topic Re: user restriction in Operating System - HP-UX

user restriction

Meirone Luca — Wed, 21 Nov 2001 09:47:26 GMT

hi all,
I've got a problem with a user ftp!
in file etc/ftdp/ftpaccess i can apply aliases only a command cd, I need also apply to put or get command!
how I will have to do?
someone can help me, please
best regards
Luca

Re: user restriction

Paula J Frazer-Campbell — Wed, 21 Nov 2001 10:04:25 GMT

Hi

From man ftopaccess:-

Permission Capabilities
chmod yes|no typelist

delete yes|no typelist

overwrite yes|no typelist

rename yes|no typelist

umask yes|no typelist

Allows or disallows the ability to perform the specified
function. By default, all users are allowed.

typelist is a comma-separated list of any of the keywords
anonymous, guest and real.

Paula

Re: user restriction

Meirone Luca — Wed, 21 Nov 2001 10:06:06 GMT

my user have home_directory / and has a store procedure that put a file in /home/home_ftp/test/ and the path is writen in a table.
I want to modify home dir of user (for security) how do i do, unless modify store procedure?
thanks

Re: user restriction

Vincent Farrugia — Wed, 21 Nov 2001 10:08:52 GMT

Hello,

According to the man ftpaccess:

"Aliases only apply to the cd command."

So I guess you cannot alias other commands... sorry.

HTH,
Vince

Re: user restriction

Paula J Frazer-Campbell — Wed, 21 Nov 2001 10:09:17 GMT

hi

In /usr/newconfig/etc/ftpd/ftpaccess
is an example file which should point you in the right direction.

Paula

Re: user restriction

Vincent Farrugia — Wed, 21 Nov 2001 10:25:56 GMT

Hello,

Quoting man ftpaccess:

"The user's home directory must be properly set up, exactly as anonymous FTP would be.

The home directory field of the passwd entry is divided into two directories.

The first field is the root directory which will be the argument to the chroot call.

The second half is the user's home directory relative to the root directory. The two halves are separated by a /./.

Example:

In the /etc/passwd file, the sample entry is:
guest1::100:92:Guest Account:/ftp/./incoming:/etc/ftponly

When guest1 successfully logs in, the ftp server will chroot
(/ftp) and then chdir (/incoming). The guest user will only be able to access the directory structure under /ftp (which will look and act as / to guest1), just as an anonymous FTP user would."

HTH,
Vince