Well I just tested if the FTP will abort if it exceeds the PAUSE time and it
doesn't !!
The FTP session appears to remain active as long as the FTP client doesn't
Exit and it appears to completely ignore the PAUSE statement. In fact I
suspect it ignores the whole UDC ! So taking it from there I completely
removed the PAUSE from the UDC which now looks like :

FTPONLY
OPTIONLOGON
NOBREAK
BYE

And yes, even with this UDC specified the FTP client can still log on and
exchange files normally. And once again this username CAN'T be used to
establish an on-line session (which was/is my original objective).


Costas "The list seems a bit slow today" Anastassiades,
INTRACOM SA
Athens, Greece



-----Original Message-----
From: HP-3000 Systems Discussion [mailto:[log in to unmask]]On
Behalf Of James Clark,Florida
Sent: Thursday, March 09, 2000 3:01 PM
To: [log in to unmask]
Subject: Re: Creating an "FTP only" user


Are you saying that if the FTP transfer takes longer than 5 minutes that it
is aborted by the UDC? One other option to consider is the command line
option from FTP. Not sure if this is implemented in the HP side, but if it
is not now it will be, to make it fully compatible.

James

> -----Original Message-----
> From: HP-3000 Systems Discussion [mailto:[log in to unmask]]On
> Behalf Of Costas Anastassiades
> Sent: Wednesday, March 08, 2000 10:28 AM
> To: [log in to unmask]
> Subject: Creating an "FTP only" user
>
>
> I wanted to set up a user just for FTP. The user will have a password but
> since all FTP clients will logon using this user, the password
> won't be the
> best kept one. So I didn't want the user to be able to access the system
> prompt or execute any other command should someone get clever and actually
> logon as a normal session.
>
> This is what I came up with.
> -create a new user with SF, IA and a specific HOME group
> -assign him a UDC which has OPTION LOGON and NOBREAK and which PAUSES for
> say 5 minutes (more than enough FTP time for my needs) and then
> issues a BYE
>
> and ... this ... seems ... to ... work :)
>
> FTP clients can logon and exchange files and yet when you logon
> with a HELLO
> there's nothing to do but wait for the BYE to be automatically
> issued. What
> is really neat, is that once the FTP client logs off, the session
> also dies,
> regardless of the elapsed PAUSE time.
>
> Now the purpose of this message is so someone can :
>
> a) tell me that I'm reinventing the wheel and/or
> b) tell me what I'm missing and/or
> b) suggest a more robust approach
>
> Costas Anastassiades,
> INTRACOM SA
> Athens - Greece
>