× The internal search function is temporarily non-functional. The current search engine is no longer viable and we are researching alternatives.
As a stop gap measure, we are using Google's custom search engine service.
If you know of an easy to use, open source, search engine ... please contact support@midrange.com.



I did exactly what you're attempting using a mixture of CHGFTPA settings and a couple of exit points.

See code here: http://code.midrange.com/9b14ca61f2.html

I used CHGFTPA to change the default naming to *PATH and the current directory to *HOMEDIR.

I also created a group profile named FTPUSER that is assigned as a supplemental group to any user profile that we want to have access to the FTP server.

I added pgm FTPLOGON to the QIBM_QTMF_SVR_LOGON exit point and pgm FTPCMDREQ to the QIBM_QTMF_SERVER_REQ exit point.

FTPLOGON checks to see if the user has either the FTPUSER supplemental group or a user class other then *USER. It blocks all other access.

FTPCMDREQ allows users with non-*USER user class to do anything they'd like and restricts *USER user class profiles to their own home dir as specified on their user profile.

If someone on the list sees a flaw in the code, please let me know...

Glenn Hopwood
Senior System Analyst
StoneMor Partners LP
215-826-4403

-----Original Message-----
From: Pete Massiello [mailto:pmassiello-ml@xxxxxxxxxxxx]
Sent: Friday, October 10, 2008 2:47 PM
To: 'Midrange Systems Technical Discussion'
Subject: FTP and locking out the root

I am trying to setup FTP, such that the userid that I create and sign-on
with via FTP has a directory which they can't exit out of.



Userid is USERA they have in their profile a Home directory setup as
/FTP/USERA I do not wish for them to be able to get out of this directory.



Thanks



Pete






As an Amazon Associate we earn from qualifying purchases.

This thread ...

Replies:

Follow On AppleNews
Return to Archive home page | Return to MIDRANGE.COM home page

This mailing list archive is Copyright 1997-2024 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].

Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.