restricted telnet access

[Paul Barmettler]

how can telnet access for a specified user be restricted?
Situation:
Server filesystem /export/TEST is already exported for everyone.

Problem:
User xxx should obtain access via telnet to directory server:/export/TEST/XXX, and must NOT be allowed to change to parent directory.

thanks for your help
Manuel Maerki

[Todd McDaniel_1]

Is this in regards to ftp? I know ftpaccess is an excellent way to do this exact thing.


Maybe You could make a unique group and restrict read access to the parent directory...

[Geoff Wild]

Make sure that the file system has no world access - say 750 and that the user is not the owner nor in the group that has access to that filesystem.


Rgds...Geoff

[Victor BERRIDGE · Accepted solution]

Hi,
In /etc/passwd, change the login shell to /usr/bin/rksh
(REstricted ksh...)
All the best
Victor

[Edgar Zapata]

See if this answer from T G Manikanda helps (the credit is all his):

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=230567

Also check whether the user shell is defined in the /etc/shells file.
The /etc/shell file should look like
/usr/bin/sh
/usr/bin/ksh
Add the user's login shell here.

regards.

[Shantaram Sahyadri]

Hi,

I had a similar requirement, this is what i did to solve it, there might be better ways of doing it,

in the /etc/passwd file where the login shell is defined I redefined it with another scrip which forks the shell for the user with chroot command. after doing this the user logs in but cannot change directory to a higher level than the users loging directory.

Cheers
Shantaram