ftp access without shell access


 
Thread Tools Search this Thread
Operating Systems AIX ftp access without shell access
# 1  
Old 06-07-2011
ftp access without shell access

Hi all,
I'm using AIX v 5.3
I want to create system users to access through ftp or sftp and restrict those users into specific directory and don't traverse the whole file system just to be restricted within a directory and don't get shell access . i don't want to use any other third party software or nfs to implement because my user will connect from windows clients.
any idea would be a great assist

Last edited by h@foorsa.biz; 06-07-2011 at 08:37 AM..
# 2  
Old 06-07-2011
Here's an article on how to configure sftp with built-in chroot(). It's written for Debian, but should be applicable to other systems too.
# 3  
Old 06-07-2011
thanks
what about plain ftp any further idea will be a great assist
# 4  
Old 06-07-2011
h@foorsa.biz : At first check /etc/shells file there should be /bin/false -shell record if ther is no just edit the file
and add the line /bin/false afterwards in /etc/security/login.cfg file at the end add shell record /bin/false when it's done add user using the command
Code:
useradd -d /home/$usrehome -s /bin/false  $username

it should work..

Last edited by pludi; 06-07-2011 at 12:01 PM..
# 5  
Old 06-07-2011
@Vit0_Corleone

yes that's true but the user is still able to traverse any file system and read other directories if it's a member of the default staff group , i want to restrict the user to a specific directory in other words don't read any other directory but his own
# 6  
Old 06-08-2011
OK then you have to play with advanced ACL-s
Quote:
1: export EDITOR=/usr/bin/vi
2: acledit foldername
3: extended permissions:
enabled
4: deny rwx u:username


but this works only for single folder or file....
http://www.review-ninja.com/2010/04/...etacl-and.html
also make sure choort option for local users is enabled in ftp configuration file
# 7  
Old 06-09-2011
OP: Why not use samba?
Login or Register to Ask a Question

Previous Thread | Next Thread

10 More Discussions You Might Find Interesting

1. Proxy Server

How to use Squid on Linux to control certain IP to access Web Server and certain IP cannot access?

Dear all experts here, :) I would like to install a proxy server on Linux server to perform solely to control the access of Web server. In this case, some of my vendor asked me to try Squid and I have installed it onto my Linux server. I would like know how can I set the configuration to... (1 Reply)
Discussion started by: kwliew999
1 Replies

2. Shell Programming and Scripting

SSH shell script to access FTP over explicit TLS/SSL

Hello, I use the following SSH script to upload *.jpg files via FTP: #!/usr/bin/expect set timeout -1 spawn ftp -v -i expect "" send "\r" expect "Password:" send "\r" expect "ftp>" send "mput *.jpg\r" expect "ftp>" send "quit\r" replaced with actual ftp server/account data. ... (5 Replies)
Discussion started by: mrpi007
5 Replies

3. Solaris

samba read write access to owner and no access to other users

Hi All, I want to configure samba share permission so that only directory creator/owner has a read and write permission and other users should not have any read/write access to that folder.Will that be possible and how can this be achieved within samba configuration. Regards, Sahil (1 Reply)
Discussion started by: sahil_shine
1 Replies

4. IP Networking

Does my provider limit my internet access or somesites access?

Hi Good Day, i would like to ask for further info about my problems experiencing this evening. Im a PPP0 connection in the internet using 3G located in asia pacific region.i had this problem this evening in my INTERNET connections that there are some sites i can't open example ( Gizmodo.com,... (2 Replies)
Discussion started by: jao_madn
2 Replies

5. UNIX for Dummies Questions & Answers

kernel giving access for multiple users to access files

hi all, i want to know y kernel is giving access for multiple users to access a file when one user may be the owner is executing that file. Because other user can manipulate that file when the other user is executing that file, it will give the unexpected result to owner . plz help me... (1 Reply)
Discussion started by: jimmyuk
1 Replies

6. Solaris

how to deny ftp access

Hi , I want to deny ftp access to some user. Currently I don't have /etc/ftpusers file. From the man page , i can modify the login shell at /etc/passwd to invalid one. How to add it ? replaced with /dev/null or something. If you have any other method to disabled it . Pls show me. My FTP is... (10 Replies)
Discussion started by: skully
10 Replies

7. UNIX for Dummies Questions & Answers

FTP access

Folks; I'm working on building ACL for our Solaris 10 box. I'm going to use LDAP for authentication. We have a mounted drive on that server & users would like to be able to write to it. We need to restrict the write access to that mounted drive on the box to be only through FTP, so if they... (13 Replies)
Discussion started by: Katkota
13 Replies

8. UNIX for Dummies Questions & Answers

FTP Access

How to restrict ftp user to move to the parent directory of his home directory. Any suggestions will be appreciated. O.S Sun solaris Regards (3 Replies)
Discussion started by: sehgalniraj
3 Replies

9. UNIX for Dummies Questions & Answers

FTP user access

I created a user which I would like to have access only to FTP. I am able to get FTP to the machine with that user, but I only want him to have access to two directories, and no shell access. How can I accomplish this? Thanx, Aaron (1 Reply)
Discussion started by: Spetnik
1 Replies

10. UNIX for Dummies Questions & Answers

Need help to access/mount so to access folder/files on a Remote System using Linux OS

Hi I need to access files from a specific folder of a Linux system from an another Linux System Remotely. I know how to, Export a folder on One SCO System & can access the same by using Import via., NFS in the Sco Unix SVR4 System using the scoadmin utility. Also, I know to use mount -t ... (2 Replies)
Discussion started by: S.Vishwanath
2 Replies
Login or Register to Ask a Question