*BSD News Article 45181


Return to BSD News archive

Path: sserve!newshost.anu.edu.au!munnari.oz.au!news.ecn.uoknor.edu!paladin.american.edu!gatech!howland.reston.ans.net!swrinde!ringer.cs.utsa.edu!sun.cais.com!news.structured.net!news.ATNET.NET!usenet
From: jwshafto@atnet.net (John Shafto)
Newsgroups: comp.unix.bsd.bsdi.misc
Subject: FTP access for real accounts (BSDI 2.0)
Date: Sat, 10 Jun 1995 20:24:49 GMT
Organization: AT-NET Connections, Inc.
Lines: 69
Message-ID: <3rcvbl$fi0@ami.atnet.net>
NNTP-Posting-Host: pppb.atnet.net
X-Newsreader: Forte Free Agent v0.55

Hello comp.unix.bsdi.misc,

  I have a problem I thought I would throw out to the world.

  After starting the latest ftpd, from ftp.bsdi.com, with the
switch to use the ftpaccess file (-a), I am having the problem
that real users can no longer access the system using ftp.  The
anonymous login works fine, and members of the wheel
group work fine.  Other 'real' accounts cannot get in, 
'access denied' is the response.

  I am probably, hopefully, overlooking something simple.
I've read the man pages, and support from BSDI is out of the
question (didn't pay the premium, unless of course you consider
the purchase cost, but hey what do you expect for $545 right?).

  Any help, of course, would be appreciated.  I am including
a copy of the ftpaccess file for your reading pleasure. 

>>>>> /etc/ftpaccess >>>>>>>>>>>>>>
loginfails 3
class   local   real,anonymous * 205.199.6.0
class   remote  real,anonymous *
limit   local   10  Any                 /etc/msgs/msg.toomany
limit   remote  10  Any                 /etc/msgs/msg.toomany
readme  README*    login
readme  README*    cwd=*
message /welcome.msg            login
message .message                cwd=*
compress        yes             local remote
tar             yes             local remote
# allow use of private file for SITE GROUP and SITE GPASS?
private         yes
# passwd-check  <none|trivial|rfc822>  [<enforce|warn>]
passwd-check    rfc822  warn
log commands real
log transfers anonymous,real inbound,outbound
shutdown /etc/shutmsg
# all the following default to "yes" for everybody
delete          no      guest,anonymous         # delete permission?
overwrite       no      guest,anonymous         # overwrite
permission?
rename		no	guest,anonymous		# rename permission?
chmod           no      anonymous               # chmod permission?
umask           no      anonymous               # umask permission?
# specify the upload directory information
upload  /usr/ftp  *		no
upload  /usr/ftp  /upload	yes     root    daemon  0600 dir
# directory aliases...  [note, the ":" is not required]
alias   inc:    /usr/ftp/upload
# cdpaths
cdpath  /usr/ftp
cdpath  /
# path-filter...
path-filter  anonymous  /etc/pathmsg  ^[-A-Za-z0-9_\.]*$  ^\.  ^-
path-filter  guest      /etc/pathmsg  ^[-A-Za-z0-9_\.]*$  ^\.  ^-
# specify which group of users will be treated as "guests".
guestgroup ftponly
email support@atnet.net

--- 
::: John Shafto		::: AT-NET Connections, Inc.            
::: JWShafto@atnet.net	::: Serving the Internet to the central 
:::   Shafto@asimi.com	::: Columbia Basin.  (509) 765-7720     
CURSOR: What you become when your system crashes.