topic Re: [urgent] ftpaccess only its home directory in Operating System - HP-UX

[urgent] ftpaccess only its home directory

KCS_1 — Thu, 16 Sep 2004 02:12:03 GMT

Hi,all

I made a account which for ftp access only that can moves in its home directory by the attached file.But, it didn't work correctly,the account could move to all directory include of /

what can I see on this situation?

Re: [urgent] ftpaccess only its home directory

Sridhar Bhaskarla — Thu, 16 Sep 2004 02:20:37 GMT

Hi,

I see you created guestgroup 'ftponly'. Did you add the users that you want to restrict to it?.

Whenever the affected user does an ftp, it should display a message something like 'restrictions apply' something like that. Then only you are sure it works.

-Sri

Re: [urgent] ftpaccess only its home directory

KCS_1 — Thu, 16 Sep 2004 02:27:37 GMT

thanks for quick replying

Yes, I did

after I have had a procedure from the file,
I test whether it works well or not,
No idea why the user that i want to restrict,can move to other directory freely.

Thanks

Re: [urgent] ftpaccess only its home directory

Sridhar Bhaskarla — Thu, 16 Sep 2004 02:48:42 GMT

Patrick,

Can you post your ftpaccess file?. See if you have these lines in it.

class local real,anonymous *.domain 0.0.0.0
class remote real,anonymous *

-Sri

Re: [urgent] ftpaccess only its home directory

KCS_1 — Thu, 16 Sep 2004 03:11:50 GMT

I've posted my ftpaccess file.

thanks in advance

Re: [urgent] ftpaccess only its home directory

Muthukumar_5 — Thu, 16 Sep 2004 03:24:27 GMT

You have allowed searchable path as,
# cdpath
cdpath /incoming
cdpath /pub
cdpath /

so user can go /incoming /pub and / tooo.

Try to change the one with allowable path there.

Re: [urgent] ftpaccess only its home directory

Sridhar Bhaskarla — Thu, 16 Sep 2004 03:26:10 GMT

Patrick,

I don't see any reason why it shouldn't work. Your ftpaccess file is looking good. I would double check the following.

1. Make sure the primary group of the user is ftponly.

2. Make sure -a is added to ftpd in /etc/inetd.conf. Also enable -l flag for further logging. Run 'inetd -c'.

Do you get any messages other than standard ftp text when you do ftp?.

-Sri

Re: [urgent] ftpaccess only its home directory

Muthukumar_5 — Thu, 16 Sep 2004 03:47:43 GMT

Change the cdpath settings for the corresponding directories, so that cd will be moved upon path settings there.

cd /testing
cd /dir1
cd /

If you try cd stand then, it will search one bye one as,

cd /testing/stand
or
cd /dir1/stand
or
cd /stand
there

So change the one and TRY now.

Re: [urgent] ftpaccess only its home directory

KCS_1 — Thu, 16 Sep 2004 20:37:43 GMT

Thanks for all who helped me.

The problem was 'ftponly'group that what i want set.