{"id":2673,"date":"2016-10-02T08:40:46","date_gmt":"2016-10-02T06:40:46","guid":{"rendered":"http:\/\/www.extradrm.com\/?p=2673"},"modified":"2016-11-20T22:53:44","modified_gmt":"2016-11-20T20:53:44","slug":"install-ftp-server-with-pureftpd-and-mysql","status":"publish","type":"post","link":"https:\/\/www.extradrm.com\/?p=2673","title":{"rendered":"Install FTP server with PureFTPd and MySQL on Debian"},"content":{"rendered":"

Install MySQL<\/h2>\n

> sudo apt-get install mysql-server<\/p>\n

During the installation process, you will be prompted to set a password for the MySQL root user as shown below. Choose a strong password and keep it in a safe place for future reference. MySQL will bind to localhost (127.0.0.1) by default.<\/p>\n

Install\u00a0interactive process viewer Htop<\/h2>\n

>sudo apt-get install htop
\n\"pureftpd004\"<\/a><\/p>\n

Install and Setting Up phpMyAdmin<\/h2>\n
    \n
  1. Install the current version of phpMyAdmin:\n
    \n\n\n\n
    \n
    1<\/pre>\n<\/td>\n
    		\n
    sudo apt-get install phpmyadmin<\/pre>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n
    You will be asked which server to automatically configure phpMyAdmin for. Select \u201capache2.\u201d When asked to configure database for phpmyadmin with dbconfig-common, select yes.<\/li>\n<\/ol>\n
    Using MySQL<\/h2>\n
    The standard tool for interacting with MySQL is the mysql<\/code> client which installs with the mysql-server<\/code> package. The MySQL client is used through a terminal.
    \n* If you are more confortable with Gui interface so Phpmyadim was installed too (http:\/\/yourIP\/phpmyadmin<\/strong>)<\/p>\n
    Root Login<\/h3>\n
      \n
    1. To log in to MySQL as the root user:\n
      \n\n\n\n
      \n
      1<\/pre>\n<\/td>\n
      		\n
      mysql -u root -p<\/pre>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/li>\n
    2. When prompted, enter the root password. You\u2019ll then be presented with a welcome header and the MySQL prompt as shown below:\n
      \n\n\n\n
      \n
      1<\/pre>\n<\/td>\n
      		\n
      mysql><\/pre>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/li>\n<\/ol>\n
      Now we create a database called<\/strong> pureftpd<\/i><\/span> and a MySQL user named pureftpd<\/span><\/i> which the PureFTPd daemon will use later on to connect to the pureftpd<\/i><\/span> database: <\/span><\/p>\n
      mysql -u root -p
      \nmysql> CREATE DATABASE pureftpd;<\/span><\/i><\/span><\/p>\n
      GRANT SELECT, INSERT, UPDATE, DELETE, CREATE, DROP ON pureftpd.* TO ‘pureftpd’@’localhost’ IDENTIFIED BY ‘ftpdpass’;<\/p>\n
      GRANT SELECT, INSERT, UPDATE, DELETE, CREATE, DROP ON pureftpd.* TO ‘pureftpd’@’localhost.localdomain’ IDENTIFIED BY ‘ftpdpass’;<\/p>\n
      FLUSH PRIVILEGES;<\/p>\n
      Next we create a custom mysql Table according to our needs and the options explained below …<\/strong><\/span><\/p>\n
      CREATE TABLE `users<\/strong>` (\r\n `Id` int(11) NOT NULL auto_increment,\r\n `User` varchar(32) NOT NULL default '',\r\n `Password` varchar(64) NOT NULL default '',\r\n `Uid` int(3) NOT NULL default '2001<\/strong>',\r\n `Gid` int(3) NOT NULL default '2001<\/strong>',\r\n `Dir` varchar(255) NOT NULL default '',\r\n `QuotaSize` int(4) NOT NULL default '250',\r\n `ULBandwidth` int(2) NOT NULL default '100',\r\n `DLBandwidth` int(2) NOT NULL default '100',\r\n PRIMARY KEY\u00a0 (`ID`),\r\n UNIQUE KEY `User` (`User`)\r\n);<\/pre>\n
       <\/p>\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
      Column<\/th>\nDescription<\/th>\n<\/tr>\n
      user<\/td>\nThe name of the virtual PureFTPd user<\/td>\n<\/tr>\n
      status<\/td>\n0 or 1. 0 means the account is disabled, the user cannot login.<\/td>\n<\/tr>\n
