topic Re: FTP restriction in Operating System - HP-UX

FTP restriction

Helen French — Fri, 07 Dec 2001 21:37:18 GMT

hey,

Can I restrict an FTP user from accessing (rwx) any directory/FS other than his home directory?

appreciated, ur help!

Shiju

Re: FTP restriction

Rodney Hills — Fri, 07 Dec 2001 21:45:59 GMT

I'm not sure exactly what you are looking for, but if a user uses their login/password as defined in /etc/passwd with ftp, then standard unix security would be imposed. Of course unix security is pretty wide open, and you would have to apply restrictions on those folders you wanted to keep private.

-- Rod Hills

Re: FTP restriction

Victor BERRIDGE — Fri, 07 Dec 2001 21:51:53 GMT

Well you could always use the restricted shell:
$ pwd
/opt/app/afcprd/prod/ope
$ cd ..
rsh: cd: The operation is not allowed in a restricted shell.
$ cd /opt/app/afcprd/prod/dip
rsh: cd: The operation is not allowed in a restricted shell.
in /etc/passwd:
tpope:h6p3tXfSa2ZFs:1512:20:,,,:/opt/app/afcprd/prod/ope:/usr/bin/rsh

All the best
Victor

Re: FTP restriction

Helen French — Fri, 07 Dec 2001 21:54:56 GMT

hey,

more explanation: i have a user called "u1" and he has a home directory "/home/u1". Now, when he does an ftp to the server, i want to give him access to /home/u1 only !
i don't want him to see/read any other directories through the ftp window !!

Re: FTP restriction

Craig Rants — Fri, 07 Dec 2001 21:56:31 GMT

Look at the options a ftpaccess file would allow you to have. You may have to go to /usr/newconfig/etc/ftpd to get a look at the file but it can do some nice things for you.

GL,
C

Re: FTP restriction

James R. Ferguson — Fri, 07 Dec 2001 22:00:53 GMT

Hi:

Have a look at Knowledge Base document # (attached for your convenience).

Regards!

...JRF...

Re: FTP restriction

James R. Ferguson — Fri, 07 Dec 2001 22:01:10 GMT

Hi:

Have a look at Knowledge Base document #A5651654 (attached for your convenience).

Regards!

...JRF...

Re: FTP restriction

Helen French — Fri, 07 Dec 2001 22:01:45 GMT

Victor,

Thanks for the reply..but have not tried yet ..it's friday !!

points on monday ..

Shiju

Re: FTP restriction

Darrell Allen — Fri, 07 Dec 2001 22:14:19 GMT

Hi,

I believe the ftp daemon beginning with 11.0 is basically wu-ftpd (Washington University). It has lots of nice functionality that ftpd on earlier HP-UX releases didn't have.

If your OS is pre-11.0 then see http://www.wu-ftpd.org/

Darrell

Re: FTP restriction

Kevin Wright — Mon, 10 Dec 2001 21:55:11 GMT

Yes, you need to install Wu-ftpd server. Through it's configuration, you restrict access to certain directories. it does a chroot to whatever dir to wish.