topic Re: ftp user in Operating System - HP-UX

ftp user

Gabriele FACCHINI — Thu, 31 Jan 2002 09:22:09 GMT

Good morning at all. I have a problem:
I have a ftp user, pippo, that has a home dir called /home/pippo. This user has to put files in 2 dir /portale, /intranet. What do i have to do to let this user put files into only this dir but without given read acces to other dir under /, leaving the same dir permissions?
Thanks a lot.

Re: ftp user

Ravi_8 — Thu, 31 Jan 2002 11:20:59 GMT

Hi,

when the file is under a directory, the owner of that directory can read the file.
for ur task best way is to use "crypt" and "encrypt" to unlock

Re: ftp user

Marcin Wicinski — Thu, 31 Jan 2002 12:59:33 GMT

Hi,
I would do this:
user pippo should be registered as guest (see man pages for ftp) ftp user. You can restrict permissions for guest user to access only to his home dir (he sees his home dir as /). Then you can put links to required dir into pippo's home dir.
Later,

Re: ftp user

Sanjay_6 — Thu, 31 Jan 2002 13:31:01 GMT

Hi,

you can configure ftpaccess to restrict the user access to certain directories and also his ability to read/write/overwrite files.

http://us-support3.external.hp.com/cki/bin/doc.pl/sid=804307f00266bf265f/screen=ckiDisplayDocument?docId=200000055935266

http://us-support3.external.hp.com/cki/bin/doc.pl/sid=804307f00266bf265f/screen=ckiDisplayDocument?docId=200000055253542

Hope this helps.

Regds

Re: ftp user

Joseph C. Denman — Thu, 31 Jan 2002 13:49:37 GMT

Gabriele,

Sanjay is right on target. You will need to set up ftpaccess.

man 4 ftpaccess

Also, you will need to modify the ftpd entry in you inetd.conf to add the -a option. This option tell ftpd to use the ftpaccess configuration file.

man ftpd

Hope this helps,

...jcd...

Re: ftp user

matteo casarino — Thu, 31 Jan 2002 13:58:57 GMT

Hi,
the previous suggested has centered the target. But on my opinion you can also create a gruop of user (with pippo inclueded) that have the right permission on /portale /intranet.

bye

Re: ftp user

Gabriele FACCHINI — Thu, 31 Jan 2002 15:52:20 GMT

hi Sanjay, I have an european login, and then i couldn't see this documents. Do you have a link in a euuropean site?
thanks.

Re: ftp user

Sanjay_6 — Thu, 31 Jan 2002 16:21:15 GMT

Hi,

substitute "us-support3" with europe-support and the link will take you to the european link for the doc suggested above by me.

Hope this helps.

regds

Re: ftp user

Gabriele FACCHINI — Thu, 31 Jan 2002 17:48:13 GMT

Hi Sanjay, thanks for your help.
I have made some of this tips, but i have a question:
the user pippo that has home /home/pippo, must to put files into only two dir, /pluto/paperino/topolino/minni and /pluto/paperino/osvaldo/minni, but i want that this user don't has read permission in other directories and files under /. I have created 2 symbolik link under root portale@ -> /pluto/paperino/topolino/minni and intranet@ -> /pluto/paperino/osvaldo/minni. What do i have to do to make it possible?
thanks. Gabriele

Re: ftp user

Sanjay_6 — Thu, 31 Jan 2002 17:53:32 GMT

Hi Gabriele,

If you are using ftpaccess to configure this user. Let the user homedirectory be /home/pippo. set two aliases that will allow the user to move into the two directories where you want him to put the files. If you set ftpaccess, the system does a chroot when the user logs into ftp, so he sees his homedirectory as root and the original root is invisible to him. You can allow the user to write into the two directories you want. He won't be allowed to move into any other direcroty. Do a "man ftpaccess" which will help you a little more in understanding how you can configure the ftpaccess top suit your needs.

Hope this helps.

Regds

Re: ftp user

Sanjay_6 — Thu, 31 Jan 2002 17:56:04 GMT

Hi Gabriele,

If you want to take a printout of the ftpaccess man page, do this,

man ftpaccess |col -b |lp

to copy the many page to a file,

man ftpaccess |col -b >/tmp/ftpaccess.man

The "col -b" will remove the control characters from the man page.

Hope this helps.

Regds