Migration from Solaris WU-FTPD to ProFTPD
Introduction
------------
This document provides an overview of migrating the Solaris WU-FTPD
configuration to Solaris ProFTPD. ProFTPD replaces WU-FTPD in this
Oracle Solaris release and has a different configuration system.
Migration from the previous Solaris FTP server setup must be done
manually.
This document contains the following sections:
* Section 1 - basic overview of configuration
* Section 2 - managing access
* Section 3 - virtual host configuration
* Section 4 - other options
1. Basic overview of configuration
WU-FTPD uses several configuration files to manage the FTP server:
/etc/ftpd/ftpaccess
/etc/ftpd/ftpservers
/etc/ftpd/ftphosts
/etc/ftpd/ftpconversions
/etc/ftpd/ftpgroups
These configuration files manage all aspects from general options to
account management and virtual servers.
Configuration of ProFTPD is contained in /etc/proftpd.conf. It is also
possible to manage some options on per-directory basis with .ftpaccess
files.
ProFTPD consists of a core server and a series of "modules".
Configuration of ProFTPD is separated into "contexts" containing
"directives".
2. Managing access
WU-FTPD uses several files to manage access to system:
/etc/ftpd/ftpaccess
/etc/ftpd/ftphosts
/etc/ftpd/ftpgroups
ProFTPD uses the "Limit" context to configure access.
For backward compatibility /etc/ftpd/ftpusers is provided and
/etc/ftpusers is symlink to /etc/ftpd/ftpusers. It is used if
UseFtpUsers is set to "on" which is the default setting.
2.1. Anonymous access
In WU-FTPD anonymous access is enabled by the ftpconfig(1M) command
which also created the necessary chroot(1M) environment. ProFTPD does
not need chroot(1M) as all access management is handled as part of the
"Anonymous" context.
2.2. Allow/deny retrieve of files
In ProFTPD it is possible to manage access to files on a per-directory
basis with .ftpaccess files.
2.3. Control of download/upload size
Directives are provided for control of download and upload size:
MaxRetrieveFileSize - size of downloaded files
MaxStoreFileSize - size of uploaded files
2.4. Maximum login failures before terminating the FTP connection
MaxLoginAttempts controls the maximum number of login failures. The
default is 3.
3. Virtual host configuration
ProFTPD provides a comprehensive set of directives to manage virtual
FTP servers. Refer to the VirtualHost documentation for details.
4. Other options
Other common WU-FTPD /etc/ftpd/ftpaccess options are configured in
ProFTPD as follows:
4.1. Connection management
4.1.1. Limit IP address on which FTP server listens
For a standalone FTP server DefaultAddress configures the listener
address. For virtual servers the IP addresses are part of the
VirtualHost context.
4.1.2. IP Class of Service setup
ProFTPD does not support manipulation of IP Class of Service within FTP
server implementation.
4.1.3. Keepalive
ProFTPD always sets the SO_KEEPALIVE socket option.
4.1.4. TCP window size
Directives are provided for control of socket options:
SocketOptions - tune socket-level options, including
TCP send/receive window sizes.
4.1.5. Enable/disable reverse remote host lookup
Reverse DNS lookup is configured using UseReverseDNS, the default is
"on".
4.2. Session management
4.2.1. Timeouts management
ProFTPD provides the following set of timeouts:
TimeoutIdle - the idle connection timeout
TimeoutLinger - the timeout used for lingering closes
TimeoutLogin - the login timeout
TimeoutNoTransfer - the connection without data transfer timeout
TimeoutSession - the timeout for the whole session
TimeoutStalled - the timeout on stalled downloads
4.2.2. banner option
The DisplayConnect directive configures an ASCII text filename which
will be displayed to the user when they initially connect but before
they login.
4.2.3. message option
Two directives are provided:
DisplayLogin - for message file after login
DisplayChdir - for message file after every chdir
4.2.4. Control of list options
ProFTPD does not allow the use of an external command to generate
directory listings. Listing output is controlled by ListOptions.
4.3. Process management
4.3.1. Setting nice(1)
ProFTPD does not provide an interface for changing the nice value. The
nice value needs to managed outside of ProFTPD for example using the
nice(1) command.
4.3.2. Setting umask
Use the Umask directive.
4.3.3. E-mail notification for uploads
ProFTPD provides /usr/sbin/ftpmail script which reads TranferLog
entries and sends e-mail notifications when uploads occur.
4.3.4. Shutdown management
ftpshut(1M) and ftprestart(1M) commands are provided. The file
monitored by FTP server is set to /etc/shutmsg and it is not possible
to configure the path.
4.4. Log options
The ProFTPD mod_log module handles logging. By default it uses
syslogd(1M). Control of the log format is provided by the LogFormat
directive.
4.5. Kerberos support
ProFTPD supports Kerberos authentication through the mod_gss module.
4.6. Miscellaneous options
4.6.1. cdpath
Provided by the CDPath directive.
4.7. Removed options
4.7.1 alias
Aliasing of directory paths is not provided by ProFTPD.
4.7.2 ftpconversion and compress
ftpconversion is not supported by ProFTPD. For compression external
modules mod_deflate and mod_gzipfs can be used but they are not
provided in the Solaris default installation.
4.7.3. SITE EXEC
SITE EXEC is not provided by ProFTPD. Consider using other more secure
methods for command execution.
4.7.4. quota-info
quota-info option replacement is not provided by ProFTPD.
4.7.5. passive address
passive address option replacement is not provided by ProFTPD.
-- end --
O网页链接
基于 wu-ftpd 分发的旧 FTP 服务器已由 proftpd 服务器替换。/usr/share/doc/proftpd/proftpd_migration.txt 中介绍了从旧服务到新服务的配置信息迁移。
http://www.proftpd.org/docs/configs/anonymous.conf
