Re: How do I force an FTP user to '/home/ftpdir'?

I do all this with exit programs.

Rob Berendt
-- 
Group Dekko Services, LLC
Dept 01.073
PO Box 2000
Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com





Tom Hightower <tomh5480@xxxxxxxxx> 
Sent by: midrange-l-bounces@xxxxxxxxxxxx
02/18/2005 12:55 PM
Please respond to
Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>


To
midrange-l@xxxxxxxxxxxx
cc

Subject
Re: How do I force an FTP user to '/home/ftpdir'?






I was thinking that I might need to modify the FTP exit programs I have 
in place.  The exit programs access a table which specifies what FTP 
commands the user profile can and can't do (mkdir, cd, del, etc).  I 
guess I could add a flag to their entry in the table which says to 
position them to a homedir.

But if I allow them access to the 'chdir' command, how would I keep them 
from accessing a 'higher-level' directory?  Group profiles, with 
appropriate access rights to objects, libraries and folders?  Or could I 
somehow do that with an exit program?

Tom

Gary Monnier said the following on 2/18/2005 10:54 AM:
> They will need to use an exit program on one of two FTP signon exit
> points (exit point QIBM_QTMF_SVR_LOGON format TCPL0200 or format
> TCPL0300).  They will allow you to return an initial home directory.
> 
> -----Original Message-----
> From: midrange-l-bounces@xxxxxxxxxxxx
> [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Tom Hightower
> Sent: Friday, February 18, 2005 8:09 AM
> To: midrange-l@xxxxxxxxxxxx
> Subject: How do I force an FTP user to '/home/ftpdir'?
> 
> 
> 
> Customer wants to setup a generic FTP account for their tech support 
> folks in the field.  Along with that account, they have an IFS directory
> 
> called '/home/software' which has the software that they need to install
> 
> at various customer sites.
> 
> When they login via FTP using that account, the tech folks need to be 
> positioned directly in that support directory, and to have access to 
> nothing else other than that directory (or its subdirectories).  No 
> going to a higher-level directory, no deleting files in that directory 
> (or sub-directory), no running of AS400 commands.
> 
> The 'no-deletes' and 'no-commands' requirement I can handle with FTP 
> exit programs, but how do I handle the directory requirements?
> 
> Tom
> 

-- 
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing 
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.