topic chroot in FTP in Operating System - HP-UX

chroot in FTP

Ruben Cardenal — Fri, 18 Jan 2002 13:02:08 GMT

Hi, If I have a diretory named /A and I want to setup an only-ftp account chrooted to that dir, what is the correct format entry for the user in /etc/passwd?

TIA

Re: chroot in FTP

Vincenzo Restuccia — Fri, 18 Jan 2002 13:10:57 GMT

See http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0x6cc079bffde7d4118fef0090279cd0f9,00.html

Re: chroot in FTP

Sanjay_6 — Fri, 18 Jan 2002 13:18:45 GMT

Hi Ruben,

The ftp only user id home directory should be /A/./

Hope this helps.

Regds

Re: chroot in FTP

Joseph C. Denman — Fri, 18 Jan 2002 14:28:44 GMT

Also take a look at ftpaccess

man 4 ftpaccess

...jcd...

Re: chroot in FTP

Ruben Cardenal — Mon, 21 Jan 2002 10:01:31 GMT

I have done the following:

* Created a group for that user:

root@grecopr2:/yo# cat /etc/group | grep agri
ftpagri::105:agri
root@grecopr2:/yo#

* Setup the /etc/passwd entry:

root@grecopr2:/yo# cat /etc/passwd | grep agri
agri:L5oxlGqm84Zj2:350:105:Prueba de Ruben:/yo/./:/usr/bin/false
root@grecopr2:/yo#

* Setup /etc/ftpd/ftpaccess:

root@grecopr2:/yo# cat /etc/ftpd/ftpaccess | grep guestgroup
guestgroup ftpagri
root@grecopr2:/yo#

* Added "-a" option to inetd.conf entry for ftpd:

root@grecopr2:/yo# cat /etc/inetd.conf | grep /ftpd
ftp stream tcp nowait root /usr/lbin/ftpd ftpd -l -a
root@grecopr2:/yo#

* Restarted inetd.

* Now, I try to use the account:

root@grecopr2:/# ftp localhost
Connected to localhost.
220 grecopr2 FTP server (Version 1.1.214.7 Thu Aug 10 09:57:38 GMT 2000) ready.
Name (localhost:root): agri
331 Password required for agri.
Password:
230 User agri logged in. Access restrictions apply.
Remote system type is UNIX.
Using binary mode to transfer files.
ftp> pwd
257 "/" is current directory.
ftp> dir
200 PORT command successful.
150 Opening ASCII mode data connection for /usr/bin/ls.
226 Transfer complete.
ftp> quit
221 Goodbye.
root@grecopr2:/#

It doesn't list! Says it lists "/usr/bin/ls" :? If I upload something, make dirs, delete, etc, it works fine, but listing doesn't. What am I doing wrong? :(

Re: chroot in FTP

Steven Sim Kok Leong — Mon, 21 Jan 2002 10:21:34 GMT

Hi,

What are the permissions of your FTPROOT directory? It has to be r-x (readable and executable) by the FTP user in order to allow files to be listed.

To troubleshoot, try setting your FTPROOT to

# chmod ugo+rx YOUR_FTPROOT

After FTP logon, perform a dir, ls and ls -la.

Hope this helps. Regards.

Steven Sim Kok Leong

Re: chroot in FTP

Barry_2 — Mon, 21 Jan 2002 10:27:47 GMT

If you can't do a directory list, means that you have no cmd to do such ... So, use 'man ftpd'. Starting from section 'Anonymous connexion' It will explain the way to give access to local cmds and shared libs needed by dir or mkdir or so.

Re: chroot in FTP

Ruben Cardenal — Mon, 21 Jan 2002 13:38:52 GMT

Thanks to all for your interest and help. The 10 goes to Barry due to his precission with listing issue :)