New Versions of FTPD

HP-UX 11.0 Extension Pack, December 1998, contains a new version of FTPD. The new version of FTPD is a replacement for the legacy FTPD. Besides supporting the FTP protocol defined in RFC 959, the following features new features are provided:

logging of transfers
logging of commands
on the fly compression and archiving
classification of users on type and location
per-directory upload permissions
restricted guest accounts
system wide and per directory messages
directory alias
cdpath
filename filter
virtual host support
per- class limits - ability to define "classes" of users, according to the source IP addresses and/or hostnames, and to limit access according to user class.

Existing installations do not have to modify their FTP configuration unless they want to use the new features.

The major differences between legacy FTPD and the new version of FTPD are as follows:

1. New FTP daemon options

`-d`	Logs debugging information in syslog.
`-m number of tries`	Specifies the number of tries for a bind() socket call.
`-a`	Enables the use of the ftpaccess file, which is used to configure the operation of FTPD.
`-A`	Disables the use of the ftpaccess configuration file.
`-i`	Logs all the files received by the FTPD server to xferlog(5).
`-o`	Logs all files transmitted by FTPD in xferlog.
`-L`	Logs all commands sent to the FTPD server into syslog.

2. New commands

/usr/bin/ftpcount	Shows current number of users per class
/usr/bin/ftpwho	Shows current process information for each user.
/usr/bin/ftpshut	Creates shutdown message file.
/usr/bin/ftprestart	Removes the shutdown message file created by the ftpshut utility

3. New Configuration files

`/etc/ftpd/ftpaccess`	The primary configuration file defining the operation of the new FTP daemon.
`/etc/ftpd/ftpconversions`	Defines options for compression/decompression and tar/un-tar operations.
`/etc/ftpd/ftphosts`	Lets you allow/deny FTP account access according to source IP addresses and hostnames.
`/etc/ftpd/ftpgroups`	The group password file for use with the SITE GROUP and SITE GPASS commands.

4. /var/adm/syslog/xferlog

This file contains logging information from the FTP server daemon.

5. Virtual FTP Support

If you wish to manage an ftp server for two separate domains on the same machine, the virtual ftp server feature can be used. This allows an administrator to configure systems, so that a user ftping to ftp.domain1.com gets one ftp banner and ftp directory, and a user ftping to ftp.domain2.com gets another banner and directory even though they are on the same machine and use the same ports.




	NOTE: Setting up a virtual ftp server requires IP address aliasing. This is supported in HP-UX release 10.30 and later.

6. Support Tools

/usr/bin/ckconfig Verifies path names of all FTP configuration files.

Secure Version of FTPD

At 11.0, a unified binary is available for the new version of FTPD which can operate as both Kerberos and non-Kerberos service.

To have the new FTPD operate in a secure environment, you enable the secure environment, with the following command:

/usr/sbin/inetsvcs_sec enable

This will update the system file /etc/inetsvcs.conf with an entry kerberos true. The services obtain the type of authentication mechanism from the system file at run-time.

New Versions of FTPD

Technical documentation

» Table of Contents

Secure Version of FTPD