Ftp- and webserver setup, grouping problem

Hello.
I've got a server and installed cherokee and vsftpd as I thought it is a good choice to run a webserver with.
I want to host a few domains and because of that I have to add certain ftp accounts so that they can upload stuff by themselves. Nothing new I am talking about.
But my problem is how do I realize this best?
cherokee runs as user `www` and group `www` as I read it is good to drop root previleges, which is basically even obvious.
I created the needed users with a home directory in /home/www/$username because I thought this is a good place to keep the data files for the ftp account as well as the domain.
But then a first problem occures. What if I grant more features to a certain user for example shell access. It would be nice if theres only one user name for each user and not user_ftp for ftp access, user_shell for shell access, etc. In order to archieve this I should put the files for ftp data into /home/username/ftp but vsftpd doesn't allow to change the ftp root directory to something other than the user's home directory or at least I don't know how to configure it.
Is this solution not possible to realize in general or is it a problem of vsftpd (and I should run another ftp service) or is it just a lack of knowledge?
Then further I noticed that every user can view other user's files because all files are owned by the group `users` and the chmod was something linke -rwxr-xr-x for the directories which isn't very secure. I thought: "Pah, easy to solve". Just change the chmod of each direcotory to -rwx------ as they're owned by the user. But then I realized that the webserver (www:www) cannot access the files anymore. "Bad luck", I thought, and changed the chmod of each file to -rw-r--- and made them being owned by the group `www`. "Very well", ran through my mind as all files and directories were owned by $user:www and have the "proper" chmod.
But again vsftpd doesn't seem to like this. When I upload a file via ftp it creates a chmod like this:
-rwx-------
And the file is owned by $user:users. Pitty that this doesn't fit into my conecept. Well again there's the question if vsftpd causes the problem or I do.
I mean, I'd like to set up a proper and secure web server but I don't know how to archieve it. Are my thoughts wrong or is vsftpd reaching its limits?
I read through the vsftpd documentation but there was no solution to my problem.
Is there a proper way to handle this or is it just a matter of opinion?
What do you think is best?
Thanks a lot.
harlekin
edit: I've already asked for help realting to a particluar problem of this post in this thread. I have to overread it or something. Sorry for that. : Is this the way to handle it or is it just a work-around. It seems to me as if it will run out of luck if my server becomes larger.

I have also done port scans on my Airport Extreme N to ensure that the ports are open. They are.

Similar Messages

Setup group and setup matrix

Hi Gurus,
Please brief me on the significance of setup group and setup matrix in APO and the effect of the same in planning?
Thanks,
Prasanth

Hi Prashanth,
Setup group tries to group products with similar characteristics.
Setup matrix provides the sequence in which the set up groups
can be executed.
Setup sceanrio is used in cases where in the time taken for switching
over from one product or group of products or category of products or
charactersitics of products which is called as predecessor to another
product or group of products or category of products or characteritiss of
products which is called as successor.
Say for eg, if you are having a scenario wherein
you need to manufacture products with low weight,
medium weight and heavy weight products.
You can define in the set up matrix that for switch
over from low weight to medium weight products for
manufacturing, the set up time involved in 2 hours and
the setup cost involved is Rs.100,
Similarly, for switching over from heavy weight products
to medium weight products, the set up time involved
is 3 hours and the set up cost involved is Rs.50.
Based on this information, system will frame a matrix
of information and use during planning.
Hope this information is clear to you.
Please confirm whether your issue is resolved.
Regards
R. Senthil Mareeswaran.

How do I properly setup pin and gate swap groups on new components?

