Subject: help: privileged remote ftp user

From: [email-masked] (Walt Dabell)
Date: Mon, 23 Oct 95 16:02:53 EDT

Hello all,

Please, if there is a FAQ, and especially if it answers the following 
question, would some kind soul direct me to it? Thanks.

I have been trying to set up WUFTP to allow a specific remote user
(preferably without a REAL user account) to deposit and update files
in one of the anonymous ftp directories. I can't figure out how to
let him write to the directory without everybody being able to. I
want _only_ him (well... anyone from his machine) to be able to write 
to that directory via anonymous ftp. 

The other alternative I've tried is to make him a real user and use
gestgroup. But I can't figure out how to keep him from being able
to telnet into my machine as well. Can someone tell me where to find
(or what it has in it) /etc/ftponly that the wu-ftpd documentation 
refers to?

Thanks in advance.

         Walt Dabell    (302)645-4225    [email-masked]  
       University of Delaware,  College of Marine Studies

---

From: "Mike Ellwood, CCLRC, Rutherford Appleton Laboratory, GB" <[email-masked]>
Date: Mon, 23 Oct 1995 20:14:27 +0000 (GMT)

> (or what it has in it) /etc/ftponly that the wu-ftpd documentation 
Not a complete answer but to your latter question,
/etc/ftponly can just be a symlink to /etc/null.
(This is mentioned somewhere in the docs).

You can use chuser (or SMIT) to set the user to
login=no, su=no, telnet=no, rlogin=no.

That is as secure as whatever AIX gives you in that area;
I have no idea if it is bulletproof or not.

You also have some protection in making his home
directory whatever you want, so that even if
he logs on somehow, his view of the world should be
fairly limited (I think - it certainly is when he ftps).

[email-masked]