Limit FTP access

I've been trying to control FTP access, as have many others judging from the posts. When I access FTP, anonymous access is off, I can traverse up the directory to the root of my FTP servers HD and go into any folder I want.
Also changing the user environment from FTP root & share points, to the others and back doesn't seem to do anything. Everytime I log in using FTP I am in the users home directory and the other shares are not visible.
I tried installing PureFTP but uninstalled it because I wanted the Apple FTP server to work. I'm wondering if PureFTP did something crazy and broke Apple's FTP.
TIA,
John McAdams

Found out an interesting, maybe useful consequence of installing PureFTP Manager. The installation writes a complicated ftpaccess file that keeps PureFTP as the FTP daemon. Here's what happened. I installed & configured PureFTP Manager and added a few virtual users. Used it for a while and it worked great. I needed to open up the firewall for passive FTP clients. I shut down PureFTP and opened up the ftpaccess file.
Now usually when I open this file running Tiger's FTP server, the file is blank. This file had a lot of information in it. I added my passive ports line to the end of the file and saved it.
Back in Sever Admin I added the Passive FTP service to the firewall and decided to start up Apple's FTP to test it out. When I ftp'd in as a user in the local directory I was greeted with the PureFTP banner! Everything worked fine. Just to check I opened PureFTP Manager and sure enough the gui said that it was off. I tested the ftp configuration by logging in as a virtual user that I had set up in PureFTP Manager. No problem.
So now I can use PureFTP Manager and Sever Admin together. That means I get the controll of PureFTP Manager but the remote administration of Server Admin. Now I need a way to look at the PureFTP logs in Server Admin but I'm happy with it for the time being.

Similar Messages

How to limit ftp access to single directory with lion

I am setting up an sftp server on a Lion system and I would like to know how I can limit a logged on user to a single directory. I am using the ftp daemon that comes with Lion. I start my ftp server using the following command:
sudo launchctl load -w /System/Library/LaunchDaemons/ftp.plist
I am using FileZilla for a client that will be run on a mac running Lion or Leopard.
I have seen threads on this but they are from 2009 and don't help with Lion.
thanks for the help
john

Hi, Did you find any info?
I am also looking for similar solution.
I am not using FileZilla, but just want to know how to setup a particular user on to access only a certain folder on MAC when logged in via FTP. They can log in by command line or any FTP utility from another PC or MAC or other Unix OS.
Please let me know, if you find something. I will share some info.

How to limit the access of a transaction

please provide hw to create an authorization object... like hw to limit the access of a particular userdefined trasaction to a particular user

hi
good
Element of the authorization concept.
Authorization objects allow you to define complex authorizations.
An authorization object groups together up to 10 authorization fields in an AND relationship in order to check whether a user is allowed to perform a certain action.
To pass an authorization test for an object, the user must satisfy the authorization check for each field in the object.
http://help.sap.com/saphelp_nw04s/helpdata/en/52/671285439b11d1896f0000e8322d00/content.htm
Basic form->
AUTHORITY-CHECK OBJECT object
ID name1 FIELD f1
ID name2 FIELD f2
ID name10 FIELD f10.
Example
Check whether the user is authorized for a particular plant. In this case, the following authorization object applies:
Table OBJ : Definition of authorization object
M_EINF_WRK
ACTVT
WERKS
Here, M_EINF_WRK is the object name, whilst ACTVT and WERKS are authorization fields. For example, a user with the authorizations
M_EINF_WRK_BERECH1
ACTVT 01-03
WERKS 0001-0003 .
can display and change plants within the Purchasing and Materials Management areas.
Such a user would thus pass the checks
AUTHORITY-CHECK OBJECT 'M_EINF_WRK'
    ID 'WERKS' FIELD '0002'
    ID 'ACTVT' FIELD '02'.
AUTHORITY-CHECK OBJECT 'M_EINF_WRK'
    ID 'WERKS' DUMMY
    ID 'ACTVT' FIELD '01':
but would fail the check
AUTHORITY-CHECK OBJECT 'M_EINF_WRK'
    ID 'WERKS' FIELD '0005'
    ID 'ACTVT' FIELD '04'.
To suppress unnecessary authorization checks or to carry out checks before the user has entered all the values, use DUMMY - as in this example. You can confirm the authorization later with another AUTHORITY-CHECK .
thanks
mrutyun

Can't disable my FTP Access ports!