Hi,
I've looked for some documentation explaining exactly how the pin and gate swap functionality works but I have not been successful.
I am trying to get pin and gate swapping working correctly on some digital logic components that I have created (side question - why no modern 74 series logic components like LVC?) as well as RPACKS and some connectors.
Is it a requirement to create a multi-section symbol to enable gate swapping? I can't seem to get it to work unless the symbol has multiple sections. It doesn't work by default for the RPACKs included in Multisim. If it's possible to do gate swapping by putting the pins of each gate in their own gate swap group I would really like to understand what I'm doing wrong.
In the Component Properties 'Footprint' tab you can define the 'Pin swap group' and 'Gate swap group' settings. I have not seen any documentation explaining this and frankly, I'm quite confused by it when using existing 74 series parts as examples. The single section symbols don't have any pin swap or gate swap groups defined and the multisection symbols have only one gate swap group and then put all inputs in one pin swap group and all outputs in another pin swap group.
I would really appreciate it if someone could point me to documentation that explains how to do this. The help files are quite poor in my opinion - they seem to only be able to point out the obvious. The 'Getting Started,' 'Fundamentals,' etc. type guides don't mention this stuff at all. The 'User Guide/Manual' (both of which appear to be outdated?) do not explain this and frankly don't have very much information about pin and gate swapping at all.
I'm hoping I'm just missing something obvious.
On a related note - I'm having some trouble working with some of these multisection components. When I want to change the footprint or update the component after making a change to the component in the database I can't seem to find a quick way to do this. It seems that I always have to go through a drawn out process of 'Replacing' each individual symbol section. Is there a faster way to do this?
Thanks,
Kleven

Hi Pat,
I'm working with some SAMTEC connectors. I don't expect you guys to have these built by default in the library - they are somewhat custom. But just so you can consider it, we are using the TFM and T2M family of connectors and I'm adding them as additional footprints for the standard dual row headers. I'm having some trouble with the footprint for the TFM screw-down option since it is a very odd footprint, but I'm going to start a seperate thread discussion for that since I really just need to understand how to manipulate Ultiboard to get the desired result and it's really a different discussion.
As for RPACKs, I'm a little confused about how Multisim currently supports these. The Value tab in the properties dialog only lets you set the resistance. Why isn't this more like the resistor value tab? Since the Value tab is modified like a virtual component it's disappointing that it doesn't offer more capability like the other virtual passives. In my limited experience I've seen the isolated-4 resistor pack used the most, but like I said, that is limited experience. It would be nice if some surface mount footprints were added to the master database for RPACKs in the future. 4x0402, 4x0603, and 4x0805, concave and convex, seem like pretty common footprints as best I can tell.
Virtual components work great in a purely physical design because you can easily change the footprint in the 'Value' property tab. With the provided RPACKs and LEDs you can't do that, so I had to create new components in the User/Corporate database. Of course, the LED can't be copied so I had to create it from scratch. But the RPACK could be copied even though it had a modified Value tab, implying it is a virtual component, if I understand correctly. Maybe these distinctions and limitations are well defined but I found it somewhat confusing that there were several common parts I had to either copy and modify or build from scratch.
Since I created those parts, we updated to the PowerPro version and though I'm not certain, I think I can change the footprint in the spreadsheet view. But in the standard version, I didn't see a way to change the footprint without replacing the component.
Also, it seems like changing the footprint does not behave quite like I would expect. If I have a database part which has multiple footprints mapped already, I would expect to be able to choose between those footprints already supported by the database part when I try to change the footprint using the Properties->Value tab or the spreadsheet view. If I need to change to a footprint that currently is not associated with the component in the database, I would expect to have to edit the database part, add the footprint, map the pins, re-save the component, then update the component in the schematic.
Is my thought process making too many assumptions here? I understand that I am one person creating one design in one specific way. So I'm sure I'm missing some usage cases or intended uses of the tool, especially since I haven't taken any training for this software and have tried to teach myself how to use it over the last 9 months. And I have noticed that even for virtual resistors and capacitors, the footprint selection dialog is the same - a selection from the database and setting up a new pin mapping.
As for 74 series parts, seeing the LVC family would be very nice. This is 3.3V-2.5V and seems like the next logical step for lower voltage support. It would also be nice to see some surface mount footprints with the 74 series parts. This isn't a big deal though - it didn't take me long to create the parts I needed by copying and editing from the Master database. And since I'm not using the simulation models, that made it even easier. Since I haven't looked into the models at all, I don't know if that would have taken longer to convert to the LVC family.
I've probably rambled enough for now.
Thanks!
Kleven

Need help regarding Apache httpd.conf and PHP setup.

