cap's restrictions:


 

http://www.castaglia.org/proftpd/modules/mod_cap.html



To test this hypothesis, you could add:


  <IfModule mod_cap.c>

    CapabilitiesEngine off

  </IfModule>


to your proftpd.conf.


Errm, I don't think I've got that enabled.  I'll get to test
tomorrow (thanks for the suggestion) but wouldn't "-l" show
mod_cap?

    /usr/local/sbin/proftpd -l

    Compiled-in
modules:         (and
sorted)

     
mod_core.c               
mod_auth.c

     
mod_xfer.c               
mod_auth_file.c

     
mod_auth_unix.c          
mod_auth_pam.c

     
mod_auth_file.c          
mod_auth_unix.c

     
mod_auth.c               
mod_ban.c

     
mod_ls.c                 
mod_conf_sql.c

     
mod_log.c                
mod_core.c

     
mod_site.c               
mod_ctrls.c

     
mod_delay.c              
mod_ctrls_admin.c

     
mod_auth_pam.c           
mod_deflate.c

     
mod_sql.c                
mod_delay.c

     
mod_sql_mysql.c          
mod_digest.c

     
mod_tls.c                
mod_gzipfs.c

     
mod_ifsession.c          
mod_ifsession.c

     
mod_rewrite.c            
mod_info.c

     
mod_deflate.c            
mod_log.c

     
mod_digest.c             
mod_ls.c

     
mod_md5fs.c              
mod_md5fs.c

     
mod_site_misc.c          
mod_msg.c

     
mod_conf_sql.c           
mod_readme.c

     
mod_gzipfs.c             
mod_rename.c

     
mod_info.c               
mod_rewrite.c

     
mod_readme.c             
mod_site.c

     
mod_rename.c             
mod_site_misc.c

     
mod_ctrls_admin.c        
mod_sql.c

     
mod_ban.c                
mod_sql_mysql.c

     
mod_msg.c                
mod_tls.c

     
mod_wrap.c               
mod_wrap.c

     
mod_wrap_file.c          
mod_wrap_file.c

     
mod_ctrls.c              
mod_xfer.c


    /usr/local/sbin/proftpd -V

    Compile-time Settings:

      Version: 1.3.0

      Platform: SOLARIS2 (SOLARIS2_10)

      Built With:

        configure --enable-ctrls
--with-libraries=/usr/sfw/lib/ --with-includes=/usr/sfw/include/mysql
--with-modules=mod_sql:mod_sql_mysql:mod_tls:mod_ifsessio n:mod_rewrite:mod_deflate:mod_digest:mod_md5fs:mod _site_misc:mod_conf_sql:mod_gzipfs:mod_info:mod_re adme:mod_rename:mod_ctrls_admin:mod_ban:mod_msg:mo d_wrap:mod_wrap_file



      Files:

        Configuration File:

         
/usr/local/etc/proftpd.conf

        Pid File:

         
/usr/local/var/proftpd.pid

        Scoreboard File:

         
/usr/local/var/proftpd/proftpd.scoreboard


      Features:

        - Autoshadow support

        + Controls support

        + curses support

        - Developer support

        - DSO support

        - IPv6 support

        + Largefile support

        + ncurses support

        - POSIX ACL support

        + Shadow file support

        + Sendfile support


      Tunable Options:

        PR_TUNABLE_BUFFER_SIZE =
1024

        PR_TUNABLE_GLOBBING_MAX =
8

        PR_TUNABLE_HASH_TABLE_SIZE =
40

        PR_TUNABLE_NEW_POOL_SIZE =
512

        PR_TUNABLE_RCVBUFSZ =
49152

       
PR_TUNABLE_SCOREBOARD_BUFFER_SIZE = 80

       
PR_TUNABLE_SCOREBOARD_SCRUB_TIMER = 30

        PR_TUNABLE_SELECT_TIMEOUT =
30

        PR_TUNABLE_SNDBUFSZ =
49152

        PR_TUNABLE_TIMEOUTIDENT =
10

        PR_TUNABLE_TIMEOUTIDLE =
600

        PR_TUNABLE_TIMEOUTLINGER =
180

        PR_TUNABLE_TIMEOUTLOGIN =
300

        PR_TUNABLE_TIMEOUTNOXFER =
300

        PR_TUNABLE_TIMEOUTSTALLED =
3600

        PR_TUNABLE_XFER_BUFFER_SIZE =
49152

       
PR_TUNABLE_XFER_SCOREBOARD_UPDATES = 10


Cheers,

TJ


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~



   We shall not cease from exploration

   And the end of all our exploring

   Will be to arrive where we started

   And know the place for the first time.


     -T.S. Eliot


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~



-------------------------------------------------------------------------

Using Tomcat but need to do more? Need to support web services,
security?

Get stuff done quickly with pre-integrated technology to make your job
easier

Download IBM WebSphere Application Server v.1.0.1 based on Apache
Geronimo


http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642



_______________________________________________

ProFTPD Users List   <proftpd-users@proftpd.org>

Unsubscribe problems?


http://www.proftpd.org/list-unsub.html



--=====================_309785859==.ALT--


--===============0260072702==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=...057&dat=121642
--===============0260072702==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
ProFTPD Users List
Unsubscribe problems?
http://www.proftpd.org/list-unsub.html
--===============0260072702==--