• Debian 11 is approaching its end-of-life (vendor EOL date - August 31, 2026). Plesk Obsidian 18.0.80 will be the last release to support it.
    If you are running Plesk Obsidian on Debian 11, we recommend you upgrade those servers to Debian 12 using our dist-upgrade tool.
  • We plan to deprecate and remove the support for XML RPC protocol versions earlier than 1.6.9.1 in Plesk Obsidian 18.0.82. We strongly recommend that you update all existing integrations using earlier versions of the XML RPC protocol to comply with the version 1.6.9.1 specification.

Issue FTP users can browse directory

Nicola

Basic Pleskian
Hi,
I have a problem with ftp users, because when users access to server they can browse other user's directory. How can I resolve?

Thanks
 
Hi,

Maybe do you change something in FTP settings? I checked my server and compare with FTP [is link :)] - I haven't this issue.

So, check next steps:
1. Should be the same.
# grep Root /etc/proftpd.conf
DefaultRoot ~ psacln
#


2. Should be the same.
# cat /etc/ftpchroot
@psacln
#


3. Note group id (in my example is 1003)
# grep psacln /etc/group
psacln:x:1003:
#

4. Check correct group id for you ftp user.
# grep my-ftp-user /etc/passwd
my-ftp-user:x:10009:1003::/var/www/vhosts/my-domain.tld:/bin/false
#

5. Also, compare two different FTP users in your environment.

Did you find any difference?
 
Hi,
these are 2 my ftp users. With these setting I can browse system folders and the only folders I can not enter are those of other domains.

my_ftp_user_1:x:10002:1003::my-domain.tld:/bin/bash
my_ftp_user_2:x:10000:1003::my-domain2.tld:/bin/bash
 
Back
Top