external ftp user - setting up 2

[pragmasystems]

I am currently trying to set up an external company with ftp access to our server, for ftp'ing flatfiles into a specific directory but am not sure how to do it, I haven't used Unix much so a little advice or help would be greatfully received.

 

[johnhoke]

Well, first thing you need to do is decide if you want to use anonymous access or account based access?

FTP passwords are clear text, so I generally do not like using ftp, and use SFTP (

http://www.openssh.org)

for file transfers outside my firewalls...

*IF* you decide that you want account based FTP, create a user for the external company using admintool (Gui based) or with adduser (command line).

Set their Home directory to be the directory you want their files to be placed in, and deny them telnet access into your server by setting their shell to /bin/false

If you are using a third party FTP Server such as proftpd (

http://www.proftpd.net

and available from sunfreeware.com)
there are more secure ways of setting this up...

Take a look at all the options, and weigh them for your needs, both technical and security...

SFTP is the most secure, but has the largest learning curve
anonymous ftp.. I do not think is viable in this instance
account based ftp, either Solaris' built in or 3rd party would be the easiest and fastest.. but not as secure as sftp...

-john

 

[imsnowman]

an easy way is to #man ftpd and cut the script out to make an FTP server. It will also explain how to make an annonymous user or you an edit to be a regular user. Hope this helps.