      password<\/td>\nThe password of the virtual user. Make sure you use MySQL’s encrypt function to save the password in encrypted form<\/td>\n<\/tr>\n
      uid<\/td>\nThe userid of the ftp user you created at the end of step two (e.g. 2001).<\/td>\n<\/tr>\n
      gid<\/td>\nThe groupid of the ftp group you created at the end of step two (e.g. 2001).<\/td>\n<\/tr>\n
      dir<\/td>\nThe home directory of the virtual PureFTPd user (e.g. \/home\/www.example.com). If it does not exist, it will be created when the new user logs in the first time via FTP. The virtual user will be jailed into this home directory, i.e., he cannot access other directories outside his home directory.<\/td>\n<\/tr>\n
      ulbandwidth<\/td>\nUpload bandwidth of the virtual user in KB\/sec. (kilobytes per second). 0 means unlimited.<\/td>\n<\/tr>\n
      dlbandwidth<\/td>\nDownload bandwidth of the virtual user in KB\/sec. (kilobytes per second). 0 means unlimited.<\/td>\n<\/tr>\n
      comment<\/td>\nYou can enter any comment here (e.g. for your internal administration) here. Normally you leave this field empty.<\/td>\n<\/tr>\n
      ipaccess<\/td>\nEnter IP addresses here that are allowed to connect to this FTP account. * means any IP address is allowed to connect.<\/td>\n<\/tr>\n
      quotasize<\/td>\nStorage space in MB<\/strong> (not KB, as in ULBandwidth and DLBandwidth!) the virtual user is allowed to use on the FTP server. 0 means unlimited.<\/td>\n<\/tr>\n
      quotafiles<\/td>\namount of files the virtual user is allowed to save on the FTP server. 0 means unlimited.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
      Insert a new User in the Database \/ Note Password MD5 or ClearText :<\/h4>\n
      INSERT INTO `users` ( `User` , `Password` , `Uid` , `Gid` , `Dir`, `Quotasize`,`ULBandwidth`, `ULBandwidth` )\r\nVALUES ('web', MD5( 'PASS_FTP_USER' ) , '2001', '2001', '\/home\/ftp\/users\/U1', `250`, `0`, `0`);<\/pre>\n
      Install PureFTPd With MySQL Support<\/h3>\n
      > sudo apt-get install pure-ftpd pure-ftpd-common<\/p>\n
      > sudo apt-get install pure-ftpd-mysql<\/p>\n
       <\/p>\n
      Then we create a ftp group (ftpgroup<\/i>) and user (ftpuser<\/i>) that all virtual users will be mapped to. Replace the group and userid 2001 with a number that is free on your system:<\/p>\n
      > groupadd -g 2001 ftpgroup\r\n> useradd -u 2001 -s \/bin\/false -d \/bin\/null -c \"pureftpd user\" -g ftpgroup ftpuser<\/pre>\n
      Assign Linux rights to the user Folder :<\/strong><\/span>
      \n> sudo mkdir \/home\/ftpuser\/test1<\/em><\/p>\n
      > sudo chown -R ftpuser:ftpgroup \/home\/ftpuser\/test1<\/em><\/p>\n
      <\/h3>\n
      The configuration files of Pure-FTPd<\/h3>\n
      All files on the FTP server are in \/ etc \/ pure-ftpd \/, configuration files are in the “conf” folder and file for the database is in “db”.<\/p>\n
      Unlike users you can add or remove without restarting the server, when you edit a configuration file, remember to reload the configuration with the following command.<\/p>\n
      \/etc\/init.d\/pure-ftpd-mysql force-reload<\/pre>\n
      The configuration files are in \/ etc \/ pure-ftpd \/ conf.<\/strong><\/p>\n
      The default configuration contains 7 files.<\/p>\n
      – AltLog: file to configure the location of logs<\/p>\n
      – FSCharset: file for setting the character encoding (UTF8 etc …)<\/p>\n
      – MINUID: file to indicate the minimum UID has access to the server.<\/p>\n
      – Noanonymous: file to indicate whether to allow or not the anonymous FTP.<\/p>\n
      – PAMAuthentication: file to indicate whether to allow or not authentication PAM.<\/p>\n
      – PureDB: file to specify the path to the database of virtual accounts.<\/p>\n
      – UnixAuthentication: file to indicate whether to allow or not the standard Unix authentication.
