Restricting FTp access for selected user

[Sandeep Geet]

Hi !

I have HP server with UX 11i ver1 OS.

For a particular user, I want to allow only his home directory access. I have used rsh for that user.

Is there any other way?

How can I restrict /eby ftp access for this user?

Can someone help?

Thanks and regards,
Sandeep

[Sunil Sharma_1]

for restricting ftp access you can add his user name in ftpusers file in /etc/ftpd directory.

For other ristriction you can use file level permissio or assign his ristricted shell

Sunil

[Thierry Poels_1]

hi,

set up Guest FTP which will chroot to the user's home directory.

regards,
Thierry.

[Alexander M. Ermes · Accepted solution]

Hi there.
Setup a file named ftpusers in /etc/ftpd.
Here an extract from the manpage.
Userid's in this file will not be allowed to use ftp.
Rgds
Alexander M. Ermes


NAME
ftpusers - security file for ftpd(1M)

DESCRIPTION
ftpd rejects remote logins to local user accounts that are named in
/etc/ftpd/ftpusers. Each restricted account name must appear alone on
a line in the file. The line cannot contain any white space. User
accounts that specify a restricted login shell in /etc/passwd should
be listed in /etc/ftpd/ftpusers because ftpd accesses local accounts
without using their login shells. UUCP accounts should be listed in
/etc/ftpd/ftpusers. If /etc/ftpd/ftpusers does not exist, ftpd skips
the security check.

EXAMPLES
Given an /etc/ftpd/ftpusers file containing the following:

Only lines that exactly match user account names are
significant. Blank lines are harmless because they
do not match any account names. However you must be
careful.

uucp
guest

ftpd would reject login attempts using the local accounts careful.,
uucp, or guest.

AUTHOR
ftpusers was developed by the University of California, Berkeley and
the Washington University, St. Louis, Missouri.

SEE ALSO
ftp(1), ftpd(1M).

[bhoopathi_1]

You can restrict ftp access to a user by adding the username in /etc/ftpusers file. All users listed in this file are denied ftp access.

[Jan Sladky]

Hi Sandeep

Thierry is right you must "chrooting" in ftp conf file

rgds Jan