topic Re: setting the user root directory in Operating System - HP-UX

setting the user root directory

Don Ferderber_1 — Tue, 27 Jan 2004 15:39:05 GMT

I am attempting to set up a few users with restricted directories. When they ftp in they are able to move around freely. So I amattempting to use the suggestions given in the man pages of ftpaccess. Here is the changes I have made to the passwd file..

gsds:u2GKr011vo5RU:515:515:GSDSRepository:/NGCS/./gsds:/bin/ksh

I want to not have the ability to move past the NGCS directory. I amnot sure what I am forgetting but any help would be appreciated.

Re: setting the user root directory

Sridhar Bhaskarla — Tue, 27 Jan 2004 15:47:54 GMT

Hi,

You will also have to configure your ftpaccess file.

Create a group called 'guest' (or anything that you want) and add it as a guestgroup in ftpaccess file. Make gsds as a member of this guest group.

guestgroup guest

Try to ftp again. When you ftp you should see the following message.

230 User gsds logged in. Access restrictions apply.
Remote system type is UNIX.
Using binary mode to transfer files.
ftp>pwd

You can also put other restrictions like

chmod no guest
delete no guest

etc.,

-Sri

Re: setting the user root directory

Don Ferderber_1 — Tue, 27 Jan 2004 16:13:06 GMT

Ok .. I must be opushing my luck here. What would that entry look like. I am confused about the class entry and where the group is set etc...

Re: setting the user root directory

Don Ferderber_1 — Tue, 27 Jan 2004 16:14:12 GMT

Sorry my file looks something like this right now ..

class local real,anonymous *.domain 0.0.0.0
class remote real,anonymous *

# Display secure Nortel Networks banner
banner /etc/ftpd/ftpd_banner

suppresshostname yes
suppressversion yes

Re: setting the user root directory

Sridhar Bhaskarla — Tue, 27 Jan 2004 18:00:34 GMT

Create a group called "guest" and add gsds as a member to it.

$grep guest /etc/group
guest::2001:gsds

Your ftpaccess should look like this

class local real,anonymous *.domain 0.0.0.0
class remote real,anonymous *

# Display secure Nortel Networks banner
banner /etc/ftpd/ftpd_banner

suppresshostname yes
suppressversion yes
guestgroup guest

Try 'ftp' to verify it.

-Sri