ftpaccess configuration HPUX 11.00

[Vincent Stedema]

I've been trying to setup an ftp configuration based on which all normal users will get restricted ftp access and a small group of "power users" will get full access. The problem I've come across is that this doesn't work if a "power user" is also a member of the guestgroup group. Is it true that a realgroup/realuser assignment doesn't take precedence over a guestgroup assignment?

My ftpaccess file:

class allusers guest,real,anonymous *
guestgroup users
realgroup sysadm

The users in the sysadm group are also member of the users group.

[Rita C Workman]

It is my 'understanding' that once someone is defined with Guest.....security will make them Guest.
So if you want certain groups to have full power and others to have Guest only. Then you need to NOT define these groups as Guest at all and define everyone else as Guest.

You might want to review a couple threads, that may help you:
http://forums.itrc.hp.com/cm/QuestionAnswer/1,1150,0x96b514a24fd1d4118fef0090279cd0f9,00.html

http://my1.itrc.hp.com/cm/QuestionAnswer/1,1150,0x05970559ff7cd4118fef0090279cd0f9,00.html

[Shannon Petry]

The other consideration here is their group as defined by passwd!
The group is assigned by the entry in passwd. If the ftp-passwd file has a different entry then the lowest common denominator is used. Make sure that the ftp passwd file has the same group as /etc/passwd defined for the user!

Also look at the documentation recommended by the other post. re-post if these do not answer your questions!

Regards,
Shannon

[Vincent Stedema]

Thanks a lot for your quick responses, but they didn't quite answer my question. The ftpaccess man page talks about classifying all users as guest except for the users in a specific group. But, that configuration example didn't work either ( guestuser *, realgroup admin).

I guess it just won't work.