ftp from novell server

[Jay Cantwell]

Good morning everyone...let me present the scenerio, then I will ask my question:

I have a program that ftp to a 10.20 hp from a novell 4.1x server. When the program connects and signs on to the hp using a user account I can see to ftpd daemon activated on the hp side. As you know the default umask for the ftpd is 027, which leaves the files that transferred secured as 'rw-r-----'. I need to have these files secured as
'rw-rw-rw-'.

What can I do to the ftpd on the hp side to change this security. Or do I need to do something the ftp on the novell side, being that is where the ftp is starting. If that is the case does anyone know what can be done to the novell ftp. There is no umask command. thanks for any help you might be able to give....Jay

[James R. Ferguson · Accepted solution]

Jay:

Modify /etc/inetd.conf and change the line:

ftp stream tcp nowait root /usr/lbin/ftpd ftpd -l

to:

ftp stream tcp nowait root /usr/lbin/ftpd ftpd -l -u002

Then do:

# inetd -c

...JRF...

[John Palmer]

To change the default umask of ftpd, you need to amend file /etc/inetd.conf.

Find the line that starts 'ftp ' and add the appropriate -u to the end of the line. So that the string 'ftpd -l' (the default) becomes 'ftpd -l -u '

Then force inetd to reread its config file by typing 'inetd -c'

[Stefan Farrelly]

You need to edit /etc/inetd.conf on the HP box and set the umask for ftp to what you want, eg;

ftp stream tcp nowait root /usr/lbin/ftpd ftpd -l -u 002

[James R. Ferguson]

Jay:

Sorry, make the umask in the last post '000'.

...JRF...

[Antoanetta Naghiu]

In /etc/inetd.conf, at the ftpd line add ftpd -u xxx whatever mask you want.
Restart inetd daemon (inetd -c). See man ftpd for more details.

[Kofi ARTHIABAH]

Jay:

The account that you use to ftp should have the umask set up accordingly. The umask man pages say:

" The umask command sets the value of the file mode creation mask or
displays the current one. The mask affects the initial value of the
file mode (permission) bits for subsequently created files."

ie. any new files created under the user id will inherit the permissions specified by umask.

[CHRIS ANORUO]

Hi Jay,

Before including umask (002), think of the security implecations involved with ftp on your system. You can also enhance this by putting the address in /var/adm/inetd.sec i.e ftpd allow (ip address) as an added security measure.

Cheers!