topic ftpaccess and ftpd in Operating System - HP-UX

ftpaccess and ftpd

Thayanidhi — Wed, 14 Sep 2005 02:29:51 GMT

Hi,

I just want disable some users from using ftp, without changing any current functionality.
Can some one post the entries to be kept in ftpaccess and modification to inetd.conf?

Right now no ftpaccess file.

Regds
TT

Re: ftpaccess and ftpd

Orhan Biyiklioglu — Wed, 14 Sep 2005 02:34:42 GMT

http://newfdawg.com/SHP-FTP-ftpaccess.htm

"Securing the FTP service on HP-UX: Introduction to the ftpaccess file"

is a good source about this topic.

Re: ftpaccess and ftpd

Orhan Biyiklioglu — Wed, 14 Sep 2005 02:43:06 GMT

You should also check the ftphots file.
man 4 ftphots

Its format is like:

[allow|deny] username host(s)

So,

deny root *

should deny root login from anywhere.

Re: ftpaccess and ftpd

Orhan Biyiklioglu — Wed, 14 Sep 2005 02:44:06 GMT

Sorry for the typo the file should be ftphosts

Re: ftpaccess and ftpd

Sergejs Svitnevs — Wed, 14 Sep 2005 02:46:11 GMT

Hi,

You can prohibit incoming incoming ftp from a specific IP address (deny option in ftpaccess).
Use of ftpaccess is disabled by default. To enable ftpaccess, set "ftpd -a" flag in inetd.conf, then "inetd -c".

I suggest you download WU-FTPD from software.hp.com and do this here with a combination of the /etc/shells, /etc/group, and ftpaccess files.

Regards,
Sergejs

Re: ftpaccess and ftpd

Raj D. — Wed, 14 Sep 2005 02:49:22 GMT

Hi Thayanidhi ,

You can check the /etc/ftpd/ftpaccess file for details.
Attached.

Cheers,
Raj.

Re: ftpaccess and ftpd

Muthukumar_5 — Wed, 14 Sep 2005 03:01:25 GMT

If you want to disable useraccounts to use ftp then you have to choose ftphosts file only.

# cat /etc/ftpd/ftphosts
username

# chmod 444 /etc/ftpd/ftphosts
# chown bin:bin /etc/ftpd/ftphosts

You can use another method as,

#!/bin/ksh
#ftpnew.ksh
if [ "$LOGNAME" = "" ]
then
echo "No Access to other users for using ftp"
sleep 1
fi

chmod 755 /usr/bin/ftpnew.ksh
chown bin:bin /usr/bin/ftpnew.ksh
alias ftp=/usr/bin/ftpnew.ksh

hth.

Re: ftpaccess and ftpd

Arunvijai_4 — Wed, 14 Sep 2005 03:25:04 GMT

Create a file called "ftpusers" in /etc/ftpd and chown bin:bin. Enter the usernames you want to disable access from using FTP.

#cat /etc/ftpd/ftpusers
root
abcd

Here, root and abcd cant access FTP.

-Arun

Re: ftpaccess and ftpd

Matthew_50 — Wed, 14 Sep 2005 03:39:56 GMT

modify inetd.conf is not require.
1. touch /etc/ftpd/ftpusers
2. for example, user 'root'&'matt' is not allow to access system via ftp login, then
place like following in /etc/ftpd/ftpusers.

------------ example ---------------------
# cat /etc/ftpd/ftpusers
root
matt
------------ example ---------------------

Re: ftpaccess and ftpd

Muthukumar_5 — Wed, 14 Sep 2005 03:39:59 GMT

/etc/ftpd/ftpusers file useful when you want to control remote machine user login to local ftpd server.

-- Plz look at ftpusers man page --

ftpd rejects remote logins to local user accounts that are named in /etc/ftpd/ftpusers.

If you want to control ftp client access to users then you have to use script wrapper on ftp binary to use it.

hth.

Re: ftpaccess and ftpd

morganelan — Wed, 14 Sep 2005 03:42:53 GMT

Follow this link:
http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=842075

Re: ftpaccess and ftpd

Thayanidhi — Wed, 14 Sep 2005 06:52:58 GMT

Hi,
Thanks all for the reply. I go with ftpusers, which is very easy without changing anything else.

Regds
TT