[lug] How to set up a private FTP account for a user?

[George Sexton]

As you're aware, FTP is a really insecure system. I just don't allow it for
our systems. There are tons of Windows GUIs out there. There is really NO
reason to use FTP.

The other thing you need to do is get ftponly shell and put it in
/etc/shells. Then make that the shell for the users that are only allowed to
use ftp to login.



George Sexton
MH Software, Inc.
http://www.mhsoftware.com/
Voice: 303 438 9585
 

> -----Original Message-----
> From: lug-bounces at lug.boulder.co.us [mailto:lug-bounces at lug.boulder.co.us]
> On Behalf Of Bill Thoen
> Sent: Thursday, March 30, 2006 10:30 AM
> To: Boulder Linux Users Group
> Subject: [lug] How to set up a private FTP account for a user?
> 
> I've got a need to provide upload/download FTP service for one of my
> clients, and I'm not sure how to go about it. I've got a RedHat FC2
> server set up with vsftpd, and I have set up a public FTP download
> service on it that works very well. However, I would like to allow
> specific users passworded access to some private areas and allow them to
> upload and download files via FTP. I don't want to allow them program
> execution, email, and other privileges that would go along with a normal
> new user account.
> 
> I've searched Google and and the docs and man pages, but I'm afraid I
> don't know exactly what I'm looking for. Most of these resources simply
> describe settings, but they don't say when and how you would use them to
> do what I want to do. (Or maybe I'm just too thick to recognize the
> obvious.)
> 
> I'm also aware that FTP is not the most secure transfer protocol because
> passwords are sent in the clear, but I'd like to learn how to do this
> with vsftp anyway and worry about additional applications later (One
> thing a time.)
> 
> Can anyone suggest a HOWTO or a README or maybe just tell me how to do
> this?
> 
> Thanks,
> - Bill Thoen
> 
> _______________________________________________
> Web Page:  http://lug.boulder.co.us
> Mailing List: http://lists.lug.boulder.co.us/mailman/listinfo/lug
> Join us on IRC: lug.boulder.co.us port=6667 channel=#colug