VIRTUAL HOSTING WITH PureFTPd And MYSQL

1. VIRTUAL HOSTING WITH PureFTPd And MYSQL (Quota And Bandwidth Management) BY Odoh Kenneth Emeka Sun Yu Patrick Appiah

2. FTP • FTP is an acronym for File Transfer Protocol • What is a protocol? • FTP • Client / server architecture • Port 21 for incoming connection . • TCP protocol

3. ADVANTAGES OF FTP • Easy to use • Low bandwidth • Control over transfer e.g. choosing how data is transferred with binary, executable e.t.c

4. Disadvantages of FTP • SECURITY Using ch’root file server with suitable file permission can deter simple attacks but SSH or TLS is a better option as password is not transferred in clear text.

5. Security in virtual hosting project • Ch’root FTP. • User is directed to a specially made home directory with minimal permissions. • Users don’t have shell • few commands e.g ls • System files are inaccessible to users.

6. Software used for virtual hosting project

7. Project Requirement • Scalable • Handle both authenticated user and anonymous user. • Implement quota management and upload/download bandwidth limits management.

8. Procedures Note: Always back up any configuration file before making any changes. • Log into the computer using the administrator account. $ sudosu • Configure the static IP address by editing the /etc/hosts file. • Install mysql-server ,mysql-client, phpmyadmin and Apache2 . $ aptitude install mysql-server mysql-client phpmyadmin apache2

9. Procedure cont… • Install the package that enables connection between pureFtp and mysql. $ aptitude install pure-ftpd-mysql • Then we create an ftp group (ftpgroup) and user (ftpuser) that all our virtual users will be mapped to. Replace the group- and userid with 2001 • $ groupadd -g 2001 ftpgroup $ useradd -u 2001 -s /bin/false -d /bin/null -c "pureftpd user" -g ftpgroupftpuser

10. Procedure cont… • We create a database called pureftpd and an mysql user called pureftp.We would log in into the mysql database as root using the command. #remember to start mysql server $ mysql -u root –p • CREATE DATABASE pureftpd; • Then creates a user and grant them the required priviledges GRANT SELECT, INSERT, UPDATE, DELETE, CREATE, DROP ON pureftpd.* TO 'pureftpd'@'localhost' IDENTIFIED BY 'ftpdpass'; GRANT SELECT, INSERT, UPDATE, DELETE, CREATE, DROP ON pureftpd.* TO 'pureftpd'@'localhost.localdomain' IDENTIFIED BY 'ftpdpass'; FLUSH PRIVILEGES;

11. Procedure cont… • USE pureftpd; • CREATE TABLE ftpd ( User varchar(16) NOT NULL default '', status enum('0','1') NOT NULL default '0', Password varchar(64) NOT NULL default '', Uidvarchar(11) NOT NULL default '-1', Gidvarchar(11) NOT NULL default '-1', Dir varchar(128) NOT NULL default '', ULBandwidthsmallint(5) NOT NULL default '0', DLBandwidthsmallint(5) NOT NULL default '0', comment tinytext NOT NULL, ipaccessvarchar(15) NOT NULL default '*', QuotaSizesmallint(5) NOT NULL default '0', QuotaFilesint(11) NOT NULL default 0, PRIMARY KEY (User), UNIQUE KEY User (User) ) TYPE=MyISAM;

12. Procedure cont… • $ touch /etc/pure-ftpd/db/mysql.conf_orig • Now I have to copy the configuration files from /etc/pure-ftpd/db/mysql.conf to • /etc/pure-ftpd/db/mysql.conf_orig using the cp command. • $cp /etc/pure-ftpd/db/mysql.conf /etc/pure-ftpd/db/mysql.conf_orig • I have to edit the file /etc/pure-ftpd/db/mysql.conf • $ nano /etc/pure-ftpd/db/mysql.conf

13. Procedure cont… • MYSQLSocket /var/run/mysqld/mysqld.sock • #MYSQLServerlocalhost • #MYSQLPort 3306 • MYSQLUserpureftpd • MYSQLPasswordpureftpd • MYSQLDatabasepureftpd • #MYSQLCrypt md5, cleartext, crypt() or password() - md5 is VERY • RECOMMENDABLE upponcleartext • MYSQLCrypt md5 • MYSQLGetPW SELECT Password FROM ftpd WHERE User="\L" AND status="1" • AND (ipaccess = "*" OR ipaccess LIKE "\R")

