ftp question

[Peter Gillis]

Hi,
UX11.00 here.

I need to set our ux system up so certain people can ftp to and from particular directories (not anonymous).. How do I do this?

do I need to setup an /etc/hosts.allow file?
I have /etc/inetd.conf with a line:
ftp stream tcp nowait root /usr/lbin/ftpd ftpd -l

Hope someone can give me a hand here
Maria. ps very likely easy points here for everyone!!!!

[Sridhar Bhaskarla]

Hi Maria,

Enable 'ftpaccess' file. You can copy an example file from /usr/newconfig/etc/ftpd/ftpaccess file into /etc/ftpd directory.

Enable this file by adding "-a" to your inetd.conf like like

ftpd -l -a

followed by inetd -c.

Now, by configuring
'ftpaccess' file, you can achieve what you need.

Study the man page of ftpaccess for more details. It will be a combination of 'guestgroup' and 'upload' directives.

-Sri

[Steven E. Protter · Accepted solution]

How are things down there.

Something you need to know, just in case you're using the latest version of the Washington University ftp server(standard equipment in hp-ux).

If you never updated it you're cool. If you did, the latest version of the server ignores the user list in the /etc/ftpd/ftpusers list.

That's right, standard security procedure calls for adding users like root that that list. That blocks root access and can prevent accidental or other problems like entire systems being deleted.

If you have the last version of the ftp server you really want to open a software call with HP and get access to the latest binaries.

You then use them to replace /usr/lbin/ftpd with the binary you get from hp.

btw, the prior posts instructions are comprehensive and perfect, nothing needs to be added.

ftp is an inherently insecure protocol, transmitting passwords on your network clear text. Consider replacing it with secure sell sftp. I'm providing a link and instructions.

Last part of the lecture is off topic. We up here in the US appreciate your troops help. Whatever your views, its nice to know someones go your back, if you know what I mean.

Secure shell
http://www.software.hp.com/cgi-bin/swdepot_parser.cgi/cgi/displayProductInfo.pl?productNumber=T1471AA


Thanks.

SEP

[Yogeeraj_1]

hi maria,

see my post in the url below. Lots of information.

http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0xc736b941255cd71190080090279cd0f9,00.html

hth
Yogeeraj

[Peter Gillis]

Thank you for all your assistance everyone. And apologies for the long delay getting the points sorted out. Steven, Hope all is well and I am proud to be Australian and seen to be helping out whereever we can. Maria