Hi,
I am facing problem setting up my PHP and apache setup. I have installed Apache2.2 Root path = C:\Program Files\Apache Software Foundation\Apache2.2
I have also installed PHP in my C:\PHP drive earlier. I moved this PHP folder to C:\Program Files\Apache Software Foundation\Apache2.2 just to keep all things at one place.
I have copied php5ts.dll at 4 locations - C:\Program Files\Apache Group\Apache2 \bin , %SYSTEMROOT%\System32, %SYSTEMROOT%\system and %SYSTEMROOT%. I have also added these paths in Environment variable 'PATH'.
In httpd.conf file entries are as follows:
ServerRoot "C:/Program Files/Apache Software Foundation/Apache2.2"
I have added these 3 lines as
LoadModule php5_module php/php5apache2.dll
AddType application/x-httpd-php .php
AddType application/x-httpd-php-source .phps
When restarting apache http server I get message as:
httpd.exe error ...... cannot load C:\Program Files\Apache Software Foundation\Apache2.2\php\php5ts.dll into the server. The specified module could not be found.
I have checked that php5ts.dll DLL exist at above path. Please help me out urgently.

Sorry I don't have Windows available to check the paths. With recent versions
of PHP I never copied files out of the php source directory.
Make sure the Oracle 10g Instant Client is in your PATH environment variable.
You could try using the PHP Windows MSI installer.
cj

Setup group category & setup group Key.

Dear Friends,
I am facing some problem in setup group category... Please check this scenario and let me know...if anybody is having any idea about this...
My scenario is: I am having a single work center... on which I can do some machining activity.This WC is used in 100 material routings. but all my 100 materials are grouped into 5 categories. based on the dia... for example 100-120 dia one group 121-140 dia another group like that. If my two successive materials are belong to same group..then.. I donot have any setup time. if my two success materials scheduled on that machine are not belong to same group...then I am having 5 hrs of setup time.
so here setup time I can not mention in the routing...
this can be achieved by setup group and setup group key...and through capacity leveling... we can insert this setup time as per the matrix... in the matrix we need to define the setup times between two different groups..
And here the setup time is almost equal to machining time of one material. max.. they can do 3 materials machining only.. if there is no setup in a day of 16 hrs working. So manageement wants to minimize setup time... so grouping of the materials should be based on the Dia... this is the requirement.
I hope u understood my requirement...
Actually I maintained all the setup group categories, setup group keys in the routing and I maintained setup matrix also...
But during the finite scheduling through Capacity leveling I am not able to consider the setup time in the production order.... This is the problem I am facing... If anybody is having any idea...please share with me..
Regards,
Surya.

Hi Suryanarayana,
I see that you have defined setup type and setup group keys and also setup matrix.
Please check the following under SPRO -> CRP -> Capacity leveling and extended evaluation -> Strategy -> Define strategy profile. There is a standard strategy profile to optimize setup times, which is SAPSFCT005 (Fin.sched.for./disp.acc. to setup group). Check the settings under this profile especially the check box "dispatch at best time for set up" to see if it works.
Best of luck,
Sharabh

PPM with incorrect setup group information

Hello all,
We have a problem with information of setup group updated in PPM.
At the first time, the user has created the routing with the incorrect information in ECC, but when he has corrected it, the CIF PPM interface was not able to correct it in APO.
Even when we try correct manually using transaction /SAPAPO/SCC03, we are not able to fix the information. Always, the old value of setup group is considered.
Can you help us?
Thanks in advance.
Januario Faria

Hello all,
We were able to solve the problem.
We had two setup groups with the same SETUP_ID in table /SAPAPO/SET_ID.
In order to solve the problem we had to follow the steps:
1.     Delete production and planned orders of related products;
2.     Delete products' PPMs;
3.     Delete setup groups from setup matrix;
4.     Delete setup group;
5.     Reactivate setup group integration model;
6.     Reactivate PPM integration model.
Regards,
Januario Faria.

