tlug: Fine control over ftp

["Stephen J. Turnbull" <turnbull@example.com>]

>>>>> "Darren" == Darren Cook <darren@example.com> writes:

    Darren> Is their a unix way to do the same thing? If possible I
    Darren> don't want to change group ownerships of these files and
    Darren> directories in case it messes up something else (and
    Darren> because it's one more step to remember if I upload a new
    Darren> version).

Yes.  Install wu-ftpd and read "man ftpaccess".  I don't know if wu-ftpd 
is the best ftpd to use for this, but it definitely will do what you
want.

In order to get the group ownerships and so on right, you set a sticky 
bit on the directories.  To get the permissions right, you need to get 
umask set right.  The latter is configurable in ftpaccess, the former
you do once as superuser.

    Darren> Also, in war-ftp the ftp users are seperate from the NT
    Darren> user accounts, which might be a pain on a large network
    Darren> but is ideal in situations like this. I don't want the
    Darren> user to have an email account or telnet access (even to
    Darren> his two directories). I tried setting his shell to
    Darren> "/bin/false", but that stopped both ftp and telnet :-(.

I think this is an artifact of an incompletely populated /home/ftp/bin
(or whatever the relevant bindir is).  I believe the ftp user
population can be separated from the shell users by creating ftp
guests in /etc/ftpaccess.

-- 
University of Tsukuba                Tennodai 1-1-1 Tsukuba 305-8573 JAPAN
Institute of Policy and Planning Sciences        Tel/fax: +1 (298) 53-5091
---------------------------------------------------------------
Next Meeting: 10 October, 12:30 Tokyo Station Yaesu central gate
Featuring the IMASY Eng. Team on "IPv6 - The Next Generation IP"
Next Nomikai: 20 November, 19:30  Tengu TokyoEkiMae 03-3275-3691
---------------------------------------------------------------
Sponsor: PHT, makers of TurboLinux http://www.pht.co.jp