Re: Locking a FTP user into a specific folder using stock FTP server on IBMi 7.1

Hi Laurence

This kind of thing can be done but not with bare-bones FTP, which doesn't have any of that capability.

This needs to use what are called exit points, there are security products which can set this up easily, or you can write your own program, which will be called at a certain point, an exit point, in the FTP process. This program needs to be registered to that exit point in the registry (not Windows registry) on IBM i. WRKREGINF can show you all the exit points.

I think you want the QIBM_QTMF_CLIENT_REQ exit point. Google for that and you should find information and examples - of course, IBM's documentation is the first thing to read, IMO.

HTH
Vern

On 4/2/2020 4:00 PM, Laurence Chiu wrote:

This might seem a simple question but I am not IBMi person and I am just
getting involved in a major IBMi project. One question arose was, using the
stock FTP server in IBMi, can an account be set to be placed in a certain
folder on logon and not be able to go a folder up?

It was posed by our security team who are concerned about FTP security and
the fact that we are using FTP (albiet only within the corporate network)
and so passwords go through in clear text. At this point in time there is
no possibility of moving to SFTP

Thanks