Anyway to force FTPS only for FTP

Is their anyway to force my users to use FTPS vs FTP. I do not see this
as an option in the restrict.txt. This server is behind a firewall but
I do not see how I could restrict this via the firewall. Anyone have
any idea if this is possible.

Originally Posted by knoke
Andrew Knoke wrote:
> Is their anyway to force my users to use FTPS vs FTP. I do not see this
> as an option in the restrict.txt. This server is behind a firewall but
> I do not see how I could restrict this via the firewall. Anyone have
> any idea if this is possible.
I think I have figured out this question. Although I now have another
question. I can force secure connections via the ftpserv.cfg file.
My new question is I would like force all of my users to connect using
FTPS except a few accounts which are mainly scanners that AFAIK will not
do FTPS. Is it possible to make exceptions like this based on account
or IP or do I actually need to setup another FTP server.
Thanks
Andy
Sorry, there is not a way to tell NWFTPD that some users must use FTPS and other users can use regular FTP. It's an all-or-nothing kind of setting.
Gathagan suggested SFTP/SSH, which is a good option, but I suppose your scanners might not do that, either. But you could set NWFTPD to only allow your scanner users (regardless of which protocol it is) and let NWFTPD support regular FTP, and tell all your other users to use SFTP (part of SSH) instead. You'd essentially get your desired end results, though you have to administer 2 services to get it done.

Similar Messages

  • All USB drives mount as read only for user

    I have searched a bunch and thee results I find seem to be irrelevant to my situation. Most relate to a single USB media that is a problem and won't read or write.
    On a new Arch install on a new computer (my third base system install). Running Gnome.
    All USB mass storage devices mount as read only for the logged in user. Root has write permissions and I can mkdir no problem. It is not an issue with the USB drive itself as this occurs with multiple USB media (I've tested several SD cards on a reader and at least two drives, all the media works correctly on my existing installations)
    I'm posting the contents of my /etc/group file in case there's an obvious error there I don't see, and my dmesg output upon plugging in the drive. User name is changed in the group file posted to "archie"
    This is a single-user system.
    /ect/group
    root:x:0:root
    bin:x:1:root,bin,daemon
    daemon:x:2:root,bin,daemon
    sys:x:3:root,bin
    adm:x:4:root,daemon
    tty:x:5:
    disk:x:6:root
    lp:x:7:daemon
    mem:x:8:
    kmem:x:9:
    wheel:x:10:root,archie
    ftp:x:11:
    mail:x:12:
    uucp:x:14:archie
    log:x:19:root
    utmp:x:20:
    locate:x:21:
    rfkill:x:24:
    smmsp:x:25:
    http:x:33:
    games:x:50:
    lock:x:54:
    uuidd:x:68:
    dbus:x:81:
    network:x:90:
    video:x:91:
    audio:x:92:
    optical:x:93:
    floppy:x:94:
    storage:x:95:
    scanner:x:96:
    power:x:98:
    nobody:x:99:
    users:x:100:archie
    systemd-journal:x:190:
    archie:x:1000:
    avahi:x:84:
    polkitd:x:102:
    rtkit:x:133:
    gdm:x:120:
    brlapi:x:999:
    kvm:x:78:
    ntp:x:87:archie
    dmesg output
    [ 968.044188] usb 4-3: new high-speed USB device number 4 using ehci-pci
    [ 968.170628] usb-storage 4-3:1.0: USB Mass Storage device detected
    [ 968.171435] scsi7 : usb-storage 4-3:1.0
    [ 969.174450] scsi 7:0:0:0: Direct-Access Generic USB SD Reader 1.00 PQ: 0 ANSI: 0
    [ 969.175068] scsi 7:0:0:1: Direct-Access Generic USB MS Reader 1.03 PQ: 0 ANSI: 0
    [ 969.939417] sd 7:0:0:0: [sdb] 15572992 512-byte logical blocks: (7.97 GB/7.42 GiB)
    [ 969.941028] sd 7:0:0:0: [sdb] Write Protect is off
    [ 969.941037] sd 7:0:0:0: [sdb] Mode Sense: 03 00 00 00
    [ 969.944664] sd 7:0:0:1: [sdc] Attached SCSI removable disk
    [ 969.945509] sd 7:0:0:0: [sdb] No Caching mode page found
    [ 969.945517] sd 7:0:0:0: [sdb] Assuming drive cache: write through
    [ 969.952682] sd 7:0:0:0: [sdb] No Caching mode page found
    [ 969.952693] sd 7:0:0:0: [sdb] Assuming drive cache: write through
    [ 969.956396] sdb: sdb1
    [ 969.965003] sd 7:0:0:0: [sdb] No Caching mode page found
    [ 969.965011] sd 7:0:0:0: [sdb] Assuming drive cache: write through
    [ 969.965015] sd 7:0:0:0: [sdb] Attached SCSI removable disk
    I'm sure I'm just missing something in user management, but I can't find what.
    Last edited by hooya (2014-04-27 03:10:49)

