topic Re: ftponly account with other ftp accounts in Operating System - HP-UX

ftponly account with other ftp accounts

rana786 — Thu, 26 Jan 2006 04:43:14 GMT

Hi all,
I have some ftp users with telnet facility in a HP-UX system. Now I need a few ftp-only users in the same system under a specified directory. I created ftp-only user successfully. But the problem is after creation of ftp-only user adding a flag to the ftpd daemon, only ftp-only user can access the system other ftp user can not access to the system.

How can existboth type of users?

Re: ftponly account with other ftp accounts

Paul Sperry — Thu, 26 Jan 2006 16:15:54 GMT

I'd create the users all the same but give the ftp only users no shell access.

Re: ftponly account with other ftp accounts

Ivan Ferreira — Thu, 26 Jan 2006 16:58:10 GMT

What is the flag that you added?. If your ftp server is wu-ftp, use the -a and configure ftpaccess to restrict the account to be chrooted. You can use /usr/bin/false as the shell for the user to avoid interactive access.

Re: ftponly account with other ftp accounts

Devesh Pant_1 — Thu, 26 Jan 2006 18:18:40 GMT

Hello rana786
What we do is add the following to the profile say if you want ids abcde and fghij to be ftp only

if [[ `logname` = abcde ]] || [[ `logname` = fghij ]]
then
clear
echo "****************************"
echo "Unauthorized login. Login to id `logname` allowed via ftp or su only."
echo "*****************************"
echo " "
echo "GOODBYE"
echo "*****************************"
kill -9 $$
fi

This should do the trick

thanks
DP

Re: ftponly account with other ftp accounts

rana786 — Fri, 27 Jan 2006 00:07:21 GMT

Hi all,

I want to create FTP only users and those ftp only users not to change directories. I have created ftp only users and had included the -a option with the ftpd in the inetd.conf file. After adding -a option ftp only users are able to ftp and for other
the access to ftp is restricted (unable to access). So I have removed the -a option and now the FTP only user can move to other directories other than his home directory. I do not want this. I need to co-exist both normal ftp user and ftp-only user.

Rgds,
Mostafa

Re: ftponly account with other ftp accounts

Muthukumar_5 — Fri, 27 Jan 2006 03:18:10 GMT

Try this method:

/etc/inetd.conf
ftp stream tcp nowait root /usr/lbin/ftpd ftpd -l

vi /etc/passwd
Put this contents,

guest1::100:92:Guest Account:/ftp/:/etc/ftponly

Change guest1 to your account name. Change /ftp to some directory.

vi /etc/shells
/etc/ftponly
/sbin/sh

Try now. It will work.

--
Muthu

Re: ftponly account with other ftp accounts

Arunvijai_4 — Fri, 27 Jan 2006 03:22:22 GMT

Hello,

1) Create a new group "ftponly"
2) Create a new account belonging to this group "ftpuser"
3) Give it a NON shell like /usr/bin/false
4) Put the NON shell in /etc/shel
5) Edit /etc/ftpd/ftpaccess following "man ftpaccess" instruction

-Arun

Re: ftponly account with other ftp accounts

Darrel Louis — Fri, 27 Jan 2006 03:50:43 GMT

Hi,

You need to configure your ftpaccess file and in there you can specify the directory and permissions the file should have.

When adding the users specify the directory location were they will put the data e.g:
ftpuser:*:999:999: Ftp users:/data/ftp/load/./:/usr/bin/false

Your inetd.conf should be modified:
Start ftpd with the -a option.
ftp stream tcp nowait root /usr/lbin/ftpd ftpd -l -a

GoodLuck

Darrel

Re: ftponly account with other ftp accounts

rana786 — Tue, 31 Jan 2006 04:42:58 GMT

Its ok.