Hi. I'm running MacOS X 10.3.9 on a Mac Powerbook with all of Apple's latest Security Updates installed. I did a virgin installation and no other software programs has been installed yet, and I need to find out if my current indicated FTP settings in the built-in Firewall panel is normal or whether maybe my system has been somehow hacked or attacked by an unknown virus.
In my computer's System Preferences/Sharing/Services panel, all options are currently off, and none of the items are checked. In the System Preferences/Sharing/Firewall panel, all options are also unchecked. But even though I've unchecked all items and they're supposed to be off, my FTP Access port is still showing the description "FTP Access (20-21, 1024-65535 from 20-21). First question - this lengthy description about my ports seem strange. Does everyone else show this same description in Panther, or is it just me?
But even more strange and bizarre is when I hover my mouse over the same FTP Access description, a balloon notation will pop up with the following information . . .
. . . "Ports 20 and 21 on your computer are open for FTP. If others connect to your computer from ports 20 and 21, then ports 1024 through 65535 are open. When you turn on FTP Access in the Services pane, you also allow the service access through the firewall on the indicated ports. To stop access through the firewall you must turn off this service using the Services pane." . . .
Personally, I don't want any ports open on my computer. Therefore this notation seems strange to me, especially considering that all my ports are supposed to be "off", therefore why is this notation still indicating that ports 20 and 21 are open. Even more strange is no matter what I do and no matter what settings I change, I can't alter the configuration of ports 20 and 21 and make them show as closed. I've tried everything, but ports 20 and 21 still remain open no matter what I do, at least according to this message. Question - Is what I'm seeing normal for everyone or are other users showing something different?
Below is an image of what I'm talking about :
http://homepage.mac.com/starshone/misc/PantherFTPAccess.jpg
Thanks in advance. Any help regarding this would be appreciated.
17" Mac Powerbook 1.5GHz Mac OS X (10.3.9)

If the problem is still there, try booting into the Safe Mode. Shut down the computer and then power it back up. Immediately after hearing the startup chime, hold down the shift key and continue to hold it until the gray Apple icon and a progress bar appear. The boot up is significantly slower than normal. This will reset some caches, forces a directory check, and disables all startup and login items, among other things. If the system operates normally, there may be 3rd party applications which are causing a problem. Try deleting/disabling the third party applications after a restart by using the application unistaller. For each disable/delete, you will need to restart if you don't do them all at once.
Safe Mode
Safe Mode - About
General information.
Isolating issues in Mac OS X
Troubleshooting Permission Issues
Step by Step to Fix Your Mac

I would like to limit the access to my Macbook Pro to 15 minutes a day for my kids.

Hello
I would like to limit the access to my computer for my daughter to 15 minutes a day. It seems that parental control cannot have anything lower than 30 minutes.
Any idea how we can bring that down to 15 min?
Thanks

Oh, and get out the whip while you're at it!
Just kidding - I've no children so I don't use parental controls - but 15 minutes? That's just cruel!
Clinton

Remote ftp access

I cannot get remote ftp access to my NMH405. I have remote access through https://ciscomediahub.com/ and can browse through my files this way, but I need to have remote access through ftp as well. I have set ut ftp access and it is working locally on my home network.
What is my ftp address?
Can someone please help me with this problem?
Solved!
Go to Solution.

If it works in your home network that means that you've set it up correctly. What you need to do know is provide the FTP service to the outside world. This generally means that you want to open up your router on port 20 and 21 and point those to the mediahub's internal IP address. If that is done, you can connect to it from the outside world via ftp://<external_ip_address_whatever_that_may_be>
Good luck,
Stolsel

Can FTP-access to field point log file interrupt the running program?

