Subject: Re: ftpaccess file

From: Patrick Pinchera <[email-masked]>
Date: Tue, 25 Jun 1996 21:53:15 -0400 (EDT)

At 08:30 PM 6/25/96 -0500, you wrote:
>I am trying to create restricted access via wuftpd for REAL users on my
>system. I have had zero sucess, so I thought I would try u. Here is what I
>have done:
>
>In /etc/passwd:
>user1:!:798:900::/home/user1/./:/etc/ftponly

 [stuff deleted]

>If I change the shell field in /etc/passwd from /etc/ftponly to /bin/bash, I
>am able to logon but of course I can go anywhere....?... What should I check
>next??
>
>Thanks,
>-Rob

OK, I've had wu-ftpd w/ restricted user access running for all of 2 days, so
I probably have no credentials for answering your question, but..........

That shell entry in your password file, "/etc/ftponly", does that entry
exist in your "/etc/shells" file?  It *MUST*.  What is in "/etc/ftponly" anyway?

I got mine to work by putting "/bin/false" in the shell field.  I added it
to my "/etc/shells" file, and the contents of "/bin/false" look something
like this:
----------------------------------------------------------------------
#!/usr/bin/sh
#       Copyright (c) 1984, 1986, 1987, 1988, 1989 AT&T
#         All Rights Reserved

#       THIS IS UNPUBLISHED PROPRIETARY SOURCE CODE OF AT&T
#       The copyright notice above does not evidence any
#       actual or intended publication of such source code.

#ident  "@(#)false.sh   1.6     93/01/11 SMI"   /* SVr4.0 1.3   */
exit 255
----------------------------------------------------------------------

This is on Solaris 2.4.  You didn't say what kind of system you are on. I
hope I've provided some help here and not led you down a path of
destruction. :-)

Pat
----------------------------------------------------------------------------
Patrick Pinchera             WebIMAGE, inc.                   (407)-723-0001
[email-masked]             1900 S Harbor City Blvd, Suite 328
http://www.webimage.com      Melbourne, FL  32901   "Attitude is Everything"

---

From: [email-masked] (Dan Krause)
Date: Tue, 25 Jun 1996 20:50:11 -0500

Reverse user1's group setup, an ftponly user must have the "guestgroup"
as their primary group in the password file entry not the group file.

---

From: Michalas Othon <[email-masked]>
Date: Wed, 26 Jun 1996 10:01:30 +0300

>user1:!:798:900::/home/user1/./:/etc/ftponly

-------

copy the /bin/true to /etc/ftponly

------------

>In /etc/group:
>ftponly:!:210:user1

------------
ftponly:!:900:ftponly
------------

>
>In /usr/local/lib/ftpd/ftpaccess
>guestgroup ftponly
-------
OK
-----

>In /home/user1
>        ./bin 
---------
copy /bin/ls  to /uhome/usr1/bin/ls
create /home/usr1/etc/passwd   ......

-----------

>        ./usr
>        ./etc
>        ./lib
>                (note: each of the above subdirectorys were copied from the
>/home/ftp/bin ./etc ./lib ./usr)
>
>user1 does NOT exist in /usr/local/lib/ftpd/ftpusers
>
>When I try to login as user1 I immediatley get a:
>
>530 User user1 access denied...
>Login failed
>
>+--------------------------------------------------------------------+
>|     _/     _/ _/_/_/_/_/  _/_/_/_/      Rob Allen                  |
>|    _/_/   _/     _/     _/              Internet Administrator     |
>|   _/ _/  _/     _/       _/_/_/         NTS Communications, Inc.   |
>|  _/   _/_/     _/             _/        (806) 762-4565 ext. 4110   |
>| _/     _/     _/       _/_/_/_/         E-Mail: [email-masked]    |
>+--------------------------------------------------------------------+
>

Othon Michalas
Corfu-Greece

http://corfu.forthnet.gr
ftp://corfu.forthnet.gr
e-mail [email-masked]