FTP Access

[Joseph Loo]

Hi,

I have configured /etc/inetd.conf according to the manual given in docs.hp.com which asks for the -a option to be added to the ftp entry in order for ftpaccess to work.

However, this still does not restrict the user to move up the directory.

Do you need to have wu-ftpd setup for ftpaccess to work or is there some other setup I have miss out?

Please help.

[Denver Osborn]

After making changes to /etc/inetd.conf, did you have inetd reread its config by executing "inetd -c"?

-denver

[Vincent Stedema]

Joseph,

If you're using HP-UX 11, setting up /etc/ftpaccess is enough. However, if you're using HP-UX 10.20, you will have to install wu-ftpd to get the chroot'ed functionality.

I think the following will solve your problem:

1. create a special group for users who should have chroot'ed ftp access, e.g. ftpusers:

groupadd ftpusers

2. Assign the users to this group, using "vi /etc/group" or "usermod -G".

3. Make this group an ftp guestgroup by adding the following to your ftpaccess:

guestgroup ftpusers

4. inetd -c doesn't always do the job, so you might as well kill -HUP the inetd PID.

Hope this helps.

Vincent

[Vincenzo Restuccia]

Try http://docs.hp.com/cgi-bin/fsearch/framedisplay?top=/hpux/onlinedocs/B2355-90685/B2355-90685_top.html&con=/hpux/onlinedocs/B2355-90685/00/00/14-con.html&toc=/hpux/onlinedocs/B2355-90685/00/00/14-toc.html&searchterms=ftpaccess&queryid=20010514-035444

[Shannon Petry]

You can also peek at my www site for a doc on setting up wu-ftpd, and other ftp servers. Go to "htp://www.invenioeng.com/systems/ftpd_faq.html

I think I do a pretty good job of detailing all of the control files, and their mechanisms.

Regards,
Shannon

[Joseph Loo]

My reply,

Denver: Actually, I try inetd -c after changing /etc/inetd.conf. FTP connection was refused after configuration to the manual actually says.

Vincenzo: The manual I was referring to is what you have given me through your link.

Vincent: I am running HP-UX 11, however, /etc/ftpaccess does not seem to be there.

Shannon: While combing through the search,
I saw your site but was not able to get connected on Saturday. Thanks for providing me with the site again, will read it and test it out.

So my question is how do you setup /etc/ftpaccess?

[Vincent Stedema]

Joseph,

Oops, I meant /etc/ftpd/ftpaccess...

I'm not sure if this file should already exist or that you have to create one yourself. If you do not have an /etc/ftpd/ftpaccess, there should be an example file in /usr/newconfig/etc/ftpd/.

Here's a simple example of what your ftpaccess file should look like:

#######################

class ftp real,anonymous,guest *
guestgroup ftpusers

#######################

Vincent

[Joseph Loo]

Vincent, I followed the steps given and it works. You may have miss out some steps like copying $FTP/etc/ftpd/ftpaccess to /etc/ftpd/ftpaccess. Afterwhich you have to apply inetd -c in order for it to work.

I have now restricted the user to the parent directory assigned and able to see the content of that directory by accessing from DOS. However, I am not able to see any content if I am using a third party software like Cute FTP. By the way, I have added ~/bin directory at the chroot path.

Please help.

[Shannon Petry]

You should be able to get to my site now. I do have a section specifically dealing with ftpaccess. The location will very, and the file will do nothing unless you are running wu-ftpd!

Regards,
Shannon