#
-# Cookbook Name:: FTP
+# Cookbook:: FTP
# Recipe:: default
#
-# Copyright 2018, OpenStreetMap Foundation
+# Copyright:: 2018, OpenStreetMap Foundation
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# limitations under the License.
#
-package "vsftpd"
+package %w[
+ vsftpd
+ libpam-pwdfile
+]
template "/etc/vsftpd.conf" do
source "vsftpd.conf.erb"
mode 0o644
end
+template "/etc/pam.d/vsftpd" do
+ source "pam-vsftpd.erb"
+ owner "root"
+ group "root"
+ mode 0o644
+end
+
service "vsftpd" do
- action [:enable] # Do not start the service as config may be broken from failed chef run
+ action [:enable, :start]
supports :status => true, :restart => true, :reload => true
subscribes :restart, "template[/etc/vsftpd.conf]"
+ subscribes :restart, "template[/etc/pam.d/vsftpd]"
end
firewall_rule "accept-ftp-tcp" do
proto "tcp"
dest_ports "ftp"
source_ports "-"
+ helper "ftp"
end