Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations strongm on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
FTP Login banner
- Thread starter CHT
- Start date
I run an AIX HACMP cluster on S80 hardware. When we installed it we found that the native AIX ftp server is really poor on both configuration and more importantly on security.
In particular we wanted to restrict ftp users to land in one directory only and see that as it's root directory, thus not letting them out of it. AIX FTP can't handle this basic requirement.
We decided in consultation with IBM that the best way to get this functionality was to use wu-ftpd. THis gave us the security we needed and also hugely customisable banners, etc. It's open source so you get all the joys of free regular updates etc.
See for more info.
Search the web and you will find pre-compiled versions for AIX BUT! if you chose to use one make sure you get it from a reputable source.
Safest bet is to download the source from wu-ftpd.org and compile your own.
Incidentally, this is the ftp Deamon shipped with RedHat Linux so may be quite familiar to you.
In particular we wanted to restrict ftp users to land in one directory only and see that as it's root directory, thus not letting them out of it. AIX FTP can't handle this basic requirement.
We decided in consultation with IBM that the best way to get this functionality was to use wu-ftpd. THis gave us the security we needed and also hugely customisable banners, etc. It's open source so you get all the joys of free regular updates etc.
See for more info.
Search the web and you will find pre-compiled versions for AIX BUT! if you chose to use one make sure you get it from a reputable source.
Safest bet is to download the source from wu-ftpd.org and compile your own.
Incidentally, this is the ftp Deamon shipped with RedHat Linux so may be quite familiar to you.
- Thread starter
- #4
aixmurderer
IS-IT--Management
And of course once you have wu-ftp installed the warning banner is easy, you define it in the /etc/ftpaccess file. IBM Certified Confused - MQSeries
IBM Certified Flabbergasted - AIX 5 pSeries System Administration
IBM Certified Flabbergasted - AIX 5 pSeries System Administration
Hi CHT,
I was after the same thing after a secuity audit suggested we add banners. The following is courtesy of the "AIX Hints and Tips" at
Q: Anonymous ftp - how to change the standard welcome message?
A: you can use dspcat /usr/lib/nls/msg/$LANG/ftpd.cat to unroll the ftp.cat into a ASCII msg file, edit the file and, then use gencat to roll it back up
I was after the same thing after a secuity audit suggested we add banners. The following is courtesy of the "AIX Hints and Tips" at
Q: Anonymous ftp - how to change the standard welcome message?
A: you can use dspcat /usr/lib/nls/msg/$LANG/ftpd.cat to unroll the ftp.cat into a ASCII msg file, edit the file and, then use gencat to roll it back up
- Status