    I am also having the same problem. Root can read and write to automounted drives, but my user cannot. I've tried with a variety of drives, I am assuming they are being automounted by root instead of the logged-in user somehow. (I am running x directly, and am not using a display manager, if that has anything to do with it).
    When I look at how it is mounted it is as follows:
    /dev/sdc1 on /run/media/myuser/drivename type vfat (rw,nosuid,nodev,relatime,uid=1000,gid=1000,fmask=0022,dmask=0077,codepage=437,iocharset=iso8859-1,shortname=mixed,showexec,utf8,flush,errors=remount-ro,uhelper=udisks2)

  • NTLM - anyway to force credential prompt ?

    Hi all,
    I am using NTLM auth on a website and an applet that is used needs to connect back and retrieve images and issue commands at the users discretion.
    I am finding that in some instances, when the applet initializes (and fetches the first images) it will prompt the user to enter the NT authentication credentials, but not in other instances. In the latter case, the applet always obtains and sends the current logged in credentials instead (and subsequently fails to retrieve the right images).
    This same applet (since 1.4.2) has been working fine, always prompting the user, however within the last couple months it has stopped doing this reliably.
    I think this happenned around the time of 1.5.11 update, however i cannot be sure since in many cases, the account i am testing with exists on all tmachines and the fact that the authentication credentials used were "wrong" is only visible by examining the server logs.
    Is there anyway to force the applet to ALWAYS prompt the user for credentials - or failing that use the credentials used by the browser for that same site ?
    Thanks in advance.

    I don't have a ton experiencing using something like ARR, but we should do some testing.  The first thing I would try is to route around the ARR in the DMZ and connect directly to Exchange from externally.  This SHOULD let us know where the problem
    lies.  If it succeeds (no auth prompts) then the issue is on the ARR and not Exchange.  If it fails, then the issue is with the ARR and that needs to be looked at a little more clearly.
    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread

  • Is iweb only for a Mac account?

    Hi,
    I'm wanting to know if iweb is only for a Mac account. Can you use it if you already have an internet account with another provider?
    Thanks,
    Spiral Girl

    Hi Spiral Girl...
    Along the same lines as what Max has touched on, there are several features that are ".Mac-only", meaning that they will not be available to you if you publish your iWeb pages on a non-.Mac server. Having said that, there are plenty of replacements for all of these "missing" features that even exceed the qualities of the .Mac ones.
    iWeb also makes it pretty straightforward to publish to 3rd party servers. You simply select "Publish to Folder" and then iWeb puts all of your sitefiles in a folder for you...ready to upload. You must then upload the contents of this folder with any FTP program to your server. Pretty straightforward.
    Tom Gewecke has a tipsheet on publishing to non-.Mac servers...
    http://homepage.mac.com/thgewecke/iwebserver.html

  • E71: Anyway to force the internet to UMTS or HSDPA...

    Hi all, is there anyway to force the phone to use UMTS or HSDPA only instead of auto switch between GPRS/EDGE/UMTS/HSDPA? I noticed in certain area when the 2G/2.5G signal is stronger than 3G/HSDPA, the phone will switch to 2G/2.5G. I have a 3G/HSDPA datacard which i can force it to use UMTS/HSDPA only. At the same location, my datacard got UMTS/HSDPA but my E71 got only 2G

    hi, thanks for the tip. Managed to do that on E71. Sure E71 will land India soon. I saw alot of ppl using E61i (my previous phone) when i was in Bangalore 5 months ago

  • Could you please tell me why as a Brit resident in Japan therefore having a billing address that is Japanese is forced to only get service from the Japanese online store? Is there not some way of allowing me to select movies and music to buy and download

    Could you please tell me why as a Brit resident in Japan therefore having a billing address that is Japanese is forced to only get service from the Japanese online store? Is there not some way of allowing me to select movies and music to buy and download from other stores. Why do am i forced to try to nread Japanese when I have selected English as my language. The price for Downloads is no different and even if it was I am happy to pay. This also applies to Movie rental which is crazy and extremely restrictive. I a supposed GLOBAL community why does Apple do this.

