question about ftpaccess

[itai weisman]

hi everyone,
i have enabled ftpaccess in my system in order to restrict some logins to my server.
since then, when allowed user connect to my server, he's able to put and get files from my server, but, when he issue "ls" command he sees nothing.
i couldn't find where i grant ls permission to users in ftpaccess.
when i cancel usage of ftpaccess (by removing 'a' flag from ftpd entry in inetd.conf) - it's working.
i'm using wuftpd-2.6.1 on HPUX 11.11 PA-Risc.
thanks ppl

[Stephen Keane]

What is the contents of your /etc/ftpd/ftpaccess file ?

[Joseph Loo]

hi,

may i know what you mean "sees nothing"? have u restricted directory access for that the user?

regards.

[Joseph Loo]

another question is whether u have provided ls command in the home directory of the user?

regards.

[Sergejs Svitnevs]

You need to make a bin dir in the home dir of the guest account and put ls in it. Because ftp chroot to the homedir, the user cant access the ls that is in /bin.

Regards,
Sergejs

[itai weisman]

hi everyone and thanks
the user entry in the fstab is:
reuven:AxMYOlOJEDxpA:200:20:global user for reuven:/vendor_1/DEALERS/storage/DEA
L_SND/peldlr/./:/bin/ksh

attached ftpaccess file
ll /etc/ftpd/ftpaccess:
-rw-r----- 1 bin bin 2457 Apr 21 09:11 /etc/ftpd/ftpaccess

[itai weisman]

hi,
the user has ls command in his home directory (link points to /bin/ls)
furthermore, the client output:
ftp> ls
200 PORT command successful.
150 Opening ASCII mode data connection for /usr/bin/ls.
226 Transfer complete.
indicates that he uses /usr/bin/ls, that exists and working.
also, after removing 'a' flag from ftpd (disable use of ftpaccess) - it works.
itai

[Ermin Borovac · Accepted solution]

ftpd tries to execute /usr/bin/ls, however, as other people indicated, it does chroot() to user's home directory so it would look for /usr/bin/ls relative to that.

If user's home directory is /home/user, ftpd looks for ls in /home/user/usr/bin/ls.

/home/user/usr/bin/ls cannot be symbolic link as ftpd cannot access anything below /home/user (due to chroot()).

You have to copy /sbin/ls (statically linked ls) to /home/user/usr/bin/ls for this to make it work.

[itai weisman]

home user directory is on another phyisical disk, so i can't staticly link.
after copy '/bin/ls' (and some shared libaries as well) it's working.
thanks a lot!