"FTP only" user account

[Michael Penza_1]

I would like to create personal user accounts (i.e. jsmith) on a trusted system
that are strictly limited to ftp functions. What hoops do I need to jump to
accomplish that?

System: HP9000/831 D-350/2
HP-UX 11.00

[Alan Riggs_1]

I would suggest setting up the system to allow anonymous ftp and then
ceating/editing passwd and group files underneath the "home" directory for the
anonymous ftp account. You can then manipulate directory and user permissions
to restrict users to certain subtrees, etc. (they connect as "ftp" or
"anonymous", then change ID with "user Xxx"). If you wish, you can even close
permissions on the "pub" directory so that the anonymous connections have NO
permissions to manipulate files or change directories.

[Jason Luginbuhl_1]

Good info from Alan Riggs.

There is a step by step document available for setting up ftp at 11.0 with the
chroot functionality which will effectively limit users to only their home
directory.

This document is available at the hp web site for those who have logins to the
technical knowledge base. Here's how:
1) Go to the IT Resource Center home page (There is a link to this in the upper
left)
2) Select the link to "Search Technical Knowledge Base"
3) Do a boolean search for:
ftp AND chroot AND ftpaccess

This will pull up the How-to Document.

[javier juarez_1]

You could make a elaborated shell scriptto manage ftp instructions and put on
the .profile of the user in the last line and in the very last line of .profile
put "exit"
OR
Just put the words "ftp" and "exit" in the last two lines of .profile