Solaris

Hi ,
I am trying to create a limited ftp user for a company on Solaris 10 .
(uname : 5.10 i386)
I use /bin/true shell for the user ((and use ftpconfig -d and adding user in ftpaccess guestuser))
but the problem is that when I try to log in by FTP it cannot login.
when I change the shell to bash it works
I tried to check the /etc/shells but there is no /etc/shells available

another question is that on the server there are 3 other ftp user by the same circumstances (created by a gone admin) which their shell is /bin/ftpaccess
how can ftpaccess be a shell ?
thanks for the help guys

Start by running the following commands:

Code:

ls -l /bin/ftpaccess

and

Code:

file /bin/ftpaccess

There's a good chance that the file command will report that ftpaccess is a text file or shell script. If so cat it, or open it with your favorite editor or pager to see what it does.

If not, look for a C or C++ source file with ftpaccess as part of the filename.

Good luck

the /bin/ftpaccess is in the /etc/shells but the configuration of ftp user shell (-s) doe snot accept it
I changed it to /bin/true and added this to /etc/shells and it solved the problem .

I know nothing about your site's administration nor about the how your "gone admin" liked to set things up. So, I have no idea where you should start looking for source files that your previous sysadmin may have created. (Have you verified that /bin/ftpaccess isn't a text file yet?) I would start by looking in something like /usr/src, the home directory of your previous admin, or wherever else you put source files for object files on your site. If you are acting as the system administrator for your system and you don't know how to use find to search for files containing a part of a filename, I strongly suggest that you hire someone with a little bit of sysadmin experience.

If you want to use useradd -s and don't have a file named /etc/shells, create it yourself and put the absolute pathname for each shell on a separate line in it that you want to be able to add as a user's shell using useradd -s and that you want ftpd to allow users to use when using ftp to access your system.

BTW, asking "how to secure ftp" begs the question of whether you should be using sftp or an https service. Securing a file access system by sending passwords in the clear on the net is not very secure. All network protocols 'transfer files', and ftp is one of the oldest (and most variable). sftp is really ssh/scp under the covers accepting ftp command interface. The online articles on how to configure ssh for sftp only might be better, since they are more recent and support a more sane path !