topic Re: Problem with TFTP in Operating System - HP-UX

Problem with TFTP

muyallo1 — Wed, 24 Oct 2007 06:11:35 GMT

Hello everybody

I have a problem.
I need to allow another user , not root, to start the TFTP service in port 69.
It`s possible??

Any sugestions

Thank you in advance

Javi

Re: Problem with TFTP

Matti_Kurkela — Wed, 24 Oct 2007 09:05:56 GMT

The TFTP service (tftpd) is normally running only when someone connects to it. The inetd process starts tftpd when needed.

To make inetd start the tftpd process as some user other than root, edit /etc/inetd.conf.

The line that defines tftp service looks like this:
tftp dgram udp wait root /usr/lbin/tftpd tftpd ...

If you change the word "root" to some other username, then tftpd is run as that user.

Remember to signal the inetd process to re-read its configuration after editing the /etc/inetd.conf file:

inetd -c

MK

Re: Problem with TFTP

muyallo1 — Wed, 24 Oct 2007 09:44:27 GMT

Hello Mati

this case is possible??

tftp dgram udp wait root /usr/lbin/tftpd tftpd /opt/ignite /var/opt/ignite
tftp dgram udp wait USER /usr/lbin/tftpd tftpd /opt/ignite /var/opt/ignite

Thanks

Re: Problem with TFTP

Steven Schweda — Wed, 24 Oct 2007 10:00:39 GMT

> I need to [...]

Why? What is that actual problem which you
are trying to solve?

Re: Problem with TFTP

muyallo1 — Wed, 24 Oct 2007 10:04:27 GMT

I need to start a module of tftp for another user not root.
I have enable the tftp server in my hpux with this configuration

tftp dgram udp wait root /usr/lbin/tftpd tftpd /opt/ignite /var/opt/ignite
tftp dgram udp wait hpsa /usr/lbin/tftpd tftpd /opt/ignite /var/opt/ignite

I need that the user root and the user USER can start the tftp module.

thanks

Javi

Re: Problem with TFTP

Torsten. — Wed, 24 Oct 2007 10:10:00 GMT

This would not be possible.

How should the system know which user to use for starting the daemon?

Re: Problem with TFTP

Steven Schweda — Wed, 24 Oct 2007 10:11:47 GMT

> I need to start [...]

I'll try one more time.

Why? What is the actual problem which you are
trying to solve?

Re: Problem with TFTP

Steven E. Protter — Wed, 24 Oct 2007 10:16:07 GMT

Shalom Javi,

http://software.hp.com

search for sudo

Download and install the depot.

Give the user the ability to run the inetd command.

SEP

Re: Problem with TFTP

Matti_Kurkela — Thu, 25 Oct 2007 01:12:33 GMT

Yes, you can modify the /etc/inetd.conf file as you indicated.

HOWEVER, you must then make sure the file permissions are set up so that /opt/ignite and /var/opt/ignite directories can be accessed as the user you've chosen.

As "man tftpd" indicates, if user "tftp" exists, tftpd attempts to chroot itself to the home directory of that user. If tftp is run as a non-root user, tftpd will not have permissions to use the chroot() system call.

So if you're running tftpd as a non-root user, you probably need to make sure the user "tftp" does not exist on the system.

This is *not* the recommended way to set up tftpd, but you can do it if you have a special reason to do so.

MK

Re: Problem with TFTP

muyallo1 — Thu, 25 Oct 2007 02:29:21 GMT

thanks you very much for all your request.

Javi