topic Re: Restricted FTP access in Operating System - HP-UX

Restricted FTP access

Dave La Mar — Fri, 26 Oct 2001 19:30:11 GMT

I have been tasked to create an account that can ftp to our N Class 11.0 machines. This should be an ftp account only (as they have in the NT world).
This account would be restriced to a single directory with rw priviledge.
Is this possible in unix or do I need to create a regular user account?
Thanks for any input.
dl

Re: Restricted FTP access

harry d brown jr — Fri, 26 Oct 2001 19:36:44 GMT

Do a man on ftpaccess

You will have to create an account. And yes, unix is not NT, thank god! So you will have to create an account, even if it is an anonymous account.

live free or die

harry

Re: Restricted FTP access

S.K. Chan — Fri, 26 Oct 2001 19:47:40 GMT

I would try this out ..

1) Create a normal user account (user=john group=none)
2) Put /usr/bin/false as the start-up program.
3) The entry in password file might look like this :-
john:chus5tya:233:20:,,,:/home/john/./:/usr/bin/false
4) Make sure /usr/bin/false is also coded in /etc/shells
5) Create the file /etc/ftpd/ftpaccess and put in these lines ..
class all john,guest
guestgroup none
noretrieve /etc/passwd
6) do man ftpaccess if not sure about the format.
7) # chmod 444 ftpaccess
# chown bin:bin ftpaccess
8) Edit /etc/inetd.conf & add "-a" argument to ftpd
ftp stream tcp nowait root /usr/lbin/ftpd ftpd -l -a
9) # inetd -c
10) Create these sub dirs and files
1) ~john/usr
# chown ???R bin:bin usr
# chmod 555 usr
2) ~john/usr/bin
# chown root bin
# chmod 555 bin
# cp -p /sbin/ls ~john/usr/bin/ls
11) Test ..

enjoy !!

Re: Restricted FTP access

someone_4 — Fri, 26 Oct 2001 20:48:10 GMT

Here is a doc that I found helpfull

Richard

Re: Restricted FTP access

Sridhar Bhaskarla — Fri, 26 Oct 2001 21:03:17 GMT

Dave,

Create the account as usual but make the shell as /bin/false.

Now add /bin/false to /etc/shells file (if you don't have this file, create one).

This user can only do ftp now. He/She cannot logon to the box.

-Sri

Re: Restricted FTP access

Sridhar Bhaskarla — Fri, 26 Oct 2001 21:05:57 GMT

Ooops. Didn't read your message completely...

Check ftpaccess manpage. It's easy. You just need to change the home directory should be of the form /./some_dir.

-Sri

Re: Restricted FTP access

Dave La Mar — Fri, 26 Oct 2001 23:01:42 GMT

Thanks to all who replied. Though all were fine suggestions, I used Richard's as it was easiest for this dummy to follow.
Thanks again.
dl