umask for ftp users

[skt_skt]

HP-UX 11.00

I see a difference in the umask command availability for two ftp users . SISCOM user belongs to shell /usr/bin/false.(umask command NOT available).
Other user belongs to /usr/bin/ksh.(umask command available)

230 User SISCOM logged in.
ftp> help
Commands may be abbreviated. Commands are:

! delete literal prompt send
? debug ls put status
append dir mdelete pwd trace
ascii disconnect mdir quit type
bell get mget quote user
binary glob mkdir recv verbose
bye hash mls remotehelp
cd help mput rename
close lcd open rmdir
ftp> umask
?Invalid command


ftp> help
Commands may be abbreviated. Commands are:

! debug mget put size
$ dir mkdir pwd status
account disconnect mls quit struct
append form mode quote system
ascii get modtime recv sunique
bell glob mput reget tenex
binary hash newer rstatus trace
bye help nmap rhelp type
case idle nlist rename user
cd image ntrans reset umask
cdup lcd open restart verbose
chmod ls prompt rmdir ?
close macdef proxy runique
cr mdelete sendport send
delete mdir passive site
ftp> umask
200 Current UMASK is 027

[Tim Nelson]

The default umask for ftp is set in the /etc/inetd.conf config file.
i.e. ftp -u 002

If same server and two different users having two different default umasks then that is a good one.


Another option is to review /etc/ftpd/ftpaccess for some specific user/group configs.

[skt_skt]

here what i intend to use is
change umask value to 133 so that i will have 644 permission on the file after the transfer.it is true for my id whihc uses ksh.

problem is umask command is NOT available for the user who uses /usr/bin/false.

I tried setting umask on user's profile but that is not reflecting for the ftp(even true for ksh user;i change it manually using umask for the ksh user)

Any method which i can acheive this?

[Bill Hassell]

ftp does not login so it doesn't matter what shell is being used. As mentioned before, the umask value is set by the ftp daemon on the destination machine. Edit the file: /etc/inetd.conf and add the option: -u 133 to the ftpd line. Close the files and type: inetd -c to reread the configuration file. Now all files will be created with the umask value of 133 (or permission 644 for the file).

[skt_skt]

But that is going to effect all the ftp trasfers. This is an option and not sound like a data secure option.

One of my questions still remains. what decide if a user has access to umask(ftp command) or not?

[Bill Hassell · Accepted solution]

Try using the commands quote site as in:

ftp> quote site umask 022

[whiteknight]

Hi santosh,

You can refer to this doc for workaround

http://www1.itrc.hp.com/service/cki/docDisplay.do?docLocale=en&docId=ucr_na-KMN8606472894_ssb-1

WK

[skt_skt]

did any one configure this type of requirment on ftpaccess?

i put a cron job to do this permission change due to the urgency of requirement.

[skt_skt]

closig with the current informations. Thanks to all.