OpenSUSE 13.2 における PureFTPd と MySQL を用いた仮想ホスティング (クォータと帯域幅管理を含む)

zypper install mariadb mariadb-client apache2 apache2-mod_php5 php5-mysql php5-mcrypt php5-mbstring php5-gd

server1:~ # zypper install mariadb mariadb-client apache2 apache2-mod_php5 php5-mysql php5-mcrypt php5-mbstring php5-gd  
Loading repository data...  
Reading installed packages...  
Resolving package dependencies...  
  
Problem: php5-mysql-5.6.1-4.1.x86_64 requires php5 = 5.6.1, but this requirement cannot be provided  
  uninstallable providers: php5-5.6.1-1.1.x86_64[openSUSE-13.2-0]  
                   php5-5.6.1-1.1.i586[repo-oss]  
                   php5-5.6.1-1.1.x86_64[repo-oss]  
                   php5-5.6.1-4.1.i586[repo-update]  
                   php5-5.6.1-4.1.x86_64[repo-update]  
  Solution 1: Following actions will be done:  
  do not install php5-mysql-5.6.1-4.1.x86_64  
  do not install php5-mcrypt-5.6.1-4.1.x86_64  
  do not install php5-gd-5.6.1-4.1.x86_64  
  Solution 2: Following actions will be done:  
  do not install php5-mcrypt-5.6.1-4.1.x86_64  
  do not install apache2-mod_php5-5.6.1-4.1.x86_64  
  do not install php5-gd-5.6.1-4.1.x86_64  
  do not install php5-mbstring-5.6.1-4.1.x86_64  
  do not install php5-mysql-5.6.1-4.1.x86_64  
  Solution 3: Following actions will be done:  
  do not install php5-mcrypt-5.6.1-4.1.x86_64  
  do not install apache2-mod_php5-5.6.1-4.1.x86_64  
  do not install php5-gd-5.6.1-4.1.x86_64  
  do not install php5-mbstring-5.6.1-4.1.x86_64  
  Solution 4: Following actions will be done:  
  do not install php5-mcrypt-5.6.1-4.1.x86_64  
  do not install apache2-mod_php5-5.6.1-4.1.x86_64  
  do not install php5-gd-5.6.1-4.1.x86_64  
  do not install php5-mbstring-5.6.1-4.1.x86_64  
  Solution 5: Following actions will be done:  
  do not install php5-mcrypt-5.6.1-4.1.x86_64  
  do not install apache2-mod_php5-5.6.1-4.1.x86_64  
  do not install php5-gd-5.6.1-4.1.x86_64  
  do not install php5-mbstring-5.6.1-4.1.x86_64  
  Solution 6: Following actions will be done:  
  do not install php5-mcrypt-5.6.1-4.1.x86_64  
  do not install apache2-mod_php5-5.6.1-4.1.x86_64  
  do not install php5-gd-5.6.1-4.1.x86_64  
  do not install php5-mbstring-5.6.1-4.1.x86_64  
  Solution 7: deinstallation of patterns-openSUSE-minimal_base-conflicts-20141007-2.1.x86_64  
  Solution 8: break php5-mysql-5.6.1-4.1.x86_64 by ignoring some of its dependencies  
  
Choose from above solutions by number or cancel [1/2/3/4/5/6/7/8/c] (c): <--7

systemctl enable mysql.service  
systemctl start mysql.service

mysql_secure_installation

server1:~ # mysql_secure_installation  
/usr/bin/mysql_secure_installation: line 379: find_mysql_client: command not found  
  
NOTE: RUNNING ALL PARTS OF THIS SCRIPT IS RECOMMENDED FOR ALL MariaDB  
      SERVERS IN PRODUCTION USE!  PLEASE READ EACH STEP CAREFULLY!  
  
In order to log into MariaDB to secure it, we'll need the current  
password for the root user.  If you've just installed MariaDB, and  
you haven't set the root password yet, the password will be blank,  
so you should just press enter here.  
  
