How can restrict ftp access to read only?

[Luis Toro]

I would like to restrict a group of users to "read only" access via ftp (ie., can only retrieve files, no overlay, delete, chmod, etc...). Can this be done via ftpaccess file? I did a man on ftpaccess and it was not intuitive. I cannot change the directory permissions since they need to be group-writeable, and these users need to be in that group in order to run the app. This is on an HPUX 11.11 system.
Thanks

[Srikanth Arunachalam]

Hi,

To my knowledge it is not possible through the FTP settings. You might need to pickup a path of folder that is read only to the group and others.

Thanks,
Srikanth

[Tim Nelson]

ProFTP does this well. It is included in the IExpress package.

[Rita C Workman]

Possibly as mentioned some third party vendor has done something....

However for the basics on FTP; it is was it is: file transfer protocol. The purpose being to get/put files. So once they are there, they can get the file(s) and read what ever you granted them access via ftp.

Just a thought,
Rita

[Luis Toro]

FYI, by "read only" I mean that users can get files, just not "put".

[vz7r1x]

Luis
You can control ftp process via firewall. Firewall rule can be set to allow only "ftp put" and deny "ftp get" on that port using ftp/sftp/tftp if you have a firewall.

HTH.

[Dennis Handly]

You can also set the directory permissions to disallow write and again on each file.

[Dennis Handly]

If you can't change the directory permissions, can you force the users to do a get under another user or anonymous, so you can set the directory Other permission disallow write access?

[Kapil Jha]

I think its not possible via FTP, you may use restricted shell.
see
http://forums12.itrc.hp.com/service/forums/questionanswer.do?threadId=1053040

Hoope this help!!!!
BR,
Kapil

[vz7r1x]

Luis
The other alternative is to create "FTP ONLY" account where shell path could be /bin/false

with /bin/false shell, a ftp user can only perform ftp operation.

Thanks

[Luis Toro]

thanks for your replies. I think samba will provide the solution I'm looking for without having to install a 3rd party ftp software. I can't change directory permissions, nor the home directories of the users (they all share the same home directory, which puts them into the application). FTP only accounts will work, but I don't want to create second ftp only accounts for each user (we're talking 100's of users).

[Luis Toro]

closing thread