FTP USER CREATION IN OS 10.20

[Mohammed Imran]

Greetings,
I have checked the old threads for the above but i couldn't get anything in details. Please help how can i crete a user with ftp purpose only, the user can do the ftp from his windows machine to the unix machine.i m grateful to you all if reply posted in the details.
bye

[Bernhard Mueller]

Hi,

I am not suure about 10.20 but for HP-UX 11 it would be using ftpaccess.

So try
man ftpaccess

if you search the forum for ftpaccess you will get 50 hits. e.g.

http://search.hp.com/redirect.html?url=http%3A//forums1.itrc.hp.com/service/forums/questionanswer.do%3FthreadId%3D30145&qt=ftpaccess&hit=2

Regards,
Bernhard

[Umapathy S]

Make sure that the user is not in /etc/ftpusers file. /etc/passwd should contain a valid login shell as /usr/bin/ksh.

HTH,
Umapathy

[G. Vrijhoeven]

Hi,


I know a work around.
What you can do is create a user with the shell /bin/false and add /bin/false in the /etc/shells file.
The user is allowed to log in with ftp now and is allowed to log in with telnet, but get the /bin/false shell and will log out.

Gideon

[Robert-Jan Goossens]

Hi Mohammed,

There is document to create a ftp restricted user.

Document description: How to setup a restricted user for FTP access
Document id: BC0814KBRC00007719

http://www5.itrc.hp.com/service/cki/docDisplay.do?docLocale=en_US&docId=200000062906536

Regards,
Robert-Jan

[Mic V.]

We made this work slightly differently. We still needed the user to have a valid shell so that the Windows ERP client could still perform an rexec login (it uses the UNIX account), so we just made their .profile end with "exit".

Not the best solution, just a solution. :) If I were doing it over, I would used a restricted FTP account (as mentioned above) so that, for example, they can't "get /etc/passwd".

One other issue with using plain FTP is that they can delete anything to which their account has permissions. For example:

ftp> del /opt/erp_install/bin/erp_apps_code

Our developers leave the permissions open (777) and I can't do much about it. So I pushed them onto AS/9000. That way they only see the shares.

Sorry for the ramble, hope it might be useful to someone reading this in the future.

--Mic