autorization not respond on netwinder office server 2100

Ralph Siemsen ralphs at netwinder.org
Mon Mar 13 10:38:56 EST 2006


Georgescu Gabriel wrote:
>  With netstat -n is working. I tried to access the FTP server only with 
> the ip address without domain : got the same problem. I also tried to 
> access the FTP from local ip address of the server 192.168.0.1 and it's 
> working. I verified once again the settings of interfaces with ifconfig, 
> everything is fine. Finally I used nwconfig ( without any change ), and 
> saved the settings. After a reboot seems that everything is working 
> fine... ?!. I really don't understand where was the problem.

Perhaps there was a typo in one of your config files (manually edited?) 
which was now corrected by running nwconfig?  Or the interface was 
disabled manually for some reason.

> I also have a question : how do I make the server not to give the 
> posibility of users to get up in trees from their accounts, because if I 
> access the FTP with wsftp for example I can see the other users folders, 
> of course without permissions of modify.

This is called "chrooting" the user.  It is done by changing the home 
directory for users as listed in the /etc/passwd file.  For example if 
you have:

ralphs:x:500:500:Ralph Siemsen:/home/ralphs:/bin/bash

To make so I cannot go outside of my home directory, we introduce an 
extra /./ into the home directory location, like so:

ralphs:x:500:500:Ralph Siemsen:/home/ralphs/./:/bin/bash

The /./ can appear anywhere in the path, not just the end, and will 
limit the user to being in that directory and below.

I can't remember if there were changes required in the wu-ftpd config 
file as well.  It may be necessary to put users into "guest" group for 
th above to work.  Consult the man pages for wuftpd and its config file.

-R



More information about the Netwinder mailing list