Re: How do I force an FTP user to '/home/ftpdir'?

[Tom Hightower <tomh5480@xxxxxxxxx>]

Gary Monnier said the following on 2/18/2005 10:54 AM:
> They will need to use an exit program on one of two FTP signon exit 
> points (exit point QIBM_QTMF_SVR_LOGON format TCPL0200 or format 
> TCPL0300).  They will allow you to return an initial home directory.
>
> -----Original Message----- From:
> midrange-l-bounces@xxxxxxxxxxxx 
> [mailto:midrange-l-bounces@xxxxxxxxxxxx]
> On Behalf Of Tom Hightower Sent: Friday, February 18, 2005 8:09 AM 
> To: midrange-l@xxxxxxxxxxxx Subject: How
> do I force an FTP user to '/home/ftpdir'?
>
>
>
> Customer wants to setup a generic FTP account for their tech support
>  folks in the field.  Along with that account, they have an IFS
> directory
>
> called '/home/software' which has the software that they need to
> install
>
> at various customer sites.
>
> When they login via FTP using that account, the tech folks need to be
>  positioned directly in that support directory, and to have access to
>  nothing else other than that directory (or its subdirectories).  No
>  going to a higher-level directory, no deleting files in that
> directory (or sub-directory), no running of AS400 commands.
>
> The 'no-deletes' and 'no-commands' requirement I can handle with FTP
>  exit programs, but how do I handle the directory requirements?
>
> Tom

Using WRKREGINF, I've added my program FTPLOGON to exit point
QIBM_QTMF_SVR_LOGON, format TCPL0200.  I've used a variant of this same 
program at format TCPL0100 for a couple of years to control FTP login 
access, and it's worked flawlessly.

This is my *entry parm list for the program:

c     *Entry        Plist
 *
 * Input parameters
c                   Parm                    AppId
c                   Parm                    UserId
c                   Parm                    UserIdLen
c                   Parm                    Authen
c                   Parm                    AuthenLen
c                   Parm                    IpAddr
c                   Parm                    IpAddrLen

 * Return parameters
c                   Parm                    RtnCode
c                   Parm                    User
c                   Parm                    Password
c                   Parm                    CurrLib
 *  added for format TCPL0200
c                   parm                    HomeDir
c                   parm                    HomeDirLen


And this is the d-specs for those fields:
D AppId           S              9B 0
D UserId          S            999
D UserIdLen       S              9B 0
D Authen          S            999
D AuthenLen       S              9B 0
D IpAddr          S             15
D IpAddrLen       S              9B 0
D RtnCode         S              9B 0
D User            S             10
D Password        S             10
D CurrLib         S             10
d homedir         S            999
d homedirlen      S              9b 0


In my program, I'm checking for the value of the UserId field; if it's 
'TECHSUPPRT', I set homedir and homedir thusly:
if FTPUser = TECHSUPPRT;
  homedir    = '/home/tech/software';
  homedirlen = %len(%trim(homedir));
endif;


My question is:
1) what value should I assign to RtnCode so that the FTP user is forced 
into /home/tech/software?  I want it so that if they do 'dir' (using 
DOS-style FTP client), all they see is the contents of the 
'/home/tech/software'.

Tom