Enter current password for root (enter for none):   
OK, successfully used password, moving on...  
  
Setting the root password ensures that nobody can log into the MariaDB  
root user without the proper authorisation.  
  
Set root password? [Y/n] <--ENTER  
New password: <--mariadbpassword  
Re-enter new password: <--mariadbpassword  
Password updated successfully!  
Reloading privilege tables..  
 ... Success!  
  
By default, a MariaDB installation has an anonymous user, allowing anyone  
to log into MariaDB without having to have a user account created for  
them.  This is intended only for testing, and to make the installation  
go a bit smoother.  You should remove them before moving into a  
production environment.  
  
Remove anonymous users? [Y/n] <--ENTER  
 ... Success!  
  
Normally, root should only be allowed to connect from 'localhost'.  This  
ensures that someone cannot guess at the root password from the network.  
  
Disallow root login remotely? [Y/n] <--ENTER  
 ... Success!  
  
By default, MariaDB comes with a database named 'test' that anyone can  
access.  This is also intended only for testing, and should be removed  
before moving into a production environment.  
  
Remove test database and access to it? [Y/n] <--ENTER  
 - Dropping test database...  
 ... Success!  
 - Removing privileges on test database...  
 ... Success!  
  
Reloading the privilege tables will ensure that all changes made so far  
will take effect immediately.  
  
Reload privilege tables now? [Y/n] <--ENTER  
 ... Success!  
  
Cleaning up...  
  
All done!  If you've completed all of the above steps, your MariaDB  
installation should now be secure.  
  
Thanks for using MariaDB!  
server1:~ #

systemctl enable apache2.service  
systemctl start apache2.service

zypper install phpmyadmin

vi /etc/apache2/conf.d/phpMyAdmin.conf

Alias /phpMyAdmin /srv/www/htdocs/phpMyAdmin
Alias /phpmyadmin /srv/www/htdocs/phpMyAdmin
[...]  

#  
#    Options None  
#    AllowOverride None  
#    Order deny,allow  
#   Deny from all  
#  
  
  
Options None  
AllowOverride None  
Require all denied  

cd /srv/www/htdocs/phpMyAdmin  
cp config.sample.inc.php config.inc.php

[...]  
$cfg['Servers'][$i]['pmadb']               = 'phpmyadmin';  
[...]  

echo "create database phpmyadmin;" | mysql -u root -p 'mariadbpassword'

mysql -u root -p 'mariadbpassword' < /usr/share/doc/packages/phpMyAdmin/examples/create_tables.sql

systemctl enable apache2.service  
systemctl restart apache2.service

zypper install pure-ftpd

groupadd -g 2001 ftpgroup  
useradd -u 2001 -s /bin/false -d /bin/null -c "pureftpd user" -g ftpgroup ftpuser

mysql -u root -p

CREATE DATABASE pureftpd;  
GRANT SELECT, INSERT, UPDATE, DELETE, CREATE, DROP ON pureftpd.* TO 'pureftpd'@'localhost' IDENTIFIED BY 'ftpdpass';  
GRANT SELECT, INSERT, UPDATE, DELETE, CREATE, DROP ON pureftpd.* TO 'pureftpd'@'localhost.localdomain' IDENTIFIED BY 'ftpdpass';  
FLUSH PRIVILEGES;

USE pureftpd;

CREATE TABLE `ftpd` (  
User varchar(16) NOT NULL default '',  
status enum('0','1') NOT NULL default '0',  
Password varchar(64) NOT NULL default '',  
Uid varchar(11) NOT NULL default '-1',  
Gid varchar(11) NOT NULL default '-1',  
Dir varchar(128) NOT NULL default '',  
ULBandwidth smallint(5) NOT NULL default '0',  
DLBandwidth smallint(5) NOT NULL default '0',  
comment tinytext NOT NULL,  
ipaccess varchar(15) NOT NULL default '*',  
QuotaSize smallint(5) NOT NULL default '0',  
QuotaFiles int(11) NOT NULL default 0,  
PRIMARY KEY (User),  
UNIQUE KEY User (User)  
)  ENGINE=MyISAM;

quit;

vi /etc/pure-ftpd/pure-ftpd.conf

[...]  
ChrootEveryone              yes  
[...]  
AnonymousOnly               no  
[...]  
MySQLConfigFile              /etc/pure-ftpd/pureftpd-mysql.conf  
[...]  
CreateHomeDir               yes  
[...]  