    You can buy ONLY from the itunes store of your country of residence (As proven by valid billing address of credit card) and ONLY while inside the borders of that country.
    These are the terms of the itunes store.

  • How to force a "push" for contacts sync?

    In Settings, I use my MobileMe account ONLY for contacts, calendars, and bookmarks, not for e-mail.
    I have Fetch New Data set to Push, then Push set to Manually, then in Advanced, my e-mail accounts are set to Fetch (i.e. it'll update my mail only when I launch the Mail app) and my MobileMe account set to Push (i.e. I'd like them to be pushed to the phone).
    However, no contacts seem to get pushed to the phone. It's confusing as to how I'm supposed to initiate a manual push. Launching Contacts doesn't update the contacts.
    I don't particularly want to set Push to every 15 or 30 minutes, because I don't want to drain battery life. I'd be happy if it sync'ed once a day, but right now it's not syncing at all.
    Can someone help me understand how "push" and "manually" work (since there is no "force push right now" button anywhere) and how I can keep my contacts on my iPhone updated regularly automatically?
    Should I set MobileMe to Fetch? So that, as in when I launch Mail it updates the mail, when I launch Contacts it will update the Contacts? That would be good enough for me.
    (Also, this entire post is about downloading contacts from MobileMe, but I'd also like to make sure the reverse works too -- that if I add a contact or calendar date to my iPhone, it gets synced with MobileMe and later appears on my desktop machine.)

    Huh. Mine it does happen automatically, both ways.
    On the phone, Settings, Mail, Mobile Me account--do you have to set to sync contacts, calendar and bookmarks? Those can be turned off individually (this is in the account detail itself, not under the Fetch/Push setting screen.)
    On the computer, System Preferences, Mobile Me, do you have it set to sync automatically?
    When I see things not syncing, I generally force a sync from the computer, figuring that triggers the server and so on down the line to the phone.

  • Inspection lot should be created only for particular vendor

    Hi
    Can anyone please help in achieving the below scenario:
    *Material  has been assigned to the inspection type A (one time inspection) has been set as preffered and active  in the inspection set up in the material master.
    *Quality level has been created for material and vendor  such that inspection should be carried out when next stage is 1 and no inspection should carried out when next stage is 2.
    *Tasklist   has been assigned with material and vendor .
    Material can be supplied by different vendors,For this material,  inspection should be done only for one vendor  and for other vendors there should  not be any inspection to be done and no inspection lot should be created.i.e Inspection lot should be created only for one vendor say AA whereas now inspection lot is getting created when  goods receipt is done for the purchase order  with other vendor BB.
    My requirement is  the inspection lot should not be created when goods receipt is done with other vendors say BB  except AA.
    Is there any other way other than using quality info record to achieve this.
    I can try with DMR  but the thing is there should not be inspection lot created  while posting GR.
    can anyone suggest me any other way to achieve this requirement.

    There are user exits when you create an inspection lot.  One of those could be used to suppress the inspection lot.  Have you looked at these?  Have you researched any QM user exits yourself yet?  This isn't the first time this specific question has been asked over the years.
    It's not hard and there are lists of QM user exits available all over the internet.
    Please do some research.
    You can also assign vendors to inspection plans with a DMR that requires one inspection, and than after that creates all skip lot inspections which you automatically close by a batch job.  The first lot can be manually forced closed.  Thereaftter all receipts would be skipped.  Not 100% but pretty darn close.  This requires that you know which vendors to assign to which plan.  Probably as much data maintenance as maintaing the Q-info records.
    And yes.. your client needs to come up with better reasons than "I don't wanna..".  It's part of a consultants job to convince them.
    Craig

  • Touch screen stopped working. Is there anyway to force a full backup of the iPhone without typing in my passcode lock or is there anyway to force it to connect to a WiFi network so the phone can backup to iCloud??

