topic Re: "FTP only" user account in Operating System - HP-UX

"FTP only" user account

Michael Penza_1 — Mon, 08 Nov 1999 09:12:45 GMT

I would like to create personal user accounts (i.e. jsmith) on a trusted system
that are strictly limited to ftp functions. What hoops do I need to jump to
accomplish that?

System: HP9000/831 D-350/2
HP-UX 11.00

Re: "FTP only" user account

Alan Riggs_1 — Mon, 08 Nov 1999 11:03:23 GMT

I would suggest setting up the system to allow anonymous ftp and then
ceating/editing passwd and group files underneath the "home" directory for the
anonymous ftp account. You can then manipulate directory and user permissions
to restrict users to certain subtrees, etc. (they connect as "ftp" or
"anonymous", then change ID with "user Xxx"). If you wish, you can even close
permissions on the "pub" directory so that the anonymous connections have NO
permissions to manipulate files or change directories.

Re: "FTP only" user account

Jason Luginbuhl_1 — Tue, 09 Nov 1999 13:17:08 GMT

Good info from Alan Riggs.

There is a step by step document available for setting up ftp at 11.0 with the
chroot functionality which will effectively limit users to only their home
directory.

This document is available at the hp web site for those who have logins to the
technical knowledge base. Here's how:
1) Go to the IT Resource Center home page (There is a link to this in the upper
left)
2) Select the link to "Search Technical Knowledge Base"
3) Do a boolean search for:
ftp AND chroot AND ftpaccess

This will pull up the How-to Document.

Re: "FTP only" user account

javier juarez_1 — Thu, 18 Nov 1999 16:02:51 GMT

You could make a elaborated shell scriptto manage ftp instructions and put on
the .profile of the user in the last line and in the very last line of .profile
put "exit"
OR
Just put the words "ftp" and "exit" in the last two lines of .profile