vg permission for ftp

[denise_7]

Created a vg for ftp files. 5 users will be ftping files. how do I set the vg to accept ftp from these 5 groups? is there such a thing as setting permissions on a vg, or do i need to create a lvol? thanks

[K.Vijayaragavan.]

Hi,

As i know,

You must create a logical volume and create a file system and mount it.

-Vijay

[Tom Geudens]

Hi,
Create a new group (ftpusers for example). Add the five users in this group (making it a secondary group for them).
Alter the ftpdirectory ownership/permissions so the ftpusers-group can write in this directory.
And your set ...

Hope this helps,
Tom Geudens

[denise_7]

I did this. I did this:

chgrp ftpuser ftp

But who should be the owner of the ftp directory?

Thanks

[Sanjay_6 · Accepted solution]

Hi Denise,

FTP useers have nothing to do with VG's or LV's. They are only bothered about the directory. So your creating a vg or lv is not necessary if you can provide the users with a directory, even on an existing lv. The ftp users are normally logged into the homedirectory for the user id they are using.

If you want to restrict the userid's for ftp only and also want to put specific ftp configuration in place, you should look at annonymous ftp or ftpaccess. Do a "man ftpaccess" to know more about how to setup ftpaccess to control the behaviour of the ftp users.

Here is a sample thread from itrc,

http://us-support2.external.hp.com/cki/bin/doc.pl/sid=e995339517e987d05b/screen=ckiDisplayDocument?docId=500000000092476

Hope this helps.

Regds

[Kevin Wright]

I think what you are looking for is a chroot ftp environment. There are several docs here that explain how to set that up, you need either proftpd or wuftp server.

[denise_7]

All,
Here is what I did. Since the developers needed to have a large amount of temporary disk space, I created another vg, and a lvol under it with about 40 gig of space. I then went into the file system and created an account for each of them. One user tested FTPing to his folder, and it worked. But he said its best if he can ftp to the lvol itself, so others can view/access these FTP also. So what I cannot figure out is how to set up the whole lvol to be accessed by a group of FTPers. The users don't want to have to FTP to their directories, but rather as a whole dump into this one file (its called /ftp if you do a bdf this is what shows up). Any questions get back to me. Thanks!

[Tom Geudens]

Hi Denise,
I'm a little in the dark here ... so I'm going to walk through the points I understand :
1. The dump/ftp filesystem
cd /ftp
bdf .
# I ommitted everything that's not needed for this "case".
/dev/vg13/lv_ftp ... /ftp

2. The group ftpusers
Contains
user1
user2
user3
user4
user5
This group is not necessarily the primary group of these users (it can be, but it doesn't have to be) ...

3. The permissions on /ftp
ll -d /ftp
# I ommitted everything that's not needed for this "case".
drwxrwxr-x 14 root ftpusers ... /ftp

4. The test
user1 tried to ftp to /ftp ... and it worked.

5. My question :-)
If points 1. to 4. are correct, what exactly remains to be solved ?

Regards,
Tom Geudens

[Shannon Petry]

Sounds to me like the someone want's a semi-secure FTP site. They don't want public access, but want a common directory where everyone can read/write data.
"secure" access and a changed environment are safest for this, but would require all users to use the same ID. This is because users can not stomp each others files/directories.

Regards,
Shannon

[denise_7]

All, maybe I am not clear myself. First of all...I work beyond a firewall and five developers want to move test data that will be used in a database (Oracle 8.x in this case). They already have an account on the system. They wanted me to create "space" for them to dump ftp_dump files there before they move them to the db. Also, this is temporary, not sure what is holding them up from moving to the db. So I went ahead and created:

vg02
mount point ftp_dump
bdf shows /ftp_dump

Now, they wanted me to make the /ftp_dump set up for them to dump flat files there for now. They do not want me to set up their /ftp_dump/user1...5 accounts. They just want to have the ability to dump ftp files there for the time begining.

Today guess what...the /home directory got full (it is about 120 mb) and I believe this is because they ftp the files to their account under /home (I can see these files there), then ftp to ftp_dump. Note: the ftp_dump is 43 gig and is only 18% full...but the /home fs is full and I need to extend the fs. It would be easier to just ftp directly to ftp_dump...

Here is what I did. I set the permission for ftp_dump to 777 and its owned by root (both owner and grp).

I am trying to find time to bring down the system to single-user mode to extend the fs. I believe the user will clean out his home directory so he can continue to work.

Sorry for not being so clear in the first place...

Thanks!