manging ftp user

[Roberto Volsa]

Hello,
which is the best way to allow a user to fto to a system without letting him to telnet or login to the system?
The user should also look into only one directory.

Thanks and regards

RV

[Mark Grant]

Setting the users shell to /usr/bin/false and putting /usr/bin/false in /etc/shells will keep them out.

Also, have a look at the man page for "ftpaccess" it will allow you do do all sorts of things that you might like.

[Steven E. Protter]

If your system has a user called ftp user or ftpuser.

Make sure that password gets changed once in a while.

I had a problem with that user on a Linux box recently. It was logging on and trying to break out into a command shell. Except it wasn't me.

SEP

[Tom Smith_9]

Using ftpaccess with a restricted account sounds liek the way to go. I have used this method many times and it has always worked well.
I have attached a text file with some notes (I believe I got them from this forum a while ago.) on setting up an FTP account for restricted access.

[Alzhy]

Best is use FTP's configuration file: ftpaccess.

Even better is to use TCP_Wrappers to enable certain users/subnets/etc. to access your inet services...

[Dave La Mar · Accepted solution]

Roberto -
Find attached the HP docs on this process.
We have used the docs for this purpose.
Best of luck.

Regards,

dl