topic Re: Changes to ftpaccess file not effecting FTP file transfers in Operating System - HP-UX

Changes to ftpaccess file not effecting FTP file transfers

Chris Gromala — Mon, 16 Dec 2002 19:04:05 GMT

Hi All, (I had this posted in error in the Linux forum)
I have a restricted ftp user set up on 11.0 and I would like to have the file permissions set on transfers for that user to be read,write and change for all users. I made changes to the ftpaccess file (upload) and then issued a inetd -c and everytime I transfer files for this user The correct permissions are not taking effect. My inetd.conf file has been changed for the -a option. Any clues?? I've checked this forum for everything And haven't seen a similar problem.

Thanks,
Chris

Re: Changes to ftpaccess file not effecting FTP file transfers

Ken Hubnik_2 — Mon, 16 Dec 2002 19:09:28 GMT

What is the default umask set to for the user? When you create a new file the file permission are set by what the umask is.

Re: Changes to ftpaccess file not effecting FTP file transfers

Chris Gromala — Mon, 16 Dec 2002 19:13:59 GMT

Ken,
Pardon my ignorance- but where would I find what the default umask is- in the users profile?

Re: Changes to ftpaccess file not effecting FTP file transfers

Christopher McCray_1 — Mon, 16 Dec 2002 19:20:21 GMT

Hello,

The default umask for the system is in /etc/profile. If anything has been modified for any users, that is in the user's .profile or .cshrc.

did you line for upload look like this:

upload /base/dir /incoming yes 0666 dirs

Hope this helps

Chris

Re: Changes to ftpaccess file not effecting FTP file transfers

Ken Hubnik_2 — Mon, 16 Dec 2002 19:22:50 GMT

It is either set in /etc/profile or in the users .profile or .kshrc file. The best way to check is have that user touch a file and see what permissions the new file has.

Re: Changes to ftpaccess file not effecting FTP file transfers

Paula J Frazer-Campbell — Mon, 16 Dec 2002 19:23:05 GMT

Chris

In the .profile also check man umask.

If you as a higher level user transer files for the user then they will pick up your masking and not the users.

Paula

Re: Changes to ftpaccess file not effecting FTP file transfers

Chris Gromala — Mon, 16 Dec 2002 19:32:57 GMT

My ftpaccess file looks like this:
upload /var/ftp * no
upload /var/ftp /incoming yes root daemon 0600 dirs
upload /var/ftp /bin no
upload /var/ftp /etc no
upload /var/ftp /etc no
upload /dbmsx/dbms/uv/romtest/wmsin/ yes root sys 0666
This is a ftp only user I added a umask 0666 to it's profile and still came up with the following file creation when I ftp'd a file over using this users login and password.

-rw-r----- 1 wmsil ftponly 321 Dec 16 13:28 cgcopy.txt

Re: Changes to ftpaccess file not effecting FTP file transfers

Paula J Frazer-Campbell — Mon, 16 Dec 2002 19:37:33 GMT

Chris

Just a thought check out the destination machine settings.

Paula

Re: Changes to ftpaccess file not effecting FTP file transfers

Chris Gromala — Mon, 16 Dec 2002 19:41:25 GMT

Paula,
What settings are you referring to?

Chris

Re: Changes to ftpaccess file not effecting FTP file transfers

Paula J Frazer-Campbell — Mon, 16 Dec 2002 19:44:05 GMT

Chris

You are ftping to another machine and all looks OK on your source machine but what is that users umask on the destination machine.

Paula

Re: Changes to ftpaccess file not effecting FTP file transfers

Chris Gromala — Mon, 16 Dec 2002 19:46:31 GMT

Paula,
The information that I am providing is from the destination machine. I'm ftping from a workstation.

Chris

Re: Changes to ftpaccess file not effecting FTP file transfers

Paula J Frazer-Campbell — Mon, 16 Dec 2002 19:54:25 GMT

Chris

What I think may be the problem is that the two machines for this user are not set at 666 but one is at 640.

