1831645 Members
1983 Online
110029 Solutions
New Discussion

ftpaccess ?

 
Roland Rebstock_1
Frequent Advisor

ftpaccess ?

All, i have setup the ftpaccess file, How can I specify particular users to have no delete, create or any other permissions but put?
From
delete no real
To
delete no username
6 REPLIES 6
Roland Rebstock_1
Frequent Advisor

Re: ftpaccess ?

I would also prefer the user not to be able to cd .. or cd into another directory.
Bill Douglass
Esteemed Contributor

Re: ftpaccess ?

You can't control commands like delete and overwrite at the user level, as best I understand.

What you can do is set up a guestgroup entry in ftpaccess, and put the specific users into that group (as defined in /etc/group).

Then set up their home directory as an anonymous ftp directory (with etc/passwd, etc/group and usr/bin/ls). When they log in, ftpd will chroot to their home directory.

You can then set up read-only permissions on all files you want to protect (no delete), and create a drop-box directory as mode 333 (-wx-wx-wx) so the user can put files there but cannot see them.
Rajesh G. Ghone
Regular Advisor

Re: ftpaccess ?

Hi,
You cannot restrict the users to delete the files through FTP at the most what you can do is you can make those files read only so that they cannot do any kind of editing in it.

Regards,

Rajesh G.
Rajesh Ghone
Sritharan
Valued Contributor

Re: ftpaccess ?

Hi,

You cannot specify a particular users to have delete or create permission on a file.

The best thing you can do is to create a group that will have the mode that you want them to have and then add the user to that group.


Thanks & Regards
Sri
Known is a drop...unknown is an ocean -> quote from a movie
Shannon Petry
Honored Contributor

Re: ftpaccess ?

You can restrict ANY ftp command with Proftp. It requires a server change of course, and Im not sure the availability on HP-UX. I use ProFTP on Solaris and Linux over wu_ftpd and have for 2 1/2 years.

Read up on man pages and how-to's as the configuration is quite different from wu_ftpd, more XML like.

Regards,
Shannon
Microsoft. When do you want a virus today?
Shannon Petry
Honored Contributor

Re: ftpaccess ?

I checked the porting site, and Proftp is available for download at:

http://hpux.cs.utah.edu/hppd/hpux/Networking/FTP/proftpd-1.2.4/

Like I mentioned, it's a different config, but I prefer this by far for flexibility and security over wu_ftpd.

Regards,
Shannon
Microsoft. When do you want a virus today?