How to restrict ftp user to access files

[j773303]

As title, when user ftp to unix server, could
it be possible restrict the user only access
/home directory?

[Roberto Martinez_6]

You can configure the system for anonymous ftp access, which will restrict a lot access to your system. Have a look to ftpd man page (hpux11), it explains step by step how to do it.

[Robert-Jan Goossens]

Hi,

Take a look at next question it will help you.

http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0x3b9093e260b0d611abdb0090277a778c,00.html

Robert-Jan.

[T G Manikandan]

This doc explains well

http://www2.itrc.hp.com/service/cki/docDisplay.do?docLocale=en_US&docId=200000062906536

[Yogeeraj_1]

hi,

Step-by-step (as the root user)

1. cp /usr/newconfig/etc/ftpd/ftpaccess
/etc/ftpd/ftpaccess

2. create a group for ftp users called ftponly

3. create the new ftp user (say yogeeraj) and restrict hime to /home/yogeeraj

useradd -m -d /home/yogeeraj -s /usr/bin/false -g ftponly yogeeraj

4. Add this false shell to the file (just add the /usr/bin/false line to the file)

5. Change the /etc/inetd.conf file (the ftp line) to read:
ftp tcp stream nowait root /usr/lbin/ftpd ftpd -a

6. Now edit the /etc/passwd file and change the directory setting for the user: add /./ at the back of the directory

(if the line used to read:
yogeeraj:98732jgjh:100:103::/home/yogeeraj:/usr/bin/false

Make it :

yogeeraj:98732jgjh:100:103::/home/yogeeraj/./:/usr/bin/false

7. Restart inetd "inetd -c"

That should be it

also take a look at the thread below on how to setup ftpaccess on your system.

http://us-support.external.hp.com/cki/bin/doc.pl/sid=f3889157083aef0a6e/screen=ckiDisplayDocument?docId=500000000092476


hth
yogeeraj

[Balaji N]

man ftpaccess.
-balaji