DIR command not working for guest users wu-ftpd

[Bill Costigan]

I set up the ftpaccess file using wu-ftp on HPUX to restrict some users.

When a guest user connects they can put or get files but if they issue a 'dir' or 'ls' no list of files are returned. There is a message saying the /usr/bin/ls is being executed, but no files are listed.

If connected as real user both ls and dir work as expected.

Has anyone seen this? Do I need to add something to the ftpaccess file? Directory permissions?

Thanks

[Steven E. Protter]

Shalom,

My guess is that your ftp server is using chroot.

when you do that the ls command needs to be accessible in the users home directory.

SEP

[Bill Costigan]

Is there a good way of doing that?

[john korterman · Accepted solution]

Hi Bill,

you need to create
/usr/bin
and then copy
/sbin/ls
to
/usr/bin/ls
It is important that the ls command is from the static root-shell and thus self-contained and independent of libraries.
You need to secure execute permissions on
/usr/bin/ls

regards,
John K.

[Bill Costigan]

Is there a way to hide the usr directory from the user?

[john korterman]

Hi again,

try execute permissions only:
d--x--x--x
for usr.


regards,
John K.

[Bill Costigan]

With d--x--x--x for usr. usr still shows up when you do a dir.

But I think I'm in good shape.

Thank you all for your quick responces and pointing me in the right direction.

[Bill Costigan]

John,

I failed to follow your directions exactly and got myself in trouble.

You said to copy the ls from /sbin and I copied it from /usr/bin.

The one from /sbin is much better.

Thank you again!

[Bill Hassell]

A the reason /sbin works is that it does not use shared libraries (/sbin is designed for single user mode where /usr/lib is not available). With restricted users, /usr doesn't exist and therefore, /usr/lib.

[Bill Costigan]

The interesting thing is that you can create the /usr/lib directories with the libraries that ls is looking for but it still doesn't read the chrooted /etc/passwd file.

Before you copy the directories into the local /usr/lib you get error messages saying it couldn't access this library or that library. after you copy the 4 or so libraries, ls stops complaining and runs and displays the file names, access lists, uid and gid just fine.

It just doesn't translate the uid and gid to user names and group names.

It must still be looking for something I didn't copy over.