ftp login

[TVS MURTY]

We have 2 machines - L1000 and L2000 both running
HP_UX11.0 and are identical in all respects.

We want to allow a particular login only for ftp. i.e. using this login one can only do an ftp but cannot login.
We are doing this by giving the shell for this login as /usr/bin/false. While this works fine on L2000, this doesn't work on L1000. It says 'access denied' when we try to initiate an ftp.

Can someone throw some light on this?

Regards,
Murty

[Herve BRANGIER]

Hi,

Your problem comes from /usr/bin/false which is
not a valid shell for getusershell () function.
You need to have /usr/bin/false in your /etc/shells file. If you don't have this file
you can put default values of getusershell and
/usr/bin/false in /etc/shells :

/usr/bin/sh
/usr/bin/rsh
/usr/bin/ksh
/usr/bin/rksh
/usr/bin/csh
/usr/bin/keysh
/usr/bin/false

You can verify in /var/adm/syslog/syslog.log
that your problem really comes from bad shell.
And after the modification/creation of
/etc/shells I think it works well.

Hope it's help,

Herve

[Rajeev Tyagi]

Hi Murty,

You need to add the shell name in /etc/shells and also verify that the usernames are not there in /etc/ftpusers.

[thinphony]

HI!

as mention above, you may modify the /etc/passwd file to use the new shell /bin/false,and add /bin/false in the file /etc/shells,

As a temp method, you can modify the .profile and add :

trap "" 1 2 3

exit

[Manuel P. Ron]

I've implemented my ftp users with the restricted shell (/usr/bin/rsh). They can login but can't change from local directory not use slash in any command. It's another solution