ftpaccess

[Karen Hall]

I'm trying to use the ftpaccess file to assist in restricting various users to their own directories, and have searched the forums for just the right info and can't seem to locate it. We have various groups (comp,ftpusers, etc) that need access to their directory for dropping off and picking up files.

What is the minimum data to put into the ftpaccess file to enable my groups access to ftp?

[Rick Garland]

Sounds like you want to setup restrictive FTP. This will allow users to login via ftp but be in a "chroot jail" within their home directories.

There is a FAQ I found from searching google. Many docs are available as well.

In the FAQ I reference below, there is a section on restrictive FTP down in Chapter 5.

http://www.pimpworks.org/hp/hpuxfaq.html

Did a search on google for "restrictive ftp + hpux"

[D Block 2]

I took a quick look at: # man ftpaccess on a 11.11 system, and the /etc/ftpd/ftpgroups (file) has:
group-name - ACCESS GROUP you create.
encrypted-Password - format like /etc/passwd.
real-group-name - must be in /etc/group.


also, check the options for FTPD and logging in docs.hp.com and possibly GOOGLE.com


docs.hp.com is a good search entry, and also is google. I found this one on docs.hp.com:

http://docs.hp.com/en/B2355-90685/ch02s08.html?btnPrev=%AB%A0prev

The /etc/ftpd/ftpaccess configuration file is the primary configuration file for defining how the ftpd daemon operates. The /etc/ftpd/ftpaccess file allows you to configure a wide variety of ftp features, such as the number of ftp login tries permitted, ftp banner displays, logging of incoming and outgoing file transfers, access permissions, use of regular expressions, etc. (For complete details on this file, see the ftpaccess (4) manpage.)

[Karen Hall]

Tom, Rick,
Thanks for the support. Unfortunely, I have googled some and looked at the same docs as you. I find the ftpaccess man confusing and with no solid examples. My whole goal is to keep users from cd'ing to any other directory other than the one they log or chroot into. I "think" ftpaccess is the answer and that's why I'm requesting support (with good examples) for that file.

[Robert Salter]

Karen,

Here's a quick doc a former sidekick put together that lays it out pretty good. We were restricting ftp access to a particular directory for this user ID. Hope it helps you out.

cheers

[Joseph Loo]

hi karen,

attached the steps for configuring ftpaccess and also restricting access to the user's home directory.

hope it help.

regards.