topic Re: Problem with ftp and chroot jail in Operating System - HP-UX

Problem with ftp and chroot jail

Phil2 Davey — Thu, 27 Mar 2008 11:00:58 GMT

I am trying to set up a restricted ftp user and have followed the instructions in most of the forums but the chroot isn't working.
/etc/passwd entry:
ftpuser:*:661:661:FTP \ User,,,:/home/ftpuser/./:/usr/bin/false
Group file contains:
ftpuser::661:
/etc/shells contains:
/usr/bin/false
/etc/ftpd/ftpaccess contains:
guestuser ftpuser
.
When I ftp to the account, pwd shows the full path and I can cd to /.

I have obviously missed something, but I don't know what. Help or advise please?

Re: Problem with ftp and chroot jail

likid0 — Thu, 27 Mar 2008 11:06:31 GMT

are you using the -a option in the inetd.conf so it reads the ftpaccess file ?

Re: Problem with ftp and chroot jail

Rita C Workman — Thu, 27 Mar 2008 11:30:05 GMT

Is it guestuser or guestgroup?
What group is ftpuser in?

...and have you considered "ssh" for your ftp access (sftp)? With this you get the added feature of encryption -and- when I set this up on our ftp-only (chrooted) server there was such a nice utility called: ssh_chroot_setup.sh.

Just a thought,
Rgrds,
Rita

Re: Problem with ftp and chroot jail

Phil2 Davey — Thu, 27 Mar 2008 12:38:14 GMT

Thank you both for your responses, however...
inetd.conf entry:
ftp stream tcp nowait root /usr/lbin/ftpd ftpd -l -a -u 111

I would prefer sftp, but the customer has a requirement to use ftp, so my hands are tied.

Re: Problem with ftp and chroot jail

Phil2 Davey — Thu, 27 Mar 2008 13:38:54 GMT

Rita,

Having re-read your reply, I noticed that you mentioned guestgroup rather than guestuser. Since I had just plagiarized that from another thread, I did not question its accuracy, but you were correct, and it should have been guestgroup.

Please post another reply so I can give you the points you deserve.

Re: Problem with ftp and chroot jail

Rita C Workman — Thu, 27 Mar 2008 16:42:02 GMT

No problem...glad it helped !

Rgrds,
Rita

Re: Problem with ftp and chroot jail

Phil2 Davey — Fri, 28 Mar 2008 07:22:32 GMT

Rita has pointed me in the right direction. Again many thanks.