Question

我是Linux的初学者。我正在使用Plesk onyx和17.5.3 Ubuntu 16.04 1705170317.16。我在/etc/proftpd.conf中配置的ExtendedLog无法正常工作。

以下是我的/etc/proftpd.conf

#
 # To have more informations about Proftpd configuration
 # look at : http://www.proftpd.org/
 #

 # This is a basic ProFTPD configuration file (rename it to
 # 'proftpd.conf' for actual use.  It establishes a single server
 # and a single anonymous login.  It assumes that you have a user/group
 # "nobody" and "ftp" for normal operation and anon.

 ServerName                      "ProFTPD"
 #ServerType                     standalone ServerType                      inetd DefaultServer                   on LogFormat nijin "%t %h %u %D
 %f \"%r\" %s %b" ExtendedLog /var/log/ftp.log ALL nijin <Global
 DefaultRoot     ~               psacln AllowOverwrite          on
 <IfModule mod_tls.c
         # common settings for all virtual hosts
         TLSEngine on
         TLSRequired off

         TLSLog /var/log/plesk/ftp_tls.log

         TLSRSACertificateFile /usr/local/psa/admin/conf/httpsd.pem
         TLSRSACertificateKeyFile /usr/local/psa/admin/conf/httpsd.pem

         # Authenticate clients that want to use FTP over TLS?
         TLSVerifyClient off

         # Allow SSL/TLS renegotiations when the client requests them, but
         # do not force the renegotations.  Some clients do not support
         # SSL/TLS renegotiations; when mod_tls forces a renegotiation, these
         # clients will close the data connection, or there will be a timeout
         # on an idle data connection.
         TLSRenegotiate none

         # As of ProFTPD 1.3.3rc1, mod_tls only accepts SSL/TLS data connections
         # that reuse the SSL session of the control connection, as a security measure.
         # Unfortunately, there are some clients (e.g. curl) which do not reuse SSL sessions.
         TLSOptions NoSessionReuseRequired </IfModule PassivePorts 50001 50100 </Global DefaultTransferMode     binary UseFtpUsers      
 on

 TimesGMT                        off SetEnv TZ :/etc/localtime
 # Port 21 is the standard FTP port. Port                            21
 # Umask 022 is a good standard umask to prevent new dirs and files
 # from being group and world writable. Umask                           022

 # To prevent DoS attacks, set the maximum number of child processes
 # to 30.  If you need to allow more than 30 concurrent connections
 # at once, simply increase this value.  Note that this ONLY works
 # in standalone mode, in inetd mode you should use an inetd server
 # that allows you to limit maximum number of processes per service
 # (such as xinetd) MaxInstances                    30

 #Following part of this config file were generate by PSA automatically
 #Any changes in this part will be overwritten by next manipulation
 #with Anonymous FTP feature in PSA control panel.

 #Include directive should point to place where FTP Virtual Hosts configurations
 #preserved

 ScoreboardFile /var/run/proftpd_scoreboard

 # Primary log file mest be outside of system logrotate province

 TransferLog /var/log/plesk/xferlog

 #Change default group for new files and directories in vhosts dir to psacln

 <Directory /var/www/vhosts
         GroupOwner      psacln </Directory

 # Enable PAM authentication AuthPAM on AuthPAMConfig proftpd

 IdentLookups off UseReverseDNS off

 AuthGroupFile   /etc/group

 Include /etc/proftpd.d/*.conf

这是我的自定义配置文件。在我的配置文件中添加了ExtendedLog /var/log/ftp.log。但是尚未创建扩展日志/var/log/ftp.log。我手动触摸此文件但没有用，日志没有填充。

任何答案都将不胜感激。

Answer 1

尝试按照http://www.proftpd.org/docs/directives/linked/config_ref_ExtendedLog.html

的建议，将非世界可写权限设置为/var/log/ftp.log

我已通过以下步骤对其进行了测试，并确实有效：

echo "ExtendedLog /var/log/ftp.log read,write" >> /etc/proftpd.conf
触摸/var/log/ftp.log＆amp;＆amp; chmod 644 /var/log/ftp.log
上传测试文件
查看日志：root@server:/# cat /var/log/ftp.log 192.168.34.219 UNKNOWN mario [14/Jun/2017:11:38:20 +0700] "STOR Google Chrome.lnk" 226 2356

Answer 2

更新：权限设置为664

ProFTPD版本1.3.5d ExtendedLog无法正常工作？

2 个答案: