Subject: Setting up of private directories

From: Michael Clarkson <[email-masked]>
Date: Tue, 17 Oct 1995 10:56:53 +0100

Hi All,

I apoligise in advance if what I am asking is trivial or covered in some documentation ( by the way a source of code wu-ftpd documentation would be appreciated, is there a good HOW_TO doc somewhere ?)

Anyway I wish to setup up two private directories, say X and Y, i want a user Y to be able to access and upload to dir Y, but not be able to access or list dir X, and vice versa.

What is the most preferable and secure way of achieving this ?

The system is running Solaris 2.4 for X86.

Thanks in advance

Michael Clarkson

----- End Included Message -----

---

From: Jeffrey Weiss <[email-masked]>
Date: Tue, 17 Oct 1995 08:28:51 -0500 (CDT)

> The system is running Solaris 2.4 for X86.
This is what I did for Solaris 2.3

You'll need to set up /etc/passwd or NIS+ passwd entries for these accounts.
How this is done is critical. Here's an examples:
from a NIS+ entry;
bloom:94edfDBU57&6:2502:15002:Bloomington ftp 
user:/export/US/virt/./stick/www:/bin/false:9164:0:::::

I.E., make sure a nonfunctional user shell is specificed in the passwd 
entry as well as /etc/shells.

Create the path similar to above, where stick/www is where the ftp user 
is dumped when they ftp in, and "virt" is where they are chrooted.
Note the "/./"; you need this.

Create appropriate bin lib and etc directories at the chroot level per
standard documentation. Do an 'ldd' on binaries like 'ls' to make sure 
you get all needed libraries.

Create /etc/group entries for X and Y such as
guests:*:200:X,Y,Z

and guids for X,Y, and Z.

And place the entry :"guestgroup guests"  into your ftpaccess file.

Make certain that owner/group permissions are set properly on the
X and Y directories and go for it.

Others may point out slightly better ways to do it, but based on help I 
got from the net this is what I set up--and it works.

It's a great way to allow people to administer web-only accounts.
> ----- End Included Message -----

___________________________________________________________________________
Jeffrey Weiss UNIX administrator    [email-masked]
TIES - Technology and Information Educational Services www.ties.k12.mn.us
(612)638-2311  fax (612)631-7519 1925 W. County Rd. B2,  Roseville, MN 55113