topic Re: Disabling/Enabling FTP/ Telnet for specific user. in Operating System - HP-UX

Disabling/Enabling FTP/ Telnet for specific user.

Sathyaswarupa — Wed, 19 Apr 2006 22:56:17 GMT

Hi experts,

How can one selectively enable or disable FTP or Telnet sessions for specific users?

Re: Disabling/Enabling FTP/ Telnet for specific user.

RAC_1 — Wed, 19 Apr 2006 23:24:09 GMT

For disableing ftp for certain users, add their user names to /etc/ftpd/ftpusers file.
man ftpusers for details.

For diabling telnet, add following code to /etc/profile OR make use of TCP wrappers. (If you have hp-ux's ssh, then tcp wrappers comes in built with it.)

if [ $LOGNAME -eq "user1" -o $LOGNAME -eq "user2" ];then
echo "Telnet Not allowed for you"
exit 1
else
echo "Telnet OK
fi

Re: Disabling/Enabling FTP/ Telnet for specific user.

yunardi — Wed, 19 Apr 2006 23:47:14 GMT

Hi Sathyas,

If tou want user can telnet only (can not ftp), add username on /etc/ftpd/ftpusers; if ftpusers file does not exist create this first.

If you eant user can ftp only (can not telnet),
1. check to see if you have the file /etc/shells
a) If you have, edited the file and add
/bin/false
b) If not do
ls /bin/*sh > /etc/shells then add the /bin/false line
2. create the user for example
# useradd -c "FTP Only User" -d /home/ftpfiles -m -s /bin/false -g staff "username"
or change existing user shells to /bin/false
Doing this by editing /etc/passwd or via command :
# usermod -s /bin/false "username"

Hope this help.

Thanks,