topic ftpshell and umask in Operating System - HP-UX

ftpshell and umask

Shabu Khan-2 — Mon, 27 Aug 2007 13:40:26 GMT

Folks,
FTP Client Server: SOlaris 8
FTP Server: 11.11/S16K-A

One of my users needs ftp access to a production system (he is stuck with ftp since all his scripts are ftp scripts and cannot switch to sftp), I set him up with /usr/bin/ftpshell as his shell, all I've in ftpshell is 'exit 1', the ownership/permissions to the ftpshell are bin:bin/555.
It works.

His scripts run from a solaris 8 machine (FTP client).

The default umask system-wide is 022 (755), but when he puts files it inherits 640, I want it to be 644 (by default, when he puts files into this directory), should I be messing with ftpaccess file? I want this specific for this user only - all his files should be 644 since there are other groups that needs access (Read only) and I can't put them in the 'group'

I need a quick fix - no time for chroot/sftp or anything of that sort, we will slowly switch him to sftp - hopefully soon, but for now, need a temporary fix to the current setup.

Please advise.

Thanks,
Shabu

Re: ftpshell and umask

TwoProc — Mon, 27 Aug 2007 13:47:25 GMT

"chmod" is a valid ftp command.
Just put the chmod command in the script this is being run and set it however it needs to be.

Re: ftpshell and umask

Shabu Khan-2 — Mon, 27 Aug 2007 13:48:22 GMT

chmod/umask is not a valid command on the ftp client that solaris 8 ships with, that would have been too easy ...

Re: ftpshell and umask

TwoProc — Mon, 27 Aug 2007 13:49:18 GMT

Ok, simple. Convert to HPUX. :-)

Re: ftpshell and umask

Steven E. Protter — Mon, 27 Aug 2007 13:51:01 GMT

Shalom Shabu,

BTW, normally its a very minor change to take an ftp script to sftp. If you give me a sample, I'll show you what I mean. Also, you can go password free with sftp making the authentication work without hardcoding it into scripts.

To your question:

ftpaccess

That file can be used to configure a default umask. So long as you don't want execute, which will not be permitted.

How is that for simple?

http://www.wu-ftpd.org/man/ftpaccess.html
http://forums.macosxhints.com/archive/index.php/t-13827.html

SEP

Re: ftpshell and umask

Shabu Khan-2 — Mon, 27 Aug 2007 14:32:44 GMT

Thanks Steve.
I messed with ftpaccess and used the upload directive and was able to get that working.

I understand converting to sftp would be easier with the auth keys in place and all that, but it is out of my control, my user has over a dozen scripts that he needs to modifiy, eventually we will have him take the sftp/ssh route.

Thanks for your assistance.

Thanks,
Shabu

Re: ftpshell and umask

Shabu Khan-2 — Mon, 27 Aug 2007 14:33:23 GMT

Closing this out.