Hi there

Is there someone who can help me ??

I've got a aix box, running 5.2 ML-04.
On this server I've created some users, who are supposed to be used only as
ftp users.
These users got home dir. looking like this

/ftp/ftpbe
/ftp/ftpuk
/ftp/ftpcc
/ftp/ftpfr

They all got a ksh shell

My question is, how do I restrict the users, so that they are not able to go
anywhere ftom their home-dir's ????

I've been looking at ftpaccess.ctl, but I can't find out how to combine a
directory with a user....

Can You please help ??

Thanks,

Gitte T.

You need to run a 'restricted shell' for those users which stops them
cd'ing to other dirs and retricts certain other stuff as well. Do a
search on comp.unix.aix and you will find lots about it. Also see 'man
ksh'.

Regards,
Scott

You need to run a 'restricted shell' for those users which stops them
cd'ing to other dirs and retricts certain other stuff as well. Do a
search on comp.unix.aix and you will find lots about it. Also see 'man
ksh'.

Regards,
Scott

toger67 wrote:
> Hi there
>
> Is there someone who can help me ??
>
> I've got a aix box, running 5.2 ML-04.
> On this server I've created some users, who are supposed to be used only as
> ftp users.
> These users got home dir. looking like this
>
> /ftp/ftpbe
> /ftp/ftpuk
> /ftp/ftpcc
> /ftp/ftpfr
>
> They all got a ksh shell
>
> My question is, how do I restrict the users, so that they are not able to go
> anywhere ftom their home-dir's ????
>
> I've been looking at ftpaccess.ctl, but I can't find out how to combine a
> directory with a user....
>
> Can You please help ??
>
> Thanks,
>
> Gitte T.
>
>
Gitte,


Do you know which ftp server you use? I mean the name of the product (I
am new to AIX).

On Linux we use vsftpd, that does a "change root" automatically. So a
user cannot get out of his/her homedir.

For a wu-ftpd you need to put a . after the directory a user need to be
locked in to, so for a homedir this is at the end.
So for example /ftp/ftpbe/.

About your choice of using ksh as the shell, do your users need access
to the prompt? If not I would suggest to use the shell named false.


Kind Regards,


Jan Gerrit Kootstra