    Hello all, I could use some help with my iPhone 4, I hope this is the best place to ask!
    The Problem:
    I want to do a full backup of my iphone to either itunes or to icloud. Unfortunately the iphone got wet and isn’t working properly. The phone turns on and still works, but the touch screen no longer works. I have a passcode lock on the phone so iTunes will not allow me to backup it up until I type in the passcode (which I cannot physically do). WiFi had been turned off before it got wet so it won’t connect to any known WiFi networks either to backup automatically to iCloud.
    What happened:
    I had been travelling for 6 months and went tubing on a river with my iphone in a dry bag. Unfortunately the dry bag failed and filled with water ruining my iphone.
    What I’d like to do:
    It’s an old phone and I was planning on buying a new iPhone anyway. I would love to do a full backup to either iCloud or to my computer so when I get a new iPhone I don’t lose anything. I’ve already connected it to my PC and downloaded all the photos and videos off the phone so at least I haven’t lost that, but I would like to be able to recover all the text messages, WhatsApp messages and notes I had created during my 6 months of travel.
    The last time it was backed up to my pc or to icloud was in April, so there are 6 months worth of very meaningful data I would love to keep to remind me of my travels!
    Is there anyway to force a full backup of the iPhone without typing in my passcode lock or is there anyway to force it to connect to a WiFi network so the phone can backup to iCloud??
    iTunes recognizes the phone just now and I tried upgrading the phone to iOS7 in the hopes that it would first backup and then upgrade. Unfortunately all that happened is the phone upgraded to iOS7, but it didn’t backup to iTunes. Now the phone is stuck at the iOS7 welcome screen and I can’t do anything else with it.
    Any ideas or tips would be welcome!
    NOTE: This is NOT a jailbroken iPhone.

    If there is no other way around this, is there anyway to completely wipe the phone then??
    The Apple store agreed to give me a new iPhone 4 as a warranty replacement for $150 (I travel a lot and I have a factory unlocked phone, so this is still worth it for me).  But before I trade it in, I would like to make sure all my data is backed up on the device first.
    When I try and restore the phone now on iTunes, it says I have to turn off Find My iPhone on the phone first before I can restore it.  Now since I can't use the screen I can't really do that.
    So how do I completely wipe the iPhone???
    Thanks!

  • Text Mandatory only for Certain Materials in Sales Order

    Is there anyway so that I can make certain item text mandatory only for certain materials?
    I tried creating new item category group and new item category. And then create new Text procedure making this text mandatory and assigning to this new item category.
    But there are lot of different types of item categories assigned. So it does not look good to create new item category for each and everyone for this new item category group and material.
    Please guide me how to make the document incomplete for certain materials only when one text is not filled at item level
    Thanks in advance

    Hi,
    what you tried is correct and that is been followed in most of my projects wherever I worked.  That is the best way recommended also.
    If you try with incompletion procedures for item category also, you will endup doing multiple item categories anyway....
    First when I looked at the subject line, even before I opened your POSTING, I got the same resolution as you did....May be the optimal one but, not sure, if something else is possible other than by doing user exit.
    Regards

  • How to force english language for VC BI Iview

    Hi,
    All developments in BI system are english so when users launch VC BI Iview from the portal what ever the logon language in the portal we would like that users get results in english.
    In the VC iview, for parameter Forced Request Language we select value English but it doesn't work.
    We don't find other iview parameter which allows to do that.
    With BEX WEB template iview, we can do that by setting LANGUAGE=EN for parameter Application Parameters in the
    iview.
    Do you know how to force English language for VCBI Iview ?
    Thanks in advance for your help.
    Mai

    Hello,
    If you use Delta Links between your portal objects (role, workset, page, iview), make sure that the Forced Request Language is set to "English" on the linked iView (which is only accessible from the page, from the workset, from the role...)
    Regards
    Arnaud

  • How to force Cartesian Product for unlineked (DBF) tables

    Hello
    We have been using CR8.5 for many years and we are just about to perform major upgrade to CR2011. I have, howverm found one strange behavior.
    Many of our reports are implemented in following way:
    MainTable.DBF (contains reported rows)
    ParamTable.DBF (contains one row with some general parameters)
    There is no data "link" between these tables but t makes sense to expect that every record from main table will see record from param table.
    in CR 8.5 Cartesian product of MainTable X ParamTable was ALWAYS available ad therefore we were able to (for example) hide the details & show only group totals, or display some header information (this can be also done by sub-report).
    in CR2011, however, this seems not to be the case anymore. Namely:
    any old report that I open in CR2011 has param line available only for the very first record and I was not able to find a way how to change it
    if I recreate the report from the scratch, sometimes Cartesian product is "provided" and sometimes not - I really do not know the reason for the decision.
    [I have one very ugly workaround: link these two tables with != (not equal operation) between two unrelated fields that can never be the same]
    Is there any "solution" to this cause as it blocks us from upgrading to the latest version?
    Kind Regards,
    Martin Fontan

    Hi Martin,
    Long story so here's the short one. As of CR 9 we completely redeveloped our database drivers and query engine. We removed all of the "hack" work arounds in our code for DB clients did not follow the rules, this forces the DB makers to fix the client engine and follow ANSII 92 standards. You also can no longer edit the SQL statement.
    We have also never supported unlinked tables, CR is a Relational database reporting tool. Us a subreport if you must use an unlinked table, or as you have discovered using a != type.
    Other work around is to use a Command, it' sin the Database wizard, write your own SQL, we simply pass it to the client. There is no option directly to set location from a Table to a SQL Command but search here, Brian Dong found a way around this limitation using a CR Wizard.
    Thanks
    Don

  • Why only for me my webpage is little bit broken?