vi /etc/pure-ftpd/pureftpd-mysql.conf

MYSQLSocket      /var/run/mysql/mysql.sock  
#MYSQLServer     localhost  
#MYSQLPort       3306  
MYSQLUser       pureftpd  
MYSQLPassword   ftpdpass  
MYSQLDatabase   pureftpd  
#MYSQLCrypt md5, cleartext, crypt() or password() - md5 is VERY RECOMMENDABLE uppon cleartext  
MYSQLCrypt      md5  
MYSQLGetPW      SELECT Password FROM ftpd WHERE User="\L" AND status="1" AND (ipaccess = "*" OR ipaccess LIKE "\R")  
MYSQLGetUID     SELECT Uid FROM ftpd WHERE User="\L" AND status="1" AND (ipaccess = "*" OR ipaccess LIKE "\R")  
MYSQLGetGID     SELECT Gid FROM ftpd WHERE User="\L"AND status="1" AND (ipaccess = "*" OR ipaccess LIKE "\R")  
MYSQLGetDir     SELECT Dir FROM ftpd WHERE User="\L"AND status="1" AND (ipaccess = "*" OR ipaccess LIKE "\R")  
MySQLGetBandwidthUL SELECT ULBandwidth FROM ftpd WHERE User="\L"AND status="1" AND (ipaccess = "*" OR ipaccess LIKE "\R")  
MySQLGetBandwidthDL SELECT DLBandwidth FROM ftpd WHERE User="\L"AND status="1" AND (ipaccess = "*" OR ipaccess LIKE "\R")  
MySQLGetQTASZ   SELECT QuotaSize FROM ftpd WHERE User="\L"AND status="1" AND (ipaccess = "*" OR ipaccess LIKE "\R")  
MySQLGetQTAFS   SELECT QuotaFiles FROM ftpd WHERE User="\L"AND status="1" AND (ipaccess = "*" OR ipaccess LIKE "\R")  

systemctl enable pure-ftpd  
systemctl start pure-ftpd

mysql -u root -p

USE pureftpd;

INSERT INTO `ftpd` (`User`, `status`, `Password`, `Uid`, `Gid`, `Dir`, `ULBandwidth`, `DLBandwidth`, `comment`, `ipaccess`, `QuotaSize`, `QuotaFiles`) VALUES ('exampleuser', '1', MD5('secret'), '2001', '2001', '/home/www.example.com', '100', '100', '', '*', '50', '0');

quit;

ls -l /home/

server1:~ # ls -l /home/  
total 0  
drwxr-xr-x 1 administrator users    128 Nov  7 14:30 administrator  
drwxr-xr-x 1 ftpuser       ftpgroup  18 Nov 19 14:32 www.example.com  
server1:~ #

vi /etc/passwd

[...]  
#ftp:x:40:49:FTP account:/srv/ftp:/bin/bash  
ftp:x:40:49:FTP account:/home/ftp:/bin/bash  
[...]  

mv /srv/ftp /home

chown ftp:nobody /home/ftp  
cd /home/ftp  
mkdir incoming  
chown ftp:nobody incoming/  
chmod 311 incoming/  
cd ../  
chmod 555 ftp/

vi /etc/pure-ftpd/pure-ftpd.conf

[...]  
NoAnonymous                 no

[...]  
AnonymousBandwidth            8  
[...]  
AnonymousCantUpload         no  
[...]  

systemctl restart pure-ftpd.service