ftpd process is not using my ftpaccess file

[carlos_andorra]

Hi,

We're trying to secure the ftp process in one of our servers using the ftpaccess file.

Main idea is just print out a banner message, like "unauthorized access......." and limit all the local users in the server to its own home directory.

Our hpux version is 11.11.

I've already read a big number of threads related with this issue and some documents
related with the ftpaccess directives.

Main idea is not change the home directory for the local users in that way all the local users will be able to connect to the server. And only some of them (we will limit the users able to stablish a ftp session using the ftpusers file) will be able to connect using ssh and stablish a ftp session.

As far as I've understood using the "banner" directive and the guestuser directive we can configure the ftpaccess to work as we want. And is not necesary to modify the home directory ( i mean using the xxxx/./xxx trick)

Here is the ftpd line in the inetd.conf file:

ftp stream tcp nowait root /usr/lbin/ftpd ftpd -l -v -a

In the attached "info" file you can find a part of our /etc/passwd file and the ftpaccess file.

Where jrodrigo,cesar,cruiz and test are allowed to stablish a ftp session (not in ftpusers file), they are able to make ftp without problem but they're not restricted to their own home directory.

And Here is an example of a ftp connection:

C:\Documents and Settings\Administrador>ftp ihpvit01
Conectado a ihpvit01.inf.sta.
220-ATENCIO: queda prohibit qualsevol acces no autoritzat a aquesta maquina
220-WARNING: unauthorized access to this machine is strictly forbidden
220-
220-
220 ihpvit01 FTP server (Version 1.1.214.4(PHNE_33412) Mon Sep 19 18:45:21 GMT 2
005) ready.
Usuario (ihpvit01.inf.sta:(none)): test
331 Password required for test.
Contraseña:
230 User test logged in.
ftp> pwd
257 "/home/test" is current directory.
ftp> cd ..
250 CWD command successful.
ftp> pwd
257 "/home" is current directory.

For me looks like the ftpaccess file is not used, not "restricted message" appears in the login process.

Any idea about howto troubleshoot this problem or howto solve it will be really welcome.

Thanks in advance. Kind Regards

[Steven E. Protter]

Shalom,

This is a known bug in certain versions of the wu-ftpd server as HP implemneted it.

There may be a new version at http://software.hp.com

When I ran into this very same issue there was no new release so I openned a support call and was given access to an ftp binary to use that worked properly.

SEP