topic Re: FTP Access in Operating System - HP-UX

FTP Access

Joseph Loo — Sat, 12 May 2001 03:13:21 GMT

Hi,

I have configured /etc/inetd.conf according to the manual given in docs.hp.com which asks for the -a option to be added to the ftp entry in order for ftpaccess to work.

However, this still does not restrict the user to move up the directory.

Do you need to have wu-ftpd setup for ftpaccess to work or is there some other setup I have miss out?

Please help.

Re: FTP Access

Denver Osborn — Sat, 12 May 2001 04:07:44 GMT

After making changes to /etc/inetd.conf, did you have inetd reread its config by executing "inetd -c"?

-denver

Re: FTP Access

Vincent Stedema — Mon, 14 May 2001 06:14:01 GMT

Joseph,

If you're using HP-UX 11, setting up /etc/ftpaccess is enough. However, if you're using HP-UX 10.20, you will have to install wu-ftpd to get the chroot'ed functionality.

I think the following will solve your problem:

1. create a special group for users who should have chroot'ed ftp access, e.g. ftpusers:

groupadd ftpusers

2. Assign the users to this group, using "vi /etc/group" or "usermod -G".

3. Make this group an ftp guestgroup by adding the following to your ftpaccess:

guestgroup ftpusers

4. inetd -c doesn't always do the job, so you might as well kill -HUP the inetd PID.

Hope this helps.

Vincent

Re: FTP Access

Vincenzo Restuccia — Mon, 14 May 2001 09:56:19 GMT

Try http://docs.hp.com/cgi-bin/fsearch/framedisplay?top=/hpux/onlinedocs/B2355-90685/B2355-90685_top.html&con=/hpux/onlinedocs/B2355-90685/00/00/14-con.html&toc=/hpux/onlinedocs/B2355-90685/00/00/14-toc.html&searchterms=ftpaccess&queryid=20010514-035444

Re: FTP Access

Shannon Petry — Mon, 14 May 2001 10:42:49 GMT

You can also peek at my www site for a doc on setting up wu-ftpd, and other ftp servers. Go to "htp://www.invenioeng.com/systems/ftpd_faq.html

I think I do a pretty good job of detailing all of the control files, and their mechanisms.

Regards,
Shannon

Re: FTP Access

Joseph Loo — Mon, 14 May 2001 11:05:48 GMT

My reply,

Denver: Actually, I try inetd -c after changing /etc/inetd.conf. FTP connection was refused after configuration to the manual actually says.

Vincenzo: The manual I was referring to is what you have given me through your link.

Vincent: I am running HP-UX 11, however, /etc/ftpaccess does not seem to be there.

Shannon: While combing through the search,
I saw your site but was not able to get connected on Saturday. Thanks for providing me with the site again, will read it and test it out.

So my question is how do you setup /etc/ftpaccess?

Re: FTP Access

Vincent Stedema — Mon, 14 May 2001 11:20:53 GMT

Joseph,

Oops, I meant /etc/ftpd/ftpaccess...

I'm not sure if this file should already exist or that you have to create one yourself. If you do not have an /etc/ftpd/ftpaccess, there should be an example file in /usr/newconfig/etc/ftpd/.

Here's a simple example of what your ftpaccess file should look like:

#######################

class ftp real,anonymous,guest *
guestgroup ftpusers

#######################

Vincent

Re: FTP Access

Joseph Loo — Thu, 17 May 2001 10:06:12 GMT

Vincent, I followed the steps given and it works. You may have miss out some steps like copying $FTP/etc/ftpd/ftpaccess to /etc/ftpd/ftpaccess. Afterwhich you have to apply inetd -c in order for it to work.

I have now restricted the user to the parent directory assigned and able to see the content of that directory by accessing from DOS. However, I am not able to see any content if I am using a third party software like Cute FTP. By the way, I have added ~/bin directory at the chroot path.

Please help.

Re: FTP Access

Shannon Petry — Thu, 17 May 2001 23:50:31 GMT

You should be able to get to my site now. I do have a section specifically dealing with ftpaccess. The location will very, and the file will do nothing unless you are running wu-ftpd!

Regards,
Shannon