Hello 3000-L et, all.

RE: FTP doesn't use logon UDC - How do I restrict access?

>>What configuration change would be possible to make this work?
>>I want user MYUSER.MYACCT to use "HELLO" (with logon UDC which starts
>>an application) to access files in the account FILEACCT.
>>I don't want the user MYUSER.MYACCT to use FTP to access the account
>>FILEACCT.

One way to accomplish this was an enhancement put into FTP/iX many moons
ago.

A customer who did not use MPE passwords, but had VESOFT or application
passwords and did not want FTP users logging into PUT,GET,DEL files on
this user.accounts with no MPE passwords was able to use this enhancement
to secure these non-password logons from FTP/iX.

----------------------------------------cut/paste from FTPDOC.ARPA.SYS--
The "PASSWORD = ON" SETPARMS.ARPA.SYS configuration option is a security
enhancement added to the FTP Server "FTPSRVR" to support the ability to
restrict the establishment of FTP connections to MPE USER.ACCOUNT's
where at least "one" password (a "USER" password or an "ACCOUNT"
password) must exist.
------------------------------------------------------------------------

Keep in mind, this feature is enabled "SYSTEM WIDE".  For more details,
see FTPDOC.ARPA.SYS which is included with the current GR FTP patches
for 6.0, 6.5 and 7.0.

Regards,

James Hofmeister
Hewlett Packard
Worldwide Technology Network Expert Center
P.S. My Ideals are my own, not necessarily my employers.

* To join/leave the list, search archives, change list settings, *
* etc., please visit http://raven.utc.edu/archives/hp3000-l.html *