Mailing Lists: Apple Mailing Lists
Image of Mac OS face in stamp
 
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Should FTP user be able to navigate above their folder

On Aug 11, 2006, at 9:03 AM, email@hidden wrote:


On 11 Aug 2006, at 5:35 AM, Charles Edge wrote:

On 8/10/06 8:05 PM, "Jonathan S. Abrams" <email@hidden> wrote:
Simon Slavin wrote: 
On 8 Aug 2006, at 9:15am, Jonathan Schwartz wrote:

Now, I'd like to be able to establish ftp accounts to allow users to
access their web folder in /Web Server/Documents/Their-Domain- Name.
I've set up a test user. I've provided a Share Point in WorkGroup to
the target web folder. It works.

The only thing that bothers me is that user account can navigate up
one level with an FTP client and see the list of other Share Points. 
This is necessary, since if they can't see their folder as a whole
they can't use it.

Instead of

/Web Server/Documents/Their-Domain-Name

Use something like

/Web Server/Documents/Users/Their-Domain-Name
I do not believe that this is necessary. Either I have done something
*improper* on my v10.4.4 server, or the original poster needs to
duplicate some aspects of my configuration to get the expected behavior.

The original poster should email me off-list. If he and I figure out
what it is that causes the desired behavior, one of us will post it.

This isn't necessary. You can just set FTP users to only see Home
Directories and then set the NFSHomeDirectory attribute in the Inspector for
the user to the path that you'd like to see them put into without being
given the chance to cd up a level... Just make sure they have permissions
to the directory you specify as their login directory. Happy FTPing.

This is not true for SFTP. If you use Secure FTP you can cd up a level even if you have spesified that they can only see Home Directories. I ran into this issue a couple of weeks ago.

That's because SFTP is a file transfer protocol, but it's not File Transfer Protocol. :-) While the names are similar, SFTP has nothing to do with FTP service. It runs via SSH, so an SFTP user gets the same access to the file system as with an interactive remote shell. It's a totally different service, and has nothing to do with the issues being discussed in this thread.

Matt


===================================================================================
CONFIDENTIALITY NOTICE: This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to which they are addressed.  If you are not the intended recipient, you may not review, copy or distribute this message.  If you have received this email in error, please notify the sender immediately and delete the original message.  Neither the sender nor the company for which he or she works accepts any liability for any damage caused by any virus transmitted by this email.
===================================================================================
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Macos-x-server mailing list      (email@hidden)
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/macos-x-server/email@hidden

This email sent to email@hidden
References: 
 >Re: Should FTP user be able to navigate above their folder (From: Charles Edge <email@hidden>)
 >Re: Should FTP user be able to navigate above their folder (From: email@hidden)



Visit the Apple Store online or at retail locations.
1-800-MY-APPLE

Contact Apple | Terms of Use | Privacy Policy

Copyright © 2007 Apple Inc. All rights reserved.