ssh telnet .. and limiting ftp access.

[someone_4]

Hello I was wondering if there is a way to limit permission for ftp. For example when somone ftps in a user1 they can only add and delete stuff in only the home directory. or only directories that we want them to access.
I would also like to find out about ssh telnet.

Thanks

[Joseph C. Denman · Accepted solution]

If you are using 11.0, you can set up the ftpaccess file.

man ftpaccess

There are numerous post on how to set this up. Do a search on ftp.

...jcd...

[Brian Hackley]

Richard,

On your FTP access question, man 4 ftpaccess
and man ftpd should answer the question in sortid detail. You can either set up FTP sublogins where a user FTP's in with Anonymous FTP and then logs in to their account, or with recent 11.0 FTP patch, where the WU-FTP deamon ftpaccess file is used to cause users to be chroot'd to their home directory (which means they can't wander UP the filesystem hierarchy beyond $HOME).

I have not set up ssh telnet so I'm sorry I can't comment about it.

Hope this helps,

-> Brian Hackley

[Steven Sim Kok Leong]

Hi,

With regards to your your query on ssh telnet, please note that ssh functions very differently from telnet even though they serve the purpose of allowing remote host sessions.

Some differences are as follows.

Telnet transmits your login userid, password as well as data during the remote sessions in the clear across the network. SSH encrypts all this traffic.

SSH is analogous to an encrypted telnet
SSH is analogous to an encrypted remsh
SCP is analogous to an encrypted rcp
SFTP is analogous to an encrypted ftp

SSH allows you to piggyback on its PKI infrastructure for authentication, confidentiality and non-repudiation while telnet by itself does not do all this.

With HP-UX, you have the alternate option of using kerberos for your remote sessions such as klogin, kshell in replacement for login, shell.

For more details, you can search the web.

Hope this helps. Regards.

Steven Sim Kok Leong
Brainbench MVP for Unix Admin
http://www.brainbench.com