Gmail and deleted messages synch problem

First of all, sorry for my english
I have few gmail accounts on my Bold. Imap is enabled on ALL gmail accounts of course.
If i delete a message from web/pc(imap) this message is deleted on my bold ONLY if the account was set *MANUALLY*.
By "manually" i mean enter a wrong email address in the email address field (with this BIS new version you cannot set manually a gmail address any more) and then modify it filling all fields with the correct settings, email address, imap server etc etc.
If i setup a gmail address automatically, when i delete a message from web, it won't be deleted from my bold.
Tried with and without gmail plugin. It seems that this happens only with old accounts, removed and restored but not 100% sure about that... i used to have all my gmail accounts set manually.
Of course i tried to reset, wipe, send book services thousand of times etc etc. No way... only gmail accounts with manual settings are synch.
Any solution if i want to use gmail plugin and i want my deleted messages to be synch?
Thanks a lot, i really don't know what to do....
Message Edited by Danielem on 09-23-2009 03:16 PM
Message Edited by Danielem on 09-23-2009 03:16 PM

hi, did you try pop3 gmail account ?
and ıf you have problem yet ? you should your gsm operator support and you should want auto sync delete about your gmail account?.. because this is a sync problem and they manage your account only some matter, ı hope that they can help you, and can you tell us thnks lot of;=)
best regard
Blackberry support teams in linkedin ...join
http://www.linkedin.com/groups?home=&gid=2785187&trk=anet_ug_hm
For Russian
http://www.linkedin.com/groups?gid=3183812&trk=anetsrch_name&goback=.gdr_1278482273982_1

Passive FTP and the Leopard firewall

Hi,
We have an staff upload server that uses the built-in Leopard firewall. It is fed by two proprietary applications, one of which uses passive ftp only. We are getting a small number of incidents where the passive upload is unsuccessful. Initial contact is made (visible in the logs and as a connection in the server admin gui) but the upload doesn't proceed. A user might try uploading several times without success. On other occasions, the same user from the same computer has no problems at all.
We have the ftp service enabled on port 20-21 and the FTP service PASV port range enabled 49152-65535.
If I add the uploading computers' ip number to an access group with no port restrictions on the firewall, the uploads are always successful.
With my very limited knowledge of ftp and firewalls, this suggest that the negotiated port for the data transfer is outside the default port range used by Apple. Is this likely? Are there any implications in changing the range?
Or am I totally confused and should I be looking elsewhere?
Thanks,
Ross Glover

By default, the FTP server doesn't restrict itself to any particular passive port range. To make it match what the firewall claims it should be, edit the file /Library/FTPServer/Configuration/ftpaccess and add the line:
passive ports 0.0.0.0/0 49152 65535
...then restart the FTP service and retest.

CIF Error: Setup group/key 10000427 does not exist

Dear CIF-Specialists,
We observed a problem on the integration between APO and R/3.
If we want to send PPM's from R/3 to APO we have the following error-message: "Setup group/key 10000427 does not exist".
Transaction CFM1 (Create Integration Modell) ==> No problem
Transaction CFM2 (Activate Integration Modell) ==> Error!
We don't use setup groups or keys in our operations but we have created the setup keys in APO and R/3 (Transaction: /SAPAPO/CDPSC6 and OP43).
As we don't have keys in the PPM's it is normal that they don't exists.
Do you have an idea where we have to set theses Setup keys?
Can you give us an indication how we could resolve this problem?
Thank you.
Best regards,
Thomas

Dear Sharath,
Thank you for your reply.
We dont't have setup key or group maintained in this receipt. This is the strange part on this problem.
Why does it search for a setup key if we don't want to transfer it?
I checked also the setup-keys in APO and R/3 and they are the same.
We did a copy of the test-system (where the problem occurs) some days ago. Is there a table in APO where it could have some old entries about this?
Thank you for your help.
Thomas
Edited by: Ricci Olivier on May 12, 2008 11:39 AM

FTP and Port mapping

Hi
we get troubles with our FTP Server. The clients send a Syn with Src port 40000 then the Server replies with the the same dst port but i presume that the loadbalancer makes a port-mapping and translate the source Port to eg. 33000. Our firewall clearly drops the packet with the reason "Packet out of state". have you any idea ?
Here my config
service h01p6u_21
keepalive type tcp
keepalive port 21
ip address x.x.158.129
protocol tcp
redundant-index 11790
active
service h01p6v_21
ip address x.x.158.130
keepalive type tcp
keepalive port 21
protocol tcp
redundant-index 11800
active
content c01sg5_21
vip address x.x.x.140
add service h01p6v_21
add service h01p6u_21
port 21
protocol tcp
application ftp-control
active
!*************************** GROUP
group srg_c01sg5
vip address x.x.x.140
add service h01p6u_21
add service h01p6v_21
active

