Avatar of Ted22
Ted22

asked on 

fedora tftp read write access



/etc/xinetd.d/tftp

service tftp
{
        socket_type             = dgram
        protocol                = udp
        wait                    = yes
        user                    = root
        server                  = /usr/sbin/in.tftpd
        server_args             = -s /tftpboot
        disable                 = no
        per_source              = 11
        cps                     = 100 2
        flags                   = IPv4
}

I want to know how to enable read write access to a directory using tftp (OS, Fedora core 1), with and without passwords.
Linux Networking

Avatar of undefined
Last Comment
Ted22
Avatar of jlevie
jlevie

Write access is automatically enabled for any files that exist in /tftpboot (in this case) that are writeable by the tftpd user (root in this case). Any and all files in /tftpboot that are readable by the tftpd user can be read by a client.

Although it is something of a security risk, starting tftpd with -a (server_args = -a -s /tftpboot) will allow the tftp client to create files instead or requiring the file to pre-exist. See 'man tftpd' for more information.

The TFTP protocol makes no provision for authentication, so any client that can reach the server can open a TFTP connection to the server and read/write files based on the above.
Avatar of harbor235
harbor235
Flag of United States of America image

what are the permissions of the directory? (/tftpboot ) If they are not what you need then use the chmod command to set tham as desired realizing the security implications. I would disable this service when not being used. Why not use a secure method of file xfer like scp?

harbor235
Avatar of Ted22
Ted22

ASKER



If I set    server_args   = -s -c /tftpboot
I can    put / get and create new files    from the server to the server, but I can't seem to PUT or even GET from another computer.
I want to back up some cisco switchs.

premissions
drwxrwxrwx    2 nobody   nobody       4096 Dec 16 19:43 tftpboot

Avatar of Ted22
Ted22

ASKER

[root@client /]# tftp -v 10.10.20.124
Connected to 10.10.20.124 (10.10.20.124), port 69
tftp> get test
getting from 10.10.20.124:test to test [netascii]
Transfer timed out.



(file on the server)
-rw-rw-rw-    1 nobody   nobody          5 Dec 16 20:14 test
ASKER CERTIFIED SOLUTION
Avatar of jlevie
jlevie

Blurred text
THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
Avatar of Ted22
Ted22

ASKER

I don't have iptables turned on in services, but it was apparently running.
iptables -L told me that
Linux Networking
Linux Networking

The variety of Linux distributions creates myriad issues relating to configuration and operations when computers are networked, not the least of which is the use of various network management applications, some of which are included with specific distributions, while others are standalone applications.

19K
Questions
--
Followers
--
Top Experts
Get a personalized solution from industry experts
Ask the experts
Read over 600 more reviews

TRUSTED BY

IBM logoIntel logoMicrosoft logoUbisoft logoSAP logo
Qualcomm logoCitrix Systems logoWorkday logoErnst & Young logo
High performer badgeUsers love us badge
LinkedIn logoFacebook logoX logoInstagram logoTikTok logoYouTube logo