Subject: [975] RE: [968] Re: [962] RE: [959] setting up guestgroup

From: [email-masked]
Date: Thu, 22 Dec 1994 08:26:39 -0800 (PST)

Thanks to Patrick Salsbury for the feedback - I learned something significant 
about server configuration and security in all this.  I did have to put 
/bin/false in /etc/shells to get guest login to work, though anonymous login 
does not need it even with the /etc/passwd ftp account set to shell /bin/false.

Should there then exist a line in /etc/shells:

/etc/ftponly

and should this file exist?  I grepped the source, support and documentation 
for ftponly and only found one reference in doc/ftpaccess.5 to a sample 
/etc/passwd entry.  If this should go in /etc/shells I haven't found a 
reference to such yet.

Michael

>> -From: [email-masked]
>> -
>> -My attempts at this failed because '/etc/ftponly' did not pass the shell >> 
check - so I simply put in a valid shell and things worked.
>> 
>> 	Watch this. The point of the /etc/ftponly is that it will only allow
>> ftp logins. If you put in a valid shell, and then try a telnet/rlogin to the
>> host, give the right password, and Poof! You're a full-fledged user, with 
all
>> attendant access privs.
>> 
>> 	I use /bin/false as the shell for my guest FTP account. It allows them
>> to FTP in, but any login attempts are immediately disconnected.
>> 
>> Pat
>> 

---------------
Michael Brennen                    Intecom, Inc.
[email-masked]               5057 Keller Springs
(214) 447-8074                     Dallas,  TX  75248

---

From: Mark Bieniulis <[email-masked]>
Date: Thu, 22 Dec 1994 08:47:58 -0700 (MST)

i'm running my ftp server on solaris.
it doesn't have a shells file by default, so i created one
and put /etc/ftponly in it. which itself doesn't exist.

now my guest ftp login works as advertised and regular logins with
that guest name fails.

thanks for all your input

mark bieniulis