Security :: Access Dom0 Files During Vsftpd Server From DomU During Ftp Client
Aug 24, 2010
I have CentOS 5.5 distribution with Dom0 and DomU installed. I try to access Dom0 files during vsftpd server from DomU during ftp client. I successfully login with root and simple user, but when I try to list (or cd to some directory) in user home the SELinux prevent it from me. I get this in audit.log:
I have an etch-based Xen server that has several Xen domU's on it. All the domU's are etch or lenny based, but I'd like to install a karmic guest. I use xen-tools to install my domU's - e.g., xen-create-image --debootstrap <etc.>After much googling, I've found bits and pieces of info that have gotten me closer to the goal, but the debootstrap script I have is for hoary (I think etch came with this), and I'm pretty sure this won't work.
If you have been able to successfully install a Karmic guest on an etch or lenny host, I'd be very grateful for pointers.
I'm using virtual network (NAT network) for my domU.When I change dom0's firewall setup, the domU will fail to connect to Internet anymore.So far, the only way to bring the network back is reboot dom0 !I try to restart service network and libvirtd on dom0 ... it doesn't work.How can I bring the domU network back without reboot dom0 ?
Problems with xen 3.1.2 creating and installing domU CentOS 5.5 I am trying to do a virt-install --prompt --paravirt, and the install error out while trying to download install RPMs. I have googled for xen centos virt-install and various permutations. I have found similar howtos for 5.4 and 5.3, but they resulted in the same outcome. I did find several posts with similar issues, but no solution was posted.[URL]..
I have vsftpd running as FTP server on Ubuntu 9.04 jaunty. Login works correctly with password for local users (those with an login account on the server) and without password for anonymous.
I want to further tighten security by requiring local users to provide a client certificate. But even if I include "require_cert=YES" and "validate_cert=YES" in etc/vsftpd.conf, clients without certificate are allowed to login; require_cert seems to be simply ignored.
I currently have 4 Linux Servers installed in a test lab that I have built for my job. I am in the process of trying to get FTP to work (vsftpd is installed). I don't need an FTP GUI or anything, I can use terminal (and I don't have an internet connection, so I probably can't get one anyway). I bring up the terminal and I type FTP and I am presented with a few problems:
1. If I try to FTP to one of the other Linux Servers on the network, I get "No route to host" error.
2. If I try to FTP to the Server I am sitting on, then I am able to successfully connect, obviously. But when I do an "ls," I don't see any available files.
I am assuming this is because I have not yet set up a folder for it (i.e. Windows uses "ftproot" folder). I am running Ubuntu Gnome 9.04 Jaunty Jackalope for a GUI, and I am running Ubuntu Server underneath (Yes I need a GUI for what I am using the server for).
1- I've set up 3 virtual users,one of them is a system one (with a different password) and writes on his own home folder. With this one I haven't found any problems yet, but with the other 2 users I can't access files/folders created by them. It's a permissions problem for sure, but I'm not sure how to correct it.With these users I can upload files, create files and create folders. The problem is I can't access what I create (I can't enter a folder I created but it is there and I can upload files into it).
2- Whenever I turn on ssl_enable=YES I can't access the server (even from the server itself when I connect to localhost, It's a regular Ubuntu installation).Here's the config file for the users:
vsftpd is working fine in my network with anonymous user but i need to access that from out-side all the setting is done on the router. I am getting page to access ftp form out-side but only for ftp users not anonymous user how i will give permeation to access ftp to anonymous user ?
I've only recently encountered this problem with vsftpd when I was creating new ftp accounts. I keep on getting:
550 Access Denied.
on every action I try to do on ftp, no matter what. I've been trying to solve this myself however my attempts have been futile.
The permissions, and ownership have been checked and rechecked tens of times now, so thats not the issue. I've reinstalled the OS of my server twice now, and the problem is still persisting. Heres my config file, this isnt for anon by the way.
Code: # Example config file /etc/vsftpd/vsftpd.conf # # The default compiled in settings are fairly paranoid. This sample file # loosens things up a bit, to make the ftp daemon more usable. # Please see vsftpd.conf.5 for all compiled in defaults. #
Trying to set up VSFTPD on the CentOS 5 box at work, which is an internal web development server. I'm leaving soon, and all knowledge of or desire to learn SSH is going with me so the other employees will need to be able to access the web root using FTP clients.
Essentially there is no need for special user accounts or privileges, it's an internal server in a tiny company. I've got the LocalRoot set to /var/www/ which I can log in to and read all files via FTP, however despite setting everything to 777 in /var/www/ and below, I still can't get any write privileges on the FTP server.
I am trying to wade through the semanage jungle to get permissions for a tftp client. I followed the HowTos [URL] but I get the following at the client:
tftp> status Connected to 192.168.1.101. Mode: netascii Verbose: off Tracing: off Rexmt-interval: 5 seconds, Max-timeout: 25 seconds tftp> get hello.o4 tftp: hello.o4: Permission denied
I finally figured out that the firewall directives shown at the end of the HowTo refer to semanage although the options are stated incorrectly according to the man page for semanage. I did insure that the file hello.o4 in /tftpboot has read permission for everybody.
Seismicmike here. My first post. I'll try to be as clear and concise as possible. For the sake of this post, I'm going to use 1.2.3.4 as a place holder for my public IP. On my web server, I would like to be able to access the /var/ftp directory through a web browser. I have successfully done so with Google Chrome, but I cannot access the directory in Firefox or IE. Both FF and IE ask me for authentication but then time out attempting to load the directory.
