Sub FTP accounts - home directory overwrite?
Anybody noticing where some (not all) sub FTP virtual users are having their home directory reset?
I don't have a ton of information regarding this - I just noticed it this morning. I suppose it could be something specific to me, but it seems to be happening on all of our servers.
Some users - but not all, which is really weird - appear to have their home directory reset.
For example, an entry in /etc/proftpd/%user% might have:
[plain]subuser1@example.tld:%hash%:%uid%:%gid%:%user%:/home/%user%/subuser1@example.tld:/bin/ftpsh[/plain]
Which I believe should be:
[plain]subuser1@example.tld:%hash%:%uid%:%gid%:%user%:/home/%user%/subuser1:/bin/ftpsh[/plain]
Something appears to be resetting the home directory for this FTP sub user from [plain]/home/%user%/subuser1[/plain] to [plain]/home/%user%/subuser1@example.tld[/plain]
I really can't be certain that the home directories are set wrong... but this seems to be prevalent on multiple servers - so that kind of tells me that something is changing the home directories and I don't think it's the end users.
To see if you have any FTP sub users that have their home directory set to a directory containing an [plain]@[/plain] symbol use:
cat /etc/proftpd/* | awk -F ":" '{print $6}' | grep [plain]@[/plain]
(Although this doesn't necessarily mean those users are wrong... they may have intentionally set their home directory to use an [plain]@[/plain] symbol)
This is on cPanel 11.78.0.24
-
For example, an entry in /etc/proftpd/%user% might have: subuser1@example.tld:%hash%:%uid%:%gid%:%user%:/home/%user%/subuser1@example.tld:/bin/ftpsh Which I believe should be: subuser1@example.tld:%hash%:%uid%:%gid%:%user%:/home/%user%/subuser1:/bin/ftpsh
Hello @sparek-3, I've performed a number of tests (e.g. suspending accounts, changing passwords, creating new FTP users, switching between ProFTPd/PureFTPd, enabling/disabling shell access, forcing cPanel updates) on test servers running cPanel & WHM versions 78 and 80. However, I was unable to reproduce the reported behavior (the document root value for the virtual FTP accounts did not change). We're happy to take a look at one of the affected systems via a0 -
Thanks for looking into this. I really haven't had anyone else complain about this, and I've kind of gotten busy in some other work. I'll see if I can revisit this at some point. It's just weird that it seems to be happening on a lot of different servers - but maybe it's been going on for some time and people just haven't noticed? Maybe it's not something recent. Just really weird. I'll see what else I can dig up on this when I get around to it. 0
Please sign in to leave a comment.
Comments
2 comments