Hi Gilles
the problem that I have now is with ACTIVE FTP. I made PBR on the Loadbalancer. Passive FTP works either from the internet and from our internal network while Active FTP works only from the internet and doesn't work from our internal network. What we see is that the Loadbalancer sends the ftp-data packet out to the InternetVLAN (eg. VLAN 3605) and not to the VLAN 3603. I guess the problem is in my access-list. have you any Idea ??
My configuration
!*************************** GROUP ***************************
group srg_c01sg5
vip address x.x.152.140
add service h01p6v_21
add service h01p6u_21
active
!**************************** ACL ****************************
acl 1
clause 10 permit any x.x.172.0 255.255.255.0 destination any prefer FW_VLAN3605
clause 99 permit any any destination any
apply circuit-(VLAN3607)
acl 2
clause 10 permit any x.x.158.0 255.255.255.0 destination any prefer FW_VLAN3603
clause 99 permit any any destination any
apply circuit-(VLAN3610)
clause 15 permit any x.x.158.0 255.255.255.0 destination 10.0.0.0 255.0.0.0 prefer FW_VLAN3603
clause 20 permit any x.x.158.0 255.255.255.0 destination 138.191.0.0 255.255.0.0 prefer FW_VLAN3603
clause 25 permit any x.x.158.0 255.255.255.0 destination 192.168.251.0 255.255.255.0 prefer FW_VLAN3603
clause 30 permit any x.x.158.0 255.255.255.0 destination 192.168.250.0 255.255.255.0 prefer FW_VLAN3603
clause 35 permit any x.x.158.0 255.255.255.0 destination 192.168.0.0 255.255.0.0 prefer FW_VLAN3603
clause 40 permit any x.x.158.0 255.255.255.0 destination 172.16.0.0 255.240.0.0 prefer FW_VLAN3603
acl 10
clause 99 permit any any destination any
apply circuit-(VLAN3605)
apply circuit-(VLAN3603)
apply circuit-(VLAN2421)
apply circuit-(VLAN1)

877W router with Webserver inside - Strange Problem

Hello,
I have a strange problem and I cannot understand what is going on here. I hope that someone could help me.
I configured 877W router. Setup Firewall and NAT. I setup access from outside for my PCAnywhere workstation and for my Webserver. PCAnywhere and Webserver are located on a local LAN interface.
I cannot connect to the PCAnywhere at all. Something interesting is happening with the Webserver. I can connect to some basic pages with words only, for example page has a phrase ?Hello, this is a test?. If I try to open pages with some graphics on them, it cannot find the page. I cannot connect to ports 25, 80, or 110 on the Webserver (These ports are configured on the Firewall and configured with NAT).
Because I can connect to basic web pages, I am sure that NAT and firewall are configured correctly.
What can it be? Any ideas?
Thank you.
Igor L. Kravchenko.

Hi,
Does telnet to the webserevr on port 80, 110 works ?
If yes, then it is most likely be a packet size issue. O\Try reducing MSS on the LAN interface.
int vlan1
ip tcp adjust-mss 1400
exit
lower down the value, by 100 bytes till you get better results.
HTH,
-Kanishka

NAS FTP and DYNDNS anyone?

my girlfriend has a NAS server attached to the router and wants access without having to run her laptop all day and night, which is the way I would want it.
Her router supports dyndns and we've forwarded port 21 to the NAS which has built-in FTP. The problem is when we access it over dyndns we get the http NAS configuration and not the shares!
so, we can access the shares directly over FTP with an FTP client or HTTP
and we can connect to the NAS over DYNDNS but only to the setup not to the shares.
anyone with an answer?

The NAS is a Buffalo Link Station 160 and the router is from Sphairon.
When we don't forward port 21 we get the router setup and I believe this is what is intended by the router, to remotely access and configure it. So it (almost) makes sense that we access the same level on the NAS when the port is forwarded via HTTP. Obviously if there were server software on the first IP (router) we would be there already, so I'm thinking the router is not forwarding for FTP correctly. Unfortunately the NAS device has only FTP and not HTTP built in.

