Subject: [962] RE: [959] setting up guestgroup

From: [email-masked]
Date: Wed, 21 Dec 1994 12:30:03 -0800 (PST)

My attempts at this failed because '/etc/ftponly' did not pass the shell check, 
so I simply put in a valid shell and things worked.

Do you have the following in ftpaccess?

guestgroup gst

>
>
>how to set up an upload directory under the anonymous ftp home
>directory which would be accessible by only certain people.
>
>i've tried creating a user "aguest" group "gst" in my /etc/passwd & 
>/etc/group files
>
>the passwd entry is   
>			aguest:xxxx:401:401::/data/ftp/./incoming:/etc/ftponly
>
>
>when i ftp to my server and log in as "aguest" i get user access denied 
>message.
>
>what am i doing wrong? and is there supposed to be a shell program called 
>"ftponly"? or is that any dummy argument?
>
>thanks
>mark
>
>
>
>
>

---

From: [email-masked] (Patrick Salsbury)
Date: Wed, 21 Dec 1994 13:42:27 -0800 (PST)

->what am i doing wrong? and is there supposed to be a shell program called 
->"ftponly"? or is that any dummy argument?

-From: [email-masked]
-
-My attempts at this failed because '/etc/ftponly' did not pass the shell check
-so I simply put in a valid shell and things worked.

	Watch this. The point of the /etc/ftponly is that it will only allow
ftp logins. If you put in a valid shell, and then try a telnet/rlogin to the
host, give the right password, and Poof! You're a full-fledged user, with all
attendant access privs.

	I use /bin/false as the shell for my guest FTP account. It allows them
to FTP in, but any login attempts are immediately disconnected.

Pat
-------------------------------------------------------------------------------
	  Patrick Salsbury 	                  Visionware           
	Sys Admin/Webmaster             4500 Bohannon Dr., Suite #280  
	Voice: 415/325-2113	             Menlo Park, CA 94025      
	 FAX: 415/325-8710	      X/UNIX/PC Integration Specialists

---

From: Mark Bieniulis <[email-masked]>
Date: Wed, 21 Dec 1994 15:11:35 -0700 (MST)

> to FTP in, but any login attempts are immediately disconnected.
i can get it to work with /bin/sh but anything else i get user access 
denied.

mark