topic Re: Read-Only FTP Access in Operating System - HP-UX

Read-Only FTP Access

Kevin Lai KF — Wed, 02 Sep 2009 02:15:55 GMT

I had been struggling to configure the ftpaccess file to allow a captive non-shell ftp account access to partial subdirectories in directory. We are on HPUX 11.23 (IA64).

The user account to have only read-only recursive access and denied access to other directories.

Can someone had a template which I could use?

Thanks in advance.

Re: Read-Only FTP Access

Steven E. Protter — Wed, 02 Sep 2009 02:50:37 GMT

Shalom,

What is happening right now? Are your users being denied access or given too much access.

How are files placed on the ftp server? You may need to adjust the umask of the users placing files.

http://docs.hp.com/en/5971-2286/5971-2286.pdf

That is a read me on the server.

SEP

Re: Read-Only FTP Access

Steven Schweda — Wed, 02 Sep 2009 03:40:48 GMT

> [...] access to partial subdirectories
> [...]

What are "partial subdirectories"?

> The user account to have only read-only
> recursive access and denied access to other
> directories.

Does "recursive access [...]" mean only
directories under the user's home directory?
If so, then a "guest" ("chroot") account
should do the job. "man ftpd" explains how
to arrange a "guest" account.

Re: Read-Only FTP Access

Kevin Lai KF — Wed, 02 Sep 2009 04:03:48 GMT

I created this ftp account had its home directory pointed to a data directory, which contain source codes, logs, and raw data files and reports.

passwd:
guestftp:*:600:90:Guest FTP Account,IT Dept,,:/data/./:/usr/bin/nologin

ftpaccess:
class guest1 guest* 10.21.*
guestgroup ftponly
autogroup csms guest1
upload class=guest1 /data/interface /interface yes guestftp csms 0440 nodirs
upload class=guest1 /data/src /src yes guestftp csms 0440 nodirs
csms 0440 nodirs

These directory is owned by group "csms".
But currently I was denied access when I login. I can't figure out how to get "autogroup" to work.

When I login:
230 User guestftp logged in. Access restrictions apply.
Remote system type is UNIX.
Using binary mode to transfer files.
ftp> ls
200 PORT command successful.
150 Opening ASCII mode data connection for /usr/bin/ls.
226 Transfer complete.

I did not see any directory listing.

Re: Read-Only FTP Access

Steven Schweda — Wed, 02 Sep 2009 12:37:22 GMT

> I did not see any directory listing.

For a recent similar complaint, see:

http://forums.itrc.hp.com/service/forums/questionanswer.do?threadId=1367463

Skip down to near the end. (Look for
"guest".)

Or, "man ftpd", look for "guest", and follow
the instructions carefully.