FTP restriction

[Helen French]

hey,

Can I restrict an FTP user from accessing (rwx) any directory/FS other than his home directory?

appreciated, ur help!

Shiju

[Rodney Hills]

I'm not sure exactly what you are looking for, but if a user uses their login/password as defined in /etc/passwd with ftp, then standard unix security would be imposed. Of course unix security is pretty wide open, and you would have to apply restrictions on those folders you wanted to keep private.

-- Rod Hills

[Victor BERRIDGE]

Well you could always use the restricted shell:
$ pwd
/opt/app/afcprd/prod/ope
$ cd ..
rsh: cd: The operation is not allowed in a restricted shell.
$ cd /opt/app/afcprd/prod/dip
rsh: cd: The operation is not allowed in a restricted shell.
in /etc/passwd:
tpope:h6p3tXfSa2ZFs:1512:20:,,,:/opt/app/afcprd/prod/ope:/usr/bin/rsh

All the best
Victor

[Helen French]

hey,

more explanation: i have a user called "u1" and he has a home directory "/home/u1". Now, when he does an ftp to the server, i want to give him access to /home/u1 only !
i don't want him to see/read any other directories through the ftp window !!

[Craig Rants]

Look at the options a ftpaccess file would allow you to have. You may have to go to /usr/newconfig/etc/ftpd to get a look at the file but it can do some nice things for you.

GL,
C

[James R. Ferguson]

Hi:

Have a look at Knowledge Base document # (attached for your convenience).

Regards!

...JRF...

[James R. Ferguson · Accepted solution]

Hi:

Have a look at Knowledge Base document #A5651654 (attached for your convenience).

Regards!

...JRF...

[Helen French]

Victor,

Thanks for the reply..but have not tried yet ..it's friday !!

points on monday ..

Shiju

[Darrell Allen]

Hi,

I believe the ftp daemon beginning with 11.0 is basically wu-ftpd (Washington University). It has lots of nice functionality that ftpd on earlier HP-UX releases didn't have.

If your OS is pre-11.0 then see http://www.wu-ftpd.org/

Darrell

[Kevin Wright]

Yes, you need to install Wu-ftpd server. Through it's configuration, you restrict access to certain directories. it does a chroot to whatever dir to wish.