topic Re: FTP Options in Operating System - HP-UX

FTP Options

Shahul — Fri, 08 Feb 2002 11:36:02 GMT

Hi

This is the continuation of my previous question. Now I restricted all users ftp connection thru /etc/ftpusers file and I have created one user particularly for ftp called "onlyftp" and I have put /usr/bin/rsh as it startup shell. Now what I want is he should not be able to move around after ftp connection established. He should play only in his home directory. How to set this??? Is there anyway to do this other than portable softwares??? Because of security prblm, anonymous ftp is not a choice for me.

Thanks in advance
Shahul

Re: FTP Options

Vincent Stedema — Fri, 08 Feb 2002 12:23:07 GMT

Hi Shahul,

In order to chroot the users environment, you have to set the home dir in the passwd file to something like /home/onlyftp/./

The ftp daemon will chroot to the home dir of the user when it sees the ./

Which version of HP-UX do you use?

Regards,

Vincent

Re: FTP Options

Joseph C. Denman — Fri, 08 Feb 2002 14:23:10 GMT

shahul,

I'm guessing 11.0 or greater.

You will need to set up ftpaccess.

man 4 ftpaccess

add the -a option to ftpd in the inetd.conf

man ftpd

Also, If you only want ftp for the user. The user should not have a valid shell. Instead, give the user a shell of /usr/bin/false and add this shell to /etc/shells.

Hope this helps.

...jcd...

Re: FTP Options

Shahul — Mon, 11 Feb 2002 06:11:36 GMT

Devnull,

I changed home directory as per ur advice. But no effect. Still he is able to change home directory after establishing FTP connection.

Joseph.. I am using HPUX 10.2. ftpaccess option is not there in this.

Expecting ur advice again

With rgds
SHahul

Re: FTP Options

Vincent Stedema — Tue, 12 Feb 2002 07:43:48 GMT

Hi Shahul,

If you're running hp-ux 10.20 you should consider installing wu-ftp. The ftpd version that comes with hp-ux 11.00 is based on this and is a lot more configurable than the ftpd that comes with 10.20.

The depot can be downloaded here:

http://hpux.cs.utah.edu/hppd/hpux/Networking/FTP/wu_ftpd-2.6.1/

Regards,

Vincent