I suspect that there may be something up with switching to passive mode and/or that this issue may be more with my configuration of Firefox and not with the server (seeing as how Chrome works). Another possibility may be related to SSL. When I connect with FileZilla, I have to use the FTP over Explicit SSL/TLS option in order to connect. In any case I still would like to fix it. I would also like to avoid having to install FireFTP if at all possible.
Steps to reproduce (not that you can without my actual IP =J):
* Open Chrome * Go to ftp://1.2.3.4 * Enter username * Enter password
I'm having difficulties with uploading files to a CentOS-server with vsftpd. I have the exact same configuration on a Fedora10 and there I have no problems...
I am running FTP server using vsftpd 2.0.5-12 on Centos 5.3 64bit with default settings, annonymous access enabled. Each night new files are created and moved into a FTP subdirectory (/var/ftp/spectra) by a script. The files are owned by a local user/group, not root, and the same holds for the /var/ftp/spectra subdirectory. The new files are not visible via FTP. Only visible are files that were created the same day when I made the directory /var/ftp/spectra. Also files that are created "in place", e.g. by vi, are visible until I change their owner/group. This is the situation when vsftpd is runned as a system service (/etc/init.d/vsftpd start).
When I start the vsftpd directly using the command /usr/sbin/vsftpd (both without or with the configuration file specified), all files are visible and normally accessible via FTP.
I have been searching the web for a few hours and have not had any luck finding instructions on how to setup Xen HVM Dom0 on a CentOS 5.6. I have a test server with a stock install of CentOS 5.6 that support AMD-V.
I'm running a CentOS 5.2 on dom0 and two CentOS 5.2 on domU.The domU use virbr0.I install domU via GUI interface and did not change anything ... the domUcan ping and connect to dom0 but can't access to Internet !!I search google and find someone mentioned that I need to enable IP forwardin dom0 ... I did but my domU still can't access to Internet.What else I need to do ?The routing table of dom0 is:
# route -n Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface
I just install xen and kernel-xen version 2.6.18-194.26.1.el5xen, booting into the xen kernel dom0 shows me continous colorful scrambling and scrolling. I can ssh to dom0 and get correct display but the dom0 console is where it shows the colorful garbage scrolling. i have the Supermicro X7DC motherboard with a XGI Z9 graphics card. GUI is not installed and I don't have the rhgb parameter in my grub.conf. My grub.conf is plain and unmodified.
I want to access ftp server without entering user name and password ,second thing i have create repository on my Installation Server that is redhat os now i have created another server and i want to access that repository so what changes i can do on /etc/yum.repos.d/server.repo file
I installed a new squeeze serverXen Hypervisor runs the server as Dom0 anda virtual Windows XP.The server runs samba, postfix, dovecot, squid, cups and hylafax with a Frritz ISDN card (module fcpci.ko).The used memory of Dom0 rises slowly (about 5MB /h) until the system crashes.As a workaround i installed a reboot every 24 hours.htop shows normal behavior.The system is already in production, so i can't stop services to track this bug.I need some hints how to debug the running system to find out, where the memory gets lots.
I just realized that I can access other users files and they can access my files simply by using the console to navigate the file system, Its not that big a deal, I am the only one using the computer but this seems like something is not configured correctly. Should each user be able to look at and modify each others files by default? (On Xubuntu 10)
I have 2 users: carol, carol2 and 2 files in /: filea, fileb. I want to carol has access only to filea and carol2 only to fileb. I need to do this with MLS (range). I dont want do this with levels because user that is higher has access to both files. How to do that?
I have CentOS 5.3 dual booting with Vista on a machine with AMD-V support. I'm looking to get my existing Vista partition running as a DomU Xen machine. Can this be done without having a dedicated video card?I've got a Xen kernel (from the repositories) installed and running perfectly with my nVidia graphics card. I tried to set up a new DomU through virt-manager and set it up as Vista, pointed it at the physical partition (fakeRAID mapper device) and gave it 2Gb RAM (I have 8Gb total). I got it to do a PXE network boot, knowing that this would fail and therefore no installation would be attempted, as no installation is needed.
This worked well in that the initial PXE boot failed and the machine shut down. When I start it now it seems to actually boot Vista, but I just can't see it! It goes as far as saying "Booting from Hard Disk..." in the viewer window and then doesn't update, although the disk activity and CPU usage are very similar to a machine booting Vista to the login prompt.
I have ssh access to a red hat computer in my network which has internet connectivity. i have downloaded a particular tarball to that computer using wget. Now how can i copy that file to my system.
I had to reinstall Ubuntu (Natty) on a brand new computer and while installing I setup the datas partition to be mounted in /usr but now I can't have access to files I put in there even if I setup the group/user permission! I can accezz /usr/Music but all files are locked
I've just installed Ubuntu 9.10 and Samba 3.4. I've shared a folder and have accessed the share from a Windows 7 client. However, I've struggled to configure the share and folder so that the Win7 client can create files and/or folders in the share. Kept getting Permission Denied errors. Finally, (using Webmin) I set the permissions on the file folder so that "Other" had write access. I don't understand why this was necessary (and how unsecure this is). I already had the write access checkbox ticked for "User" but it wasn't enough.