Report based on a reord group - PROBLEM

Using Reports Server / Forms/Reports 6i
I am trying to run a report based on a record group on the web. It fails giving the error 'Cannot run report.'
The report is called from a form and the record group is passed as a data parameter. It works fine in Client/Server.
I have tried to remove the data parameter and run the report without it but, despite working in the Client/Server environment, it still fails on the Web.
Does anyone have any suggestions?

I have found the answer to my problem in the forms forum!
Apparently, this type of report won't work on the web and I have to use temporary tables!

How do i get my photos to stream to my iPad in the events that were oringally created. Right now they are streaming as photos and are not grouped at all. I would like to get them back into the events that were originally created

how do i get my photos to stream to my iPad in the events that were oringally created. Right now they are streaming as photos and are not grouped at all. I would like to get them back into the events that were originally created

Hi..
Thanks for the reply..
My original I Phone 5 was running IOS 6.12
My I phone 5S currently runs IOS 8..When I upgraded it, it had IOS 7 on it which made the I Photo app compatible with everything below IOS 8...( which the photo app is not compatible with ) so I just connected the I Phone 5S to my computer and thinking the new phone had IOS 7 on it that these was nothing to worry about..I thought all 900 + pictures in the photo stream would transfer but somewhere in the process, I Tunes decides to just go and install IOS 8 which requires that you run a " Photo Migration App" to transfer photos from IOS 7 & below. The problem was is that I didn't want IOS 8 on my new 5S so I thought I wouldn't have to do that part..
Anyway the phone emerged with IOS 8 on it and the only photos that remained were the ones that were actually on the phone..The 900 + I had in the stream didn't transfer because the Photos that works on IOS 7 and below isn't compatible with IOS 8..I guess you have to use the photo migration app that comes with IOS 8 & I phone 6..But I didn't ask to upgrade to IOS 8...It just did it on it's own!
I still have the I Phone 5 Back up that I did just before giving it back to Verizon but if I try to restore the I Phone 5S running IOS 8 those photos in the stream will not go back on the phone because IOS 8 isn't compatible with the I Photos" that ran on IOS 7 and below..
So I have an I Pad mini that runs IOS 7..should I try and erase it...and put that I Phone 5 backup on it and pray the photos that were in the stream come back on it so I can transfer them back to my computer...then erase the I pad mini again and restore it using it's original backup that I have on the computer and the in the cloud?
I know this sounds confusing but I'm at a loss as to what to do..This is what I found ...http://support.apple.com/en-us/HT201386
but it doesn't help me..
Steve

TS3579 I found this useful because I did not know about the effect of typing in data and that you could only drag to rearrange the data. I had typed in data before and this had caused problems but restoring defaults did not cause correct dates to show up

I found this (TS3579: If the wrong date or time is displayed in some apps on your Mac Learn about If the wrong date or time is displayed in some apps on your Mac) useful because I did not know about the effect of typing in data and that you could only drag to rearrange the data. I had typed in data before and this had caused problems but restoring defaults did not cause correct dates to show up in Finder.

It sounds like there are a couple things going on here. First check if you have a successful install of SQL Server, then we'll figure out the connection issues.
Can you launch SQL Server Configuration Manager and check for SQL Server (MSSQLSERVER) if default instance or SQL Server (other name) if you've configured your instance as a named instance. Once you find this, make sure the service is started.
If not started, try to start it and see if it throws an error. If you get an error, post the error message your hitting. If the service starts, you can then launch SSMS and try to connect. If you have a default instance, you can use the machine
name in the connection dialog. Ex: "COWBOYS" where Cowboys is the machine name. However, if you named the SQL Server instance during install, you'll need to connect using the machine\instance format. Ex: COWBOYS\Romo (where Romo
is the instance name you set during install).
You can also look at the summary.txt file in the SQL Server setup error logs to see what happened on the most recent install. Past install history is archived in the log folder if you need to dig those up to help troubleshoot, but the most
recent one may help get to the bottom of it if there is an issue with setup detecting a prior instance that needs to be repaired.
Thanks,
Sam Lester (MSFT)
http://blogs.msdn.com/b/samlester
This posting is provided "AS IS" with no warranties, and confers no rights. Please remember to click
"Mark as Answer" and
"Vote as Helpful" on posts that help you. This can be beneficial to other community members reading the thread.

Ftp- and webserver setup, grouping problem

Similar Messages

Maybe you are looking for