14. Procedure cont… • MYSQLGetUID SELECT Uid FROM ftpd WHERE User="\L" AND status="1" AND(ipaccess = "*" OR ipaccess LIKE "\R") • MYSQLGetGID SELECT Gid FROM ftpd WHERE User="\L"AND status="1" AND(ipaccess = "*" OR ipaccess LIKE "\R") • MYSQLGetDir SELECT Dir FROM ftpd WHERE User="\L"AND status="1" AND(ipaccess = "*" OR ipaccess LIKE "\R") • MySQLGetBandwidthUL SELECT ULBandwidth FROM ftpd WHERE User="\L"ANDstatus="1" AND (ipaccess = "*" OR ipaccess LIKE "\R") • MySQLGetBandwidthDL SELECT DLBandwidth FROM ftpd WHERE User="\L"ANDstatus="1" AND (ipaccess = "*" OR ipaccess LIKE "\R") • MySQLGetQTASZ SELECT QuotaSize FROM ftpd WHERE User="\L"AND status="1"AND (ipaccess = "*" OR ipaccess LIKE "\R") • MySQLGetQTAFS SELECT QuotaFiles FROM ftpd WHERE User="\L"AND status="1"AND (ipaccess = "*" OR ipaccess LIKE "\R")

15. CH’ROOT Configuration • Then create the file /etc/pure-ftpd/conf/ChrootEveryone which simply contains the string yes: $touch /etc/pure-ftpd/conf/ChrootEveryone $echo "yes" > /etc/pure-ftpd/conf/ChrootEveryone This will make PureFTPdchroot every virtual user in his home directory so he will not be able to browse directories and files outside his home directory. • create the file /etc/pure-ftpd/conf/CreateHomeDir which again simply contains the string yes. $touch /etc/pure-ftpd/conf/CreateHomeDir $echo "yes" > /etc/pure-ftpd/conf/CreateHomeDir This will make PureFTPd create a user's home directory when the user logs in and the home directory does not exist yet. • create the file /etc/pure-ftpd/conf/DontResolve which again simply contains the string yes.

16. Cont.. $touch /etc/pure-ftpd/conf/DontResolve $echo "yes" > /etc/pure-ftpd/conf/DontResolve This will make that PureFTPd reduce bandwidth usage. • We have to restart the pureftpd server $ /etc/init.d/pure-ftpd-mysql restart

17. Testing the project • INSERT INTO `ftpd` (`User`, `status`, `Password`, `Uid`, `Gid`, `Dir`,`ULBandwidth`, `DLBandwidth`, `comment`, `ipaccess`, `QuotaSize`,`QuotaFiles`) VALUES ('exampleuser', '1', MD5('secret'), '2001', '2001','/home/www.example.com', '100', '100', '', '*', '50', '0');

18. Creating Anonymous User • INSERT INTO `ftpd` (`User`, `status`, `Password`, `Uid`, `Gid`, `Dir`,`ULBandwidth`, `DLBandwidth`, `comment`, `ipaccess`, `QuotaSize`,`QuotaFiles`) VALUES ('ftp', '1', MD5(''), '2001', '2001', '/home/ftp', '100', '100', '','*', '50', '0'); • quit; • Create the file /etc/pure_ftpd/conf/NoAnonymous This configuration will allow anonymous login. $ touch /etc/pure-ftpd/conf/NoAnonymous $ echo "no" > /etc/pure-ftpd/conf/NoAnonymous

19. $ /etc/init.d/pure-ftpd-mysql restart $ cd /home/ftp $ mkdir incoming $ chown ftp:nogroup incoming/ $ chmod 311 incoming/ $ cd ../ $ chmod 555 ftp/ • Now anonymous users can login, and they can download files from /home/ftp, but uploads are limited to /home/ftp/incoming (and once a file is uploaded into /home/ftp/incoming, it cannot be read nor downloaded from there; the server admin has to move it into /home/ftp first to make it available to others

20. Cont… • log in • $ ftp 192.168.10.75

21. References • http://www.chinalinuxpub.com/doc/www.siliconvalleyccie.com/index.htm • http://www.linuxhomenetworking.com/ • http://linuxservertutorials.blogspot.com/2008/11/configure-ftp-server-onubuntu.html • http://en.wikipedia.org/wiki/Pure-FTPd • http://www.howtoforge.com/virtual-hosting-with-pureftpd-and-mysql-incl-quotaand- • bandwidth-management-on-ubuntu-9.10-p2

22. END THANKS