Link to home
Start Free TrialLog in
Avatar of AnitaP
AnitaP

asked on

Ws_Ftp ans Sco Openserver 5.0.4

I am trying to access one of my clients directories through ws_ftp and after I enter the user name and password it says: "User patricia (example) access denied"

I checked in Netscape fastTrack to see that the ftp service is Enables for the System-wide and also for my domain service.

Does anyone know why can't any of my users access their home directory on unix (which is in usr/Username)?
Avatar of AnitaP
AnitaP

ASKER

Ok. It is fixed. Now I can access into the client's home directories. I can even upload files into their directories but the weird thing is that I can not see any files (through ws_ftp right window) after I upload them into the directories.

What am I missing ? Is there a file missing or do I have to change something ? I would appreciate any help. Thank you in advance.
ASKER CERTIFIED SOLUTION
Avatar of David Williams
David Williams
Flag of Australia image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of AnitaP

ASKER

I checked in:
etc/shells -> and the user's shell are included in there.
etc/ftpusers -> the user name is not in there
the permission of usr/patricia -> rwxr-xr-x (user,group,other)
the owner of the directory usr/patricia -> is patricia
the group ->   group

I did some tests and I found out that :
1. I created a new group AccFTP and changed the login groupe of the user patricia (usr/patricia) from "group" to "AccFTP".
2. when I logged in with patricia's account, I listed all the files that were in / (root) /usr/test1/public_html and the worst part is that I could access all of them ! (when the login group is "group", it enters directly into /usr/patricia but does not show the files)
It seems as if it did not do a chroot and a chdir

I do not know how this works. Can you please help me more?
 It's probably ok that you can access all the files in the public_html area - so long as you don't mean you could freely edit or delete them.  That is, the Web server runs as a generic non-privileged user, so Web pages need to be globally accessible - that is, be able to be read by anyone - in order to be served.
  When you ftp in as a specific user, the starting directory should be their home directory - there won't be any chroot's -- that's only if you logged in using anonymous ftp.
Avatar of AnitaP

ASKER

oh ok. I understand.
Why then when I changed the group from "group" (this is the group to which all the users belong to) to "AccFTP" it shows all the files that are in / (root) ? I mean:
/usr, /bin, /etc, ....and all the subdirectories too. I can even go into each and every one of them.

what I want for it to do is when patricia logs in with her account and password it goes directely into /usr/patricia and she will NOT be able to surpass her own directory (i mean she won't be able to see /usr/james)

P.S...I checked the file in etc/ftpaccess and found out that the guestgroup is set to "group" (the group which all the clients belong to)

Please help me fix this problem. Thank you once again in advance.
 Hmm, ok - so, at the moment when Patricia connects with ftp, she goes to the / directory, and not her login directory?
  What directory does she go to when she uses telnet to connect?  Is her home directory set correctly?  Does using telnet to login give any indication of the problem (e.g. /usr/patricia unreadable) ?
  You should be able to cd into /usr, /bin etc. -- because the permissions on those directories are set for world access.  Do an ls -ld /bin for example, and you will see any user has access to that directory -- otherwise, they couldn't run the programs in there.
  As to moving out of one's home directory -- you'd have to modify the ftp daemon to do that, or perhaps it is possible to find a restricted ftpd - just like the rsh doesn't let you use cd.  However, the orthodox expectation of ftp is that you can move about the file system just like you can when connected using telnet or rlogin.
Avatar of AnitaP

ASKER

Please see my other question. I will explain everything there. No sense going back and forth...I will gladly give you the points for this one eventually...thank you.
I'll move this discussion to the other thread :)
Avatar of AnitaP

ASKER

Please try to help me a bit more. I need your help. Thank you.
I don't suppose it's possible to log into your Unix system and 'take a look' myself?