Operating System - HP-UX
1748158 Members
4012 Online
108758 Solutions
New Discussion

I need to create a user that can only ftp to the system

 
SOLVED
Go to solution
NDO
Super Advisor

I need to create a user that can only ftp to the system

Hi all!

 

I have created a user that can only ftp to a server running 11.23, and I have seen in some posts that the user start up program needs to be change from /usr/bin/sh to /usr/bin/false, but after making that modification, the user simple cannot login, using ftp client software like filezila, pls can you help.

 

NDO

3 REPLIES 3
Patrick Wallek
Honored Contributor

Re: I need to create a user that can only ftp to the system

>> the user simple cannot login

 

What kind of error are you receiving?  

 

I have just set up an FTP only account on one of my test servers, set the shell to /bin/false and was able to login via filezilla without any problems.

 

The /etc/passwd entry from my test ID:

salary20:*:603:200:test ftp user:/support/ftpusers/salary20/./pub:/bin/false

Bill Hassell
Honored Contributor
Solution

Re: I need to create a user that can only ftp to the system

You'll need to create the file: /etc/shells

Without this file, the only shells allowed to login to an ftp connection are:

 

/sbin/sh
/usr/bin/sh
/usr/bin/rsh
/usr/bin/ksh
/usr/bin/rksh
/usr/bin/csh
/usr/bin/keysh

 

The man page for getusershell(3C) lists the default shells.

Copy the above list and then add unlisted shells such as /usr/bin/false like this:

 

/sbin/sh
/usr/bin/sh
/usr/bin/rsh
/usr/bin/ksh
/usr/bin/rksh
/usr/bin/csh
/usr/bin/keysh

/usr/bin/false



Bill Hassell, sysadmin
NDO
Super Advisor

Re: I need to create a user that can only ftp to the system

Hi!

 

thank you Bill, I created the /etc/shells, and now its working fine.

 

NDO