Restricted FTP account

[Mark DiBenedetto]

I want to setup an account that will allow a user to ftp to my hp-ux version 11.0 system and get a file only. I do not want to allow them to put a file and I do not want them to be allowed to move around. Does anyone have any idea how to do this?

[Mark Grant · Accepted solution]

I don't know if this is the correct way but I remember setting up something like this a few years ago using anonymous ftp. This sounds really insecure but actually isn't.

Basically you set up a directory containing a bin and etc directory, it has it's own passwd file and the user can not move out of it.

You could check out this page

http://www.bris.ac.uk/is/services/networks/anonftp/anonftp1.html

[Sridhar Bhaskarla]

Hi,

Use "ftpaccess" file. Configure your ftpd in inetd.conf file with -a option. Then use ftpaccess file in /etc/ftpd directory. You can certainly do what you want. You just need to read how ftpaccess works. You will need to setup your user with customized chroot'ing. Take a printout of 'ftpaccess' file and go through carefully.

-Sri

[Mark DiBenedetto]

Thank you for your answers. It will take me a while to digest and do some more research. Thanks again.