Paula

Re: Changes to ftpaccess file not effecting FTP file transfers

Chris Gromala — Mon, 16 Dec 2002 20:00:20 GMT

Paula,
Pardon but I'm confused. This particular user can be logged in for ftp from a number of different sources. Everytime this user transfers a file over - the file is created with the permissions I had shown earlier in the thread. I could be wrong but I think the problem lies at the destination machine and it's failure to recognize the changes I have made. Or the failure of me to understand what I am doing wrong. The /dbmsx/dbms/...... directory in the ftpaccess file ins the home directory of this users for restricted ftp use.

Re: Changes to ftpaccess file not effecting FTP file transfers

Paula J Frazer-Campbell — Mon, 16 Dec 2002 20:14:04 GMT

Chris

My confusion I did not realise that is was being collected from several machines.

Yes it must the the scource machine.

I do not have a unix box to test on but what does an env say about mask fot this user - I cannot remember if env shows it.

Paula

Re: Changes to ftpaccess file not effecting FTP file transfers

Christopher McCray_1 — Mon, 16 Dec 2002 20:22:38 GMT

Hello,

By looking at the line you provided:

upload /dbmsx/dbms/uv/romtest/wmsin/ yes root sys 0666

You are saying that you are trying to make any file deposited by the user in question will have ownership of root:sys and read/write for everyone; you can't do this. Instead:

upload /dbmsx/dbms/uv/romtest
/wmsin yes wmsil ftponly 0666

This should work for you.

Chris

Re: Changes to ftpaccess file not effecting FTP file transfers

Christopher McCray_1 — Mon, 16 Dec 2002 20:25:01 GMT

BTW -- entries in the ftpaccess file affect only the local server on which it's configured.... it has no control on what it sends out.

Just in case that was the thought here.

Chris

Re: Changes to ftpaccess file not effecting FTP file transfers

Paula J Frazer-Campbell — Mon, 16 Dec 2002 20:26:36 GMT

Well spotted Christopher

Re: Changes to ftpaccess file not effecting FTP file transfers

Chris Gromala — Mon, 16 Dec 2002 22:03:34 GMT

First of all thanks for all your help in trying to get this resolved. BUt maybe I hadn't made myself clear so I'll try again - I have restricted FTP set up for one particular user. This user can not telnet into the machine it can only FTP to it. It's home directory is the /dbmsx/dbms/...... I want any file that this particular user transfers over to be accessible to any user on the system for read and change. I have made numerous changes to the ftpaccess file on this machine that is receivng the ftp'd files. Including this one that CHris had mentioned and the files still show up with the incorrect permissions.
Here is the lastest ftpaccess file after changes:
upload /var/ftp * no
upload /var/ftp /incoming yes root daemon 0600 dirs
upload /var/ftp /bin no
upload /var/ftp /etc no
upload /var/ftp /etc no
upload /dbmsx/dbms/uv/romtest/wmsin/ yes wmsil ftponly 0666
Here is the fiel after the transfer:
-rw-r----- 1 wmsil ftponly 321 Dec 16 15:44 cgcopy.txt
I hope I've ansered more questions than I've added with this explanation.
Thanks Again.

Re: Changes to ftpaccess file not effecting FTP file transfers

Charles Soto — Mon, 16 Dec 2002 22:50:04 GMT

Chris, per man ftpaccess, the upload directive only corresponds to a user's home directory. Are you sure this user's home is listed correctly in /etc/passwd? Also, ftpd ignores /etc/ftpd/ftpaccess unless it's started with the -a command. You probably have ftpd started via inetd. If so, edit /etc/inetd.conf to include -a after the ftpd command. You might also put -l and/or -v to be sure access and debugging information is logged.

Charles

Re: Changes to ftpaccess file not effecting FTP file transfers

Chris Gromala — Mon, 16 Dec 2002 23:05:23 GMT

Charles,
The users home dir is in passwd correctly. However at the end of the path is a "/./". I believe that is for the restricted ftp access so that the user can not change dir's. I think I already tried to added the /./ at the end of the path in the upload directory. to no avail. I already had the -a option you specified.