topic Re: ftp issue in Operating System - HP-UX

ftp issue

常有慈悲心 — Fri, 15 Aug 2003 02:43:21 GMT

How i can disable ftp access of root ,and others account can ftp libertily ?

Re: ftp issue

twang — Fri, 15 Aug 2003 02:55:20 GMT

On a secure system, these users should be inserted into the /etc/ftpd/ftpusers file. Remove 'root' entry to disable root to use ftp:

# cat /etc/ftpd/ftpusers
operator
root (remove it)
daemon
bin
sys
adm
uucp
lp
nuucp
hpdb
www
#

If your /etc/ftpd/ftpusers is blank, insert the other users into it.

Re: ftp issue

Con O'Kelly — Fri, 15 Aug 2003 02:58:24 GMT

Hi

Put root entry in
/etc/ftpd/ftpusers file.

Any login name listed in ftpusers is DISABLED from using ftp.

Cheers
Con

Re: ftp issue

Keith Bevan_1 — Fri, 15 Aug 2003 07:36:30 GMT

You may find additional useful ftp information on the man pages.

Just type :-

man ftpusers

man ftpaccess

Keith

Re: ftp issue

Tim Adamson_1 — Fri, 15 Aug 2003 07:58:34 GMT

Add root to the /etc/ftpd/ftpusers file.

If root is in that file, root can not ftp to that server.

Tim

Re: ftp issue

RolandH — Fri, 15 Aug 2003 10:38:58 GMT

If you want prevent root user to ftp to your system than create a file /etc/shells.

put in all shells which are used from users.

ie.

# cat /etc/shells
/usr/bin/ksh
/usr/bin/sh
/usr/bin/csh
/usr/bin/tcsh
/usr/local/bin/bash

All these users, who are using these shells are able to do ftp to your system. the root user has always /sbin/sh shell. This shell is missing in /etc/shells in my example so root can not ftp to your system.

If you have more than one root accounts (in some admin areas configured) like this:

root:XXXXXXXXXXX:0:3::/:/sbin/sh
RolandH:XXXXXXXXXXX:0:3::/:/sbin/sh

Then the account RolandH is not able to do ftp to your system, too. You must not add these user to /etc/ftpd/ftpusers.
/etc/shells must have only read rights and shoul belong to root:sys . All others are free to use ftp to this system.

HTH
Roland