Subject: Having multiple CHROOTS with 1 FTPD

From: [email-masked] (Robert Chea)
Date: Mon, 22 Apr 1996 19:24:25 -0700

Robert S. Chea
Director of Information Systems
[email-masked]

Phone:  (408) 261-6222
Fax:  (408) 261-6226

---

From: [email-masked] (Robert Chea)
Date: Tue, 23 Apr 1996 09:33:24 -0700

Actually, I want clients to dial into the same ftp address, like
ftp.company.com.  Each client would then be chrooted into his/her directory
and would not be able to see anyone else's directory.  Each client has
his/her own /usr, /dev, and /etc directories.  I've tried it out and it
seems to work fine.  I just want to know if these method suck up too many
resources, if it's deathly slow, or just bad in general.

Robert

>Robert Chea wrote:
>>
>> I want to have multiple chroots for clients so that basically, a client can
>> only see his stuff.  I need multiple chroots because the clients are all
>> members of a web group, and the web group needs read/write permissions on
>> everything.  I was just going to run a single ftpd daemon, and recreate the
>> ftp structure for each client under his/her directory to achieve this.  Is
>> there a better way to do this?
>>
>> Robert S. Chea
>Does this work?
>if you want to access like this:
>
>        ftp.ftp1.com    /ftps/ftp1/standard ftp directory structure
>        ftp.ftp2.com    /ftps/ftp2/standard ftp directory structure
>        ftp.ftp3.com    /ftps/ftp3/standard ftp directory structure
>
>???
>RAK

Robert S. Chea

Phone:  (408) 261-6222
Fax:  (408) 261-6226

---

From: [email-masked]
Date: Tue, 23 Apr 1996 18:12:53 +0100

The approach you suggest will work well, in my experience. (Solaris
2.3/2.4)  However having multiple copies of ls and its associated
libraries is a waste of disk space if you have a large number of
accounts.  To get around the problem you can hardlink your ls and
library files to a master copy, taking extreme care with permissions.

Multiple chrooted environments also allow a different (stripped)
version of the password file to be stored in each account, which
improves privacy and security slightly.

Regards,

Stephen A.

===============================================================
       Stephen M. Adams		:    [email-masked] 
   Systems/Software Engineer	:    Tel: +44 1232 894334
  BT Belfast Engineering Centre	:    Fax: +44 1232 894316
===============================================================

---

From: wuftpd mail-list - AAA-Internetservice <[email-masked]>
Date: Sun, 28 Apr 1996 16:00:16 +0200 (MET DST)

> From: [email-masked] (Robert Chea)
> Subject: Re: Having multiple chroots with 1 ftpd
>

How did you make it?

Thanks in advance for reply.

Marek
[email-masked]