    Why only for me my webpage is little bit broken not showing correctly? With other browsers is OK, but then i using Firefox 4+ version it's little bit broken, my friends using same browser like me, but for they website looking good. Please help me, because i don't like use old firefox versions :/
    You can see how for me it look's: http://img818.imageshack.us/img818/8585/unledal.jpg At normally the text from panel's should little bit exposed from panel.

    Fix your coding so your web pages are displayed in "standards mode" rather then the "quirks mode". The problem with the quirks mode is that it forces Firefox to guess your intentions about how something is to be displayed, when your friends view that page Firefox guesses right, but for you Firefox is guessing wrong. Eliminate the "guess" factor and Firefox should display your web page the same for all users. <br />
    http://en.wikipedia.org/wiki/Quirks_Mode
    Plus, once you fix the code, maybe you can get rid of that NO IE logo that appears when someone uses IE to view that page. Times are changing, IE 8 and even more so IE9, can display web pages almost as good as Firefox, Opera, and Chrome, and if not the web page is more than likely at fault.

  • Error "This operation is available only for certified forms"

    We have developed the Adobe form in Webdynpro ABAP (NW04S SP9).When we test the form in the ABAP side it works fine. But when we deploy the form in the portal and try to perform the same action we get the error "This operation is available only for certified forms". Could someone let us know what the problem could be?
    thanks

    the first thing to check would be that there's
    no logic error in your application that's causing multiple threads to try to close
    the same folder.... and if there is, note that there is a timing-window problem between calling imapFolder.isOpen() and imapFolder.close(). Only one thread should be doing this anyway.

  • Why jvm maintains string pool only for string objects why not for other objects?

    why jvm maintains string pool only for string objects why not for other objects? why there is no pool for other objects? what is the specialty of string?

    rp0428 wrote:
    You might be aware of the fact that String is an immutable object, which means string object once created cannot be manipulated or modified. If we are going for such operation then we will be creating a new string out of that operation.
    It's a JVM design-time decision or rather better memory management. In programming it's quite a common case that we will define string with same values multiple times and having a pool to hold these data will be much efficient. Multiple references from program point/ refer to same object/ value.
    Please refer these links
    What is Java String Pool? | JournalDev
    Why String is Immutable in Java ? | Javalobby
    Sorry but you are spreading FALSE information. Also, that first article is WRONG - just as OP was wrong.
    This is NO SUCH THING as a 'string pool' in Java. There is a CONSTANT pool and that pool can include STRING CONSTANTS.
    It has NOTHING to do with immutability - it has to do with CONSTANTS.
    Just because a string is immutable does NOT mean it is a CONSTANT. And just because two strings have the exact same sequence of characters does NOT mean they use values from the constant pool.
    On the other hand class String offers the .intern() method to ensure that there is only one instance of class String for a certain sequence of characters, and the JVM calls it implicitly for literal strings and compile time string concatination results.
    Chapter 3. Lexical Structure
    In that sense the OPs question is valid, although the OP uses wrong wording.
    And the question is: what makes class Strings special so that it offers interning while other basic types don't.
    I don't know the answer.
    But in my opinion this is because of the hybrid nature of strings.
    In Java we have primitive types (int, float, double...) and Object types (Integer, Float, Double).
    The primitive types are consessons to C developers. Without primitive types you could not write simple equiations or comparisons (a = 2+3; if (a==5) ...). [autoboxing has not been there from the beginning...]
    The String class is different, almost something of both. You create String literals as you do with primitives (String a = "aString") and you can concatinate strings with the '+' operator. Nevertheless each string is an object.
    It should be common knowledge that strings should not be compared with '==' but because of the interning functionality this works surprisingly often.
    Since strings are so easy to create and each string is an object the lack ot the interning functionality would cause heavy memory consumption. Just look at your code how often you use the same string literal within your program.
    The memory problem is less important for other object types. Either because you create less equal objects of them or the benefit of pointing to the same object is less (eg. because the memory foot print of the individual objects is almost the same as the memory footpint of the references to it needed anyway).
    These are my personal thoughts.
    Hope this helps.
    bye
    TPD

Maybe you are looking for