topic Re: question about ftpaccess in Operating System - HP-UX

question about ftpaccess

itai weisman — Thu, 21 Apr 2005 01:43:22 GMT

hi everyone,
i have enabled ftpaccess in my system in order to restrict some logins to my server.
since then, when allowed user connect to my server, he's able to put and get files from my server, but, when he issue "ls" command he sees nothing.
i couldn't find where i grant ls permission to users in ftpaccess.
when i cancel usage of ftpaccess (by removing 'a' flag from ftpd entry in inetd.conf) - it's working.
i'm using wuftpd-2.6.1 on HPUX 11.11 PA-Risc.
thanks ppl

Re: question about ftpaccess

Stephen Keane — Thu, 21 Apr 2005 03:12:24 GMT

What is the contents of your /etc/ftpd/ftpaccess file ?

Re: question about ftpaccess

Joseph Loo — Thu, 21 Apr 2005 03:19:56 GMT

hi,

may i know what you mean "sees nothing"? have u restricted directory access for that the user?

regards.

Re: question about ftpaccess

Joseph Loo — Thu, 21 Apr 2005 03:27:52 GMT

another question is whether u have provided ls command in the home directory of the user?

regards.

Re: question about ftpaccess

Sergejs Svitnevs — Thu, 21 Apr 2005 03:40:52 GMT

You need to make a bin dir in the home dir of the guest account and put ls in it. Because ftp chroot to the homedir, the user cant access the ls that is in /bin.

Regards,
Sergejs

Re: question about ftpaccess

itai weisman — Thu, 21 Apr 2005 06:18:16 GMT

hi everyone and thanks
the user entry in the fstab is:
reuven:AxMYOlOJEDxpA:200:20:global user for reuven:/vendor_1/DEALERS/storage/DEA
L_SND/peldlr/./:/bin/ksh

attached ftpaccess file
ll /etc/ftpd/ftpaccess:
-rw-r----- 1 bin bin 2457 Apr 21 09:11 /etc/ftpd/ftpaccess

Re: question about ftpaccess

itai weisman — Thu, 21 Apr 2005 06:22:05 GMT

hi,
the user has ls command in his home directory (link points to /bin/ls)
furthermore, the client output:
ftp> ls
200 PORT command successful.
150 Opening ASCII mode data connection for /usr/bin/ls.
226 Transfer complete.
indicates that he uses /usr/bin/ls, that exists and working.
also, after removing 'a' flag from ftpd (disable use of ftpaccess) - it works.
itai

Re: question about ftpaccess

Ermin Borovac — Thu, 21 Apr 2005 19:06:49 GMT

ftpd tries to execute /usr/bin/ls, however, as other people indicated, it does chroot() to user's home directory so it would look for /usr/bin/ls relative to that.

If user's home directory is /home/user, ftpd looks for ls in /home/user/usr/bin/ls.

/home/user/usr/bin/ls cannot be symbolic link as ftpd cannot access anything below /home/user (due to chroot()).

You have to copy /sbin/ls (statically linked ls) to /home/user/usr/bin/ls for this to make it work.

Re: question about ftpaccess

itai weisman — Fri, 22 Apr 2005 05:07:13 GMT

home user directory is on another phyisical disk, so i can't staticly link.
after copy '/bin/ls' (and some shared libaries as well) it's working.
thanks a lot!