      \nAdditional files to create :<\/strong><\/span>
      \n–\u00a0MaxIdleTime :<\/span><\/strong> Set the timeout by adding a file called “MaxIdleTime” inside the conf directory The content of the file should be the number of minutes you like to set the timeout to be. Afterwards just restart your server.<\/p>\n
      echo 10 > \/etc\/pure-ftpd\/conf\/MaxIdleTime<\/code><\/pre>\n
      – PassivePortRange<\/code><\/span><\/strong> : If you run a firewall on your Linux server and want to use passive FTP connections, you have to define the passive port range in pure-ftpd and your firewall to ensure that the connections dont get blocked. The following example is for pure-ftpd on Debian Linux :<\/p>\n
      echo \"40110 40210\" > \/etc\/pure-ftpd\/conf\/PassivePortRange\r\n\/etc\/init.d\/pure-ftpd-mysql restart<\/code><\/pre>\n
      \"pureftpd003\"<\/a>
      \n<\/strong><\/p>\n
      Next Update the file \/etc\/pure-ftpd\/conf\/ChrootEveryone<\/i> which simply contains the string yes, and which will make PureFTPd chroot every virtual user in his home directory so he will not be able to browse directories and files outside his home directory<\/p>\n
      > echo \"yes\" > \/etc\/pure-ftpd\/conf\/ChrootEveryone<\/pre>\n
      Next Update the file \/etc\/pure-ftpd\/conf\/NoAnonymous<\/i> to forbid this type of connexion<\/p>\n
      > echo \"yes\" > \/etc\/pure-ftpd\/conf\/NoAnonymous<\/i><\/pre>\n
      Next Update the file \/etc\/pure-ftpd\/conf\/MinUID<\/i> which simply contains the string yes, and which will make PureFTPd chroot every virtual user in his home directory so he will not be able to browse directories and files outside his home directory<\/p>\n
      > echo \"yes\" > \/etc\/pure-ftpd\/conf\/ChrootEveryone<\/pre>\n
      Also Update the file \/etc\/pure-ftpd\/conf\/CreateHomeDir<\/i> which again simply contains the string yes. This will make PureFTPd create a user’s home directory when the user logs in and the home directory does not yet exist.<\/p>\n
      > echo \"yes\" > \/etc\/pure-ftpd\/conf\/CreateHomeDir<\/pre>\n
      \"pureftpd002\"<\/a><\/p>\n
      Now we must configure PureFTPd as a standalone daemon (it is currently controlled by inetd). To do this, we open \/etc\/default\/pure-ftpd-common<\/i> and change the value of the parameter STANDALONE_OR_INETD to standalone<\/strong>:<\/p>\n
      > sudo nano \/etc\/default\/pure-ftpd-common<\/pre>\n
      Next, we modify \/etc\/inetd.conf<\/i> and comment out the ftp line so that it looks like this:<\/p>\n
      #:STANDARD: These are standard services.\r\n#ftp    stream  tcp nowait  root    \/usr\/sbin\/tcpd \/usr\/sbin\/proftpd<\/pre>\n
      Now restart Inetd and PureFTPd mysql :<\/strong><\/h2>\n
      > \/etc\/init.d\/openbsd-inetd restart\r\n> \/etc\/init.d\/pure-ftpd-mysql restart<\/pre>\n
      \"pureftpd001\"<\/a><\/p>\n
      Configure PureFTPd with mysql<\/h3>\n
      In the folder “conf”, edit the file MySQLConfigFile to put the path to the configuration file we will create: \/etc\/pure-ftpd\/db\/pure-ftpd-mysql.conf
      \nCreate the MySQL configuration file<\/p>\n
      Now we create the \/etc\/pure-ftpd\/db\/pure-ftpd-mysql.conf configuration file that will be used to indicate the connection information between the FTP server and MySQL.<\/p>\n
      nano \/etc\/pure-ftpd\/db\/pure-ftpd-mysql.conf<\/p>\n\n\n\n
