configure guest ftp

[York Hachmann]

Hi,

there a many messages about "guest ftp".
But most messages are for special problems or have generically entrys like "/etc/shells is configured" or "ftpaccess is configured", e.g. .
There is no message which describes a detailed and complete way to configure a guest ftp.
Therefore I think I have too many open questions about it and I can't find out, why my configuration is wrong (ftp user have permission denied). Can anybody help ?

York

[James R. Ferguson]

Hi York:

I think you are referring to anonymous ftp. See the section entitled "Configuring Anonymous ftp Access" in "Installing and Administering Internet Services" here:

http://docs.hp.com/hpux/onlinedocs/B2355-90685/B2355-90685.html

Regards!

...JRF...

[Simone Benzi_1]

Hello,

To setup guest ftp, there must be an entry in the passwd file for an account named ftp. The password field should be "*", the group membership should be "guest", and the
login shell should be /bin/false.

For example:

ftp:*:500:guest:anonymous ftp:/users/ftp:/bin/false

The anonymous ftp directory should be set up as follows:

~ftp The home directory of the ftp account should be owned by user ftp and mode 0555 (not writable). Since ftpd does a chroot to this directory, it must have the following subdirectories and files.

~ftp/bin This directory must be owned by root and mode 0555 (not writable). It should contain a copy of /bin/ls, which is needed to support directory listing by ftpd. The command should be mode 0111 (executable only). If the home directory of the ftp account is on the same file system as /bin, the command can be a hard link, but it must not be a symbolic link because of the chroot. The /bin/ls command must be replaced when the system is updated.

~ftp/etc This directory must be owned by root and mode 0555 (not writable). It should contain versions of the files passwd (see passwd) and group (see group). These files must be owned by root and mode 0444 (readable only). These are needed to map user and group ids in the ls command.

The passwd file should contain entries for the ftp user and any other users who own files under the anonymous ftp directory. Such entries should have "*" for passwords. Group ids should be listed in the anonymous ftp group file. The group file should have the group names associated with any group ids in the passwd file and any group ids of files in the anonymous ftp subdirectories.

Since the contents of /users/ftp/etc/passwd are often copied from /etc/passwd, it is possible for a user using the anonymous ftp account to determine which private accounts are not protected with a password. This risk can be alleviated by either requiring passwords for all accounts in /etc/passwd or deleting the unprotected accounts from the anonymous ftp /etc/passwd file.

~ftp/pub This directory would be used by anonymous ftp users to deposit files on the system. It should be owned by user ftp and should be mode 0777 (readable and writable by all).

~ftp/dist Directories used to make files available to anonymous ftp users should be mode 0555 (not writable), and any files to be distributed should be owned by root and mode 0444 (readable only) so that they cannot be modified or removed by anonymous ftp users.


Bye,

Simone

[York Hachmann]

Thank's for the answers, but they're all only for configuring "standard" anonymous ftp.
What about configuring "real user" with the same ftp permissions and requirements like the anonymous ftp user ?

York

[W.C. Epperson]

Guest ftp calls for "real" userids and passwords, but "chroots" them so they can't get to other stuff.

I searched ITRC for "guest ftp" and the first article returned has step by step configuration instructions.

http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0xfc2736e69499d611abdb0090277a778c,00.html