Disabling/Enabling FTP/ Telnet for specific user.

[Sathyaswarupa]

Hi experts,

How can one selectively enable or disable FTP or Telnet sessions for specific users?

[RAC_1]

For disableing ftp for certain users, add their user names to /etc/ftpd/ftpusers file.
man ftpusers for details.

For diabling telnet, add following code to /etc/profile OR make use of TCP wrappers. (If you have hp-ux's ssh, then tcp wrappers comes in built with it.)

if [ $LOGNAME -eq "user1" -o $LOGNAME -eq "user2" ];then
echo "Telnet Not allowed for you"
exit 1
else
echo "Telnet OK
fi

[yunardi]

Hi Sathyas,

If tou want user can telnet only (can not ftp), add username on /etc/ftpd/ftpusers; if ftpusers file does not exist create this first.

If you eant user can ftp only (can not telnet),
1. check to see if you have the file /etc/shells
a) If you have, edited the file and add
/bin/false
b) If not do
ls /bin/*sh > /etc/shells then add the /bin/false line
2. create the user for example
# useradd -c "FTP Only User" -d /home/ftpfiles -m -s /bin/false -g staff "username"
or change existing user shells to /bin/false
Doing this by editing /etc/passwd or via command :
# usermod -s /bin/false "username"

Hope this help.

Thanks,