topic Re: Create FTP user in Operating System - HP-UX

Create FTP user

Mike_21 — Tue, 11 Dec 2001 15:04:15 GMT

I would like to create a user who can only have FTP access to a specific directory, and not see anything else. We do have anonymous running. Can I just add this user to the passwd file, and set his directory to the /ftpdir/userx??

Thanks

Re: Create FTP user

Roger Baptiste — Tue, 11 Dec 2001 15:10:05 GMT

hi,

To give the user only ftp access, make the user SHELL as /usr/bin/false during the user creation.

HTH
raj

Re: Create FTP user

Uday_S_Ankolekar — Tue, 11 Dec 2001 15:14:44 GMT

Hi,

Perform the following steps to create an ftp account that does not have
telnet access to a system:

1. Setup anonymous ftp.

2. Change the home directory for your user to that of ftp

Note: See /etc/passwd.

3. Change the shell to /usr/bin/false.

Goodluck,
-USA

Re: Create FTP user

Christopher Caldwell — Tue, 11 Dec 2001 15:15:14 GMT

For access to specific directories (11.X), you need to set up a chroot environment for the user. The instructions are available from
man ftpaccess (find guestgroup).

Re: Create FTP user

Helen French — Tue, 11 Dec 2001 15:24:47 GMT

hey,

Check out this document in the Knowledge Base

#A5651654

HTH,

Shiju

Re: Create FTP user

Mike_21 — Tue, 11 Dec 2001 15:25:00 GMT

When I assign /usr/bin/false I get the following

Invalid user shell

Re: Create FTP user

Sanjay_6 — Tue, 11 Dec 2001 15:29:41 GMT

Hi Mike,

Try these links,

http://us-support.external.hp.com/cki/bin/doc.pl/sid=9bb1aa5e1b970cdd71/screen=ckiDisplayDocument?docId=200000030900682

http://us-support.external.hp.com/cki/bin/doc.pl/sid=9bb1aa5e1b970cdd71/screen=ckiDisplayDocument?docId=200000057370859

Hope this helps.

Regds

Re: Create FTP user

Christopher Caldwell — Tue, 11 Dec 2001 15:32:40 GMT

you have to add /usr/bin/false to /etc/shells:

man ftpd:

ftpd authenticates users according to three rules:

+ The user must have a standard shell returned by
getusershell().

Re: Create FTP user

Kevin Wright — Tue, 11 Dec 2001 18:18:45 GMT

bin/false will only deny telnet access, but when you ftp, you will have access to the whole system..as mentioned, you need WU-ftpd server and setup a chroot environment. then use the /./ hack in /etc/passwd to chroot the ftp session.