More ftp problems

[Wouter Jagers]

What's the current umask on your machine ?
When you create a file using touch, does it get the same permissions as the incoming file ?

Long shot, I know, but it might be a useful principle if the file arrives without any security info.. if we're that lucky, we could simply put the umask to 022 for 'rw-r--r--' on these files.

greets
Wout

ps: nope, not from SA.. but I completely understand the question, since I'm from Belgium, the dutch speaking part.. I was wondering if you were from here, too :-)

[Ronelle van Niekerk]

Thanks a lot guys!

I think we narrowed the problem down.

I didn't mention that we are using a KEON version of ftpd rather than the standard version.
It seems that the KEON version doesn't like to use the -u and -a options together in the inetd.conf file.

So our next move is to remove the -u option and add a line to ftpaccess for all the other users on the system. Just have to figure out how to do it.

-Ronelle

[Dave La Mar]

Ronell -
Finally got it working here between mainframe and HPUX. Here is my test entry in ftpaccess -


upload /home/dlamar /home/dlamar/work/ftpdown yes dlamar adm 0640 dirs

Let me explain. "/home/dlamar" refers to the ftp user's home directory as noted in the /etc/passwd file. "/home/dlamar/work/ftpdown" refers to the permission setting you wish for the ftp user to have on files placed in "/home/dlamar/work/ftpdown" , i.e. in this case
rw-r-----.

Dang! I knew we'd get it!

Thanks for posting this. I was forced to gain some knowledge.

Best of luck on your ftpaccess edits.

Regards,

dl

[Ronelle van Niekerk]

Dave,

My pleasure!


And thanks for all your help.

[Q4you]

Dave,

I am coming from a different thread but facing more or less same problem. Could you please attach you "ftpaccess" file.

After changing ftpaccess, it becomes effective immediately or we have to recycle inetd ?

-Q4

[Ronelle van Niekerk]

Just thought I would mention that we have discovered that the ftp we are using does NOT support the use of the ftpaccess file.
I discovered that I was completely wrong about it working in the test environment - thought I was getting it to work with the right permissions when it was just getting the default permissions. Don't ask me ..... it was at the end of a long day.

We've asked them to change the ftp we use so that it does support the use of the ftpaccess file.
So we've decided, while we wait the several months it will take for them to do this for us, that we will use cron to change the permissions of the files on a daily bases (Thanks Steven.)

The IT manager will just have to be satisfied with that. And if not ...... see my personal quote for ideas

[Ronelle van Niekerk]

Forgot to mention ...

Dave, Thanks for all the trouble and sorry for all the trouble.

-Ronelle