Re: FTP Access

I wonder if they can do ANY CD command successfully. App Admin looks like an all-or-nothing deal.

You can see the same thing that App Admin has with the WRKFCNUSG command - use this to see all the FTP things -

wRKFCNUSG qibm_qtmf_*

Look for the Change directory items - one for client, one for server.

See if any users are set up here.

You have to have *SECADM special authority to make changes - that'd be the CHGFCNUSG command, called from the WRK... screen, too.

Other scenarios just get messy. Like authority to the IFS in general - maybe it's locked out unless you have specific authority, and some have *ALLOBJ. See the possibilities?

It's possible to have *X to the root - you have to, I think, to be able to see anything under it. But i don't think you can go to it with that. So you could have *X also on /home, then *RWX on a user's directory, and that's all they could see - or below, maybe.

HTH
Vern

On 6/17/2013 9:02 PM, Alan Shore wrote:

Isn't there something at the end of the user profle
no access to a system to cofirm or deny my thought

----- Original Message -----
From: Jack Tucky [mailto:jacktucky@xxxxxxxxx]
Sent: Monday, June 17, 2013 09:23 PM
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>
Subject: FTP Access

I have a customer who has some sort of FTP access restrictions going on.


Some users are restricted from issuing cd \ to move up from their User
profile home directory. Other users can do it. They want me to make all
users be locked into their home directory and below.


I looked for FTP Exit programs, checkws Application administration on
Iseries Navigator, any other places I could think of. I can't find any
indication of how this is being done.


One of their users said he used to control access with an IBM program on his
PC.


Any ideas appreciated.


Thanks, Jack.