      \n
      MYSQLSocket      \/var\/run\/mysqld\/mysqld.sock\r\n#MYSQLServer     localhost\r\n#MYSQLPort       3306\r\nMYSQLUser       pureftpd\r\nMYSQLPassword   ftpdpass\r\nMYSQLDatabase   pureftpd\r\n#MYSQLCrypt md5, cleartext, crypt() or password() - md5 is VERY RECOMMENDABLE uppon cleartext\r\nMYSQLCrypt      md5\r\nMYSQLGetPW      SELECT Password FROM ftpd WHERE User=\"\\L\" AND status=\"1\" AND (ipaccess = \"*\" OR ipaccess LIKE \"\\R\")\r\nMYSQLGetUID     SELECT Uid FROM ftpd WHERE User=\"\\L\" AND status=\"1\" AND (ipaccess = \"*\" OR ipaccess LIKE \"\\R\")\r\nMYSQLGetGID     SELECT Gid FROM ftpd WHERE User=\"\\L\"AND status=\"1\" AND (ipaccess = \"*\" OR ipaccess LIKE \"\\R\")\r\nMYSQLGetDir     SELECT Dir FROM ftpd WHERE User=\"\\L\"AND status=\"1\" AND (ipaccess = \"*\" OR ipaccess LIKE \"\\R\")\r\nMySQLGetBandwidthUL SELECT ULBandwidth FROM ftpd WHERE User=\"\\L\"AND status=\"1\" AND (ipaccess = \"*\" OR ipaccess LIKE \"\\R\")\r\nMySQLGetBandwidthDL SELECT DLBandwidth FROM ftpd WHERE User=\"\\L\"AND status=\"1\" AND (ipaccess = \"*\" OR ipaccess LIKE \"\\R\")\r\nMySQLGetQTASZ   SELECT QuotaSize FROM ftpd WHERE User=\"\\L\"AND status=\"1\" AND (ipaccess = \"*\" OR ipaccess LIKE \"\\R\")\r\nMySQLGetQTAFS   SELECT QuotaFiles FROM ftpd WHERE User=\"\\L\"AND status=\"1\" AND (ipaccess = \"*\" OR ipaccess LIKE \"\\R\")<\/pre>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
      Make sure that you replace the string ftpdpass with the real password for the MySQL user pureftpd in the line MYSQLPassword! Please note that we use md5 as MYSQLCrypt method, which means we will store the users’ passwords as an MD5 string in the database which is far more secure than using plain text passwords!<\/p>\n
      For a more simple table in clear text without IP control\u00a0 ans status the content of this file is :<\/p>\n
      #Database connexion\r\nMYSQLServer 127.0.0.1\r\nMYSQLUser pureftpd\r\nMYSQLPassword pwdftp\r\nMYSQLDatabase pureftpd#Parametres supplementaires\r\nMYSQLPort 3306\r\nMYSQLSocket \/var\/lib\/mysql\/mysql.sock# Methode de cryptage du mot de passe\r\n# Parametres possible : 'crypt', 'md5' ou 'cleartext' pour afficher le mot de passe en clair.\r\nMYSQLCrypt cleartext# Requetes SQL permettant a Pure-FTPd de trouver les donnees dans la base\r\nMYSQLGetPW SELECT Password FROM users WHERE User=\"\\L\"\r\nMYSQLGetUID SELECT Uid FROM users WHERE User=\"\\L\"\r\nMYSQLGetGID SELECT Gid FROM users WHERE User=\"\\L\"\r\nMYSQLGetDir SELECT Dir FROM users WHERE User=\"\\L\"\r\nMySQLGetQTASZ SELECT QuotaSize FROM users WHERE User=\"\\L\"\r\nMySQLGetRatioUL SELECT ULRatio FROM users WHERE User=\"\\L\"\r\nMySQLGetRatioDL SELECT DLRatio FROM users WHERE User=\"\\L\"\r\nMySQLGetBandwidthUL SELECT ULBandwidth FROM users WHERE User=\"\\L\"\r\nMySQLGetBandwidthDL SELECT DLBandwidth FROM users WHERE User=\"\\L\"<\/pre>\n
       <\/p>\n
      Think to Protect Access<\/strong> to Passwords mysql in File pure-ftpd-mysql.conf<\/p>\n
      > chmod 640 pure-ftpd-mysql.conf<\/pre>\n
      Problem on CreateHomeDir :<\/strong><\/span><\/p>\n
      When Virtual user try to connect :
      \nthey may get this error \u201cHome directory not available \u2013 abort<\/strong>\u201d even if they set CreateHomeDir to yes.<\/p>\n
      Solution:
      \nthe last existing in the home path should be own by root.
