• Please be aware: Kaspersky Anti-Virus has been deprecated
    With the upgrade to Plesk Obsidian 18.0.64, "Kaspersky Anti-Virus for Servers" will be automatically removed from the servers it is installed on. We recommend that you migrate to Sophos Anti-Virus for Servers.
  • The Horde webmail has been deprecated. Its complete removal is scheduled for April 2025. For details and recommended actions, see the Feature and Deprecation Plan.
  • We’re working on enhancing the Monitoring feature in Plesk, and we could really use your expertise! If you’re open to sharing your experiences with server and website monitoring or providing feedback, we’d love to have a one-hour online meeting with you.

Issue FTP users can browse directory

Nicola

Basic Pleskian
Hi,
I have a problem with ftp users, because when users access to server they can browse other user's directory. How can I resolve?

Thanks
 
Hi,

Maybe do you change something in FTP settings? I checked my server and compare with FTP [is link :)] - I haven't this issue.

So, check next steps:
1. Should be the same.
# grep Root /etc/proftpd.conf
DefaultRoot ~ psacln
#


2. Should be the same.
# cat /etc/ftpchroot
@psacln
#


3. Note group id (in my example is 1003)
# grep psacln /etc/group
psacln:x:1003:
#

4. Check correct group id for you ftp user.
# grep my-ftp-user /etc/passwd
my-ftp-user:x:10009:1003::/var/www/vhosts/my-domain.tld:/bin/false
#

5. Also, compare two different FTP users in your environment.

Did you find any difference?
 
Hi,
these are 2 my ftp users. With these setting I can browse system folders and the only folders I can not enter are those of other domains.

my_ftp_user_1:x:10002:1003::my-domain.tld:/bin/bash
my_ftp_user_2:x:10000:1003::my-domain2.tld:/bin/bash
 
Back
Top