Restricted FTP access

[Dave La Mar]

I have been tasked to create an account that can ftp to our N Class 11.0 machines. This should be an ftp account only (as they have in the NT world).
This account would be restriced to a single directory with rw priviledge.
Is this possible in unix or do I need to create a regular user account?
Thanks for any input.
dl

[harry d brown jr]

Do a man on ftpaccess

You will have to create an account. And yes, unix is not NT, thank god! So you will have to create an account, even if it is an anonymous account.

live free or die

harry

[S.K. Chan]

I would try this out ..

1) Create a normal user account (user=john group=none)
2) Put /usr/bin/false as the start-up program.
3) The entry in password file might look like this :-
john:chus5tya:233:20:,,,:/home/john/./:/usr/bin/false
4) Make sure /usr/bin/false is also coded in /etc/shells
5) Create the file /etc/ftpd/ftpaccess and put in these lines ..
class all john,guest
guestgroup none
noretrieve /etc/passwd
6) do man ftpaccess if not sure about the format.
7) # chmod 444 ftpaccess
# chown bin:bin ftpaccess
8) Edit /etc/inetd.conf & add "-a" argument to ftpd
ftp stream tcp nowait root /usr/lbin/ftpd ftpd -l -a
9) # inetd -c
10) Create these sub dirs and files
1) ~john/usr
# chown ???R bin:bin usr
# chmod 555 usr
2) ~john/usr/bin
# chown root bin
# chmod 555 bin
# cp -p /sbin/ls ~john/usr/bin/ls
11) Test ..

enjoy !!

[someone_4 · Accepted solution]

Here is a doc that I found helpfull

Richard

[Sridhar Bhaskarla]

Dave,

Create the account as usual but make the shell as /bin/false.

Now add /bin/false to /etc/shells file (if you don't have this file, create one).

This user can only do ftp now. He/She cannot logon to the box.

-Sri

[Sridhar Bhaskarla]

Ooops. Didn't read your message completely...

Check ftpaccess manpage. It's easy. You just need to change the home directory should be of the form /./some_dir.

-Sri

[Dave La Mar]

Thanks to all who replied. Though all were fine suggestions, I used Richard's as it was easiest for this dummy to follow.
Thanks again.
dl