      \nfor example, we want to create somebody\u2019s home directory when he log in, \/home\/ftpuser<\/strong>\/somebody
      \nthen the last existing directory \u2018ftpuer\u2019 may look like this,<\/p>\n
      drwxr-xr-x 2 root ftpgroup 4096 2008-04-15 11:20 ftpuser<\/strong><\/p>\n
      Showing Another example :<\/strong><\/span><\/p>\n
      sudo mkdir \/home\/ftp<\/p>\n
      sudo chown root:groupftp \/home\/ftp
      \n\"pureftpd005\"<\/a><\/p>\n
      In case CreateHomeDir is set to no, Assign Linux rights to the user Folder :<\/strong>
      \n> sudo mkdir \/home\/ftpuser\/test1<\/em><\/p>\n
      > sudo chown -R ftpuser:ftpgroup \/home\/ftpuser\/test1<\/em><\/p>\n
       <\/p>\n
      Uninstall pure-ftpd-common<\/h2>\n
      To remove just pure-ftpd-common package itself from Debian 7 (Wheezy) execute on terminal:<\/p>\n
      sudo apt-get remove pure-ftpd-common<\/pre>\n
      Uninstall pure-ftpd-common and it’s dependent packages<\/h2>\n
      To remove the pure-ftpd-common package and any other dependant package which are no longer needed from Debian Wheezy.<\/p>\n
      sudo apt-get remove --auto-remove pure-ftpd-common<\/pre>\n
      Uninstall pure-ftpd-mysql too<\/h2>\n
      apt-get --purge remove pure-ftpd-mysql\r\napt-get --purge remove pure-ftpd<\/code><\/pre>\n
      Purging pure-ftpd-common<\/h2>\n
      If you also want to delete configuration and\/or data files of pure-ftpd-common from Debian Wheezy then this will work:<\/p>\n
      sudo apt-get purge pure-ftpd-common<\/pre>\n
      To delete configuration and\/or data files of pure-ftpd-common and it’s dependencies from Debian Wheezy then execute:<\/p>\n
      sudo apt-get purge --auto-remove pure-ftpd-common<\/pre>\n
      Debian archive repository :<\/strong>
      \n<\/code><\/p>\n
      Anyway, when a config file for an installed package is missing, you can use the following command to force dpkg to reinstall original missing configuration files :<\/p>\n
      dpkg --force-confmiss -i \/var\/cache\/apt\/archives\/pure-ftpd-mysql_1.0.24-1_i386.deb\r\n<\/strong><\/code><\/pre>\n
      When use want a complete removing of a package you need to purge it (usually it means removing also config files).<\/p>\n
      aptitude purge pure-ftpd-mysql\r\n<\/code><\/pre>\n
      Assuming you don’t have done an:<\/p>\n
      apt-get clean\r\n<\/code><\/pre>\n
      that remove the cache …<\/p>\n
      Starting ans checking service pure-ftpd<\/h2>\n
      ps uaxf|grep pure-ftpd\r\nservice pure-ftpd restart\r\nservice pure-ftpd status<\/pre>\n
      Remove a directory recursively with all files inside :<\/strong><\/span>
      \nrm -rf mydir<\/p>\n
      Get a list of Open Ports in Linux<\/strong><\/span><\/p>\n
      \n
      netstat -lntu\r\n<\/code><\/pre>\n
      as replied by @askmish will give you list of services running on your system on tcp and udp ports where<\/p>\n
        \n
      • -l<\/code> = only services which are listening on some port<\/li>\n
      • -n<\/code> = show port number, don’t try to resolve the service name<\/li>\n
      • -t<\/code> = tcp ports<\/li>\n
      • -u<\/code> = udp ports<\/li>\n
      • -p<\/code> = name of the program<\/li>\n<\/ul>\n
        You don’t need the ‘p’ parameter as you’re only interested in getting which ports are free and not which program is running on it.<\/p>\n
        This only shows which ports on your system are used up, though. This doesn’t tell you the status of your network e.g. if you’re behind NAT and you want some services to be accessible from outside. Or if the firewall is blocking the port for outside visitors. In that case, nmap comes to the rescue. WARNING: Use nmap only on networks which are under your control. Also, there are firewall rules which can block nmap pings, you’ll have to fiddle around with options to get correct results.<\/p>\n
        How to check Firewall Rules :<\/p>\n
        >\u00a0 iptables -L -v<\/p>\n
        https:\/\/www.youtube.com\/watch?v=XMvprnhP6wI<\/p>\n
        Iptables Help :<\/p>\n
        https:\/\/help.ubuntu.com\/community\/IptablesHowTo<\/p>\n<\/div>\n
         <\/p>\n","protected":false},"excerpt":{"rendered":"
        Install MySQL > sudo apt-get install mysql-server During the installation process, you will be prompted to set a password for the MySQL root user as shown below. Choose a strong password and keep it...<\/p>\n","protected":false},"author":1,"featured_media":2843,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[34,14],"tags":[345],"youtube_video":null,"_links":{"self":[{"href":"https:\/\/www.extradrm.com\/index.php?rest_route=\/wp\/v2\/posts\/2673"}],"collection":[{"href":"https:\/\/www.extradrm.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.extradrm.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.extradrm.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.extradrm.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2673"}],"version-history":[{"count":0,"href":"https:\/\/www.extradrm.com\/index.php?rest_route=\/wp\/v2\/posts\/2673\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.extradrm.com\/index.php?rest_route=\/wp\/v2\/media\/2843"}],"wp:attachment":[{"href":"https:\/\/www.extradrm.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2673"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.extradrm.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2673"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.extradrm.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2673"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}