Can FTP-access to field point log file interrupt the running program?
We have a problem where our factory process control program on a Field Pointer suddenly stops the process. We are running the development system on a PC, wich deploys the program on the Field point, with user interface on the PC. Quite often the process stops for no apparent reason. I'm not sure right now if the control program on the Field Point is still running or if it stops. We use FTP from a distant PC (over VPN) directly to the Field Point to check if the process is running, by looking for date and size of log files produced during running process. I've never opened och copied any log file during process run, because this I'm sure this would cause problems for new log entries to be written. But can the mere looking at the log folder via XP-pros ftp-functionality cause the Field Point to have problems writing data to a log file?
I'm not sure how windows XP pro handles "my network places" when it comes to FTP, it look that it keeps some kind of local copy of the folders, or at least the files opened.
Next version of the program will have only basic functionality on the Field Point, leaving logging etc. to another program on the PC, but right now we are stuck with this system.
Ola A

It turned out that the problem lies in the harware of the production machine, it was not a labiew-program problem at all!
Ola

FTP access

I have a snowlwopard server setup for classes and have a problem with FTP access. I think the FTP and share points settings are correct, but when I add a student user and give access to a specific folder he can see everything that is in the entire documents folder.
Where should I be looking for the solution?

Homework files (e.g. word processor) and web pages for viewing.
The student has a web site folder inside a class folder.
The web Server folder is read-only for everyone, the student only has read-write permission to his folder.
Public FTP is turned off. I'm not sure where the ACL settings are located. The share points permission settings seem proper, is ACL separate from that?
He can't see passwords, but can see folder contents in the root directory.

How can I do to limit the access to modify the materials texts?

Hello,
I need to limit the access to modify the texts of the materials from the transaction MM02. How can I do?
These texts (Basic Data Text) are on "Basic Data 1" view.
Thanks a lot, and best regards.
Carmen

Hello Carmen,
This can be achieved with limted authorization. Work with basis team.
Regards,
Arif Mansuri

My high school aged child is spending too much time on Facebook, Tumblr to the detriment of home work. Is there any way I can limit the access to these sites to between 8pm and 10pm?

My high school aged child is spending too much time on Facebook and Tumblr is there any way I can limit the access time on these sites to from 8pm to 10pm?

System Preferences>Parental Controls has time limits - check out this intro to Parental Controls from Cult of Mac on YouTube.
Clinton

Lost website and ftp access in Leopard

After one of the recent security updates, I lost access to my website and I no longer have ftp access to my computer. I have a mac mini in my office that I host a company website on (with a static IP address). I also access my office files using the Fetch FTP program. I can no longer access either one. I can ping the computer over the internet and get no packet loss. Nothing hads changed on the router. I can access other computers in the office, only having a problem with the mac mini.

Your problem doesn't look like a technical one. It's more a problem of practices in your organizations.
Michals suggestion with the identity-firewall is a very good choice if you still want to keep complete control over the traffic that is allowed through your firewall. But your post sounds a little bit that you would like to delegate the work.
For that, an FTP-proxy in the DMZ could be a solution. This proxy is allowed to access the internet with FTP on your firewall. And you can delegate to administration of that proxy to the desktop-crew which are probably the admins that know best who needs FTP-access and who doesn't.
Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni

Ftp access docroot best practice

I have installed WS 7.0, created a dir /docroot with owner:group websrvd:webservd. What is a "good" way to send files to /docroot via
ftp? I only ftp over my local lan; access is not allowed outside of the local
lan. Should I set up a new user in group webservd with ftp access?
OR how do I set up a user for example dummy:staff to be able to
write files to /docroot? Thank you, I am trying to figure out what are
the best practices.
Thanks in advance for any assistance.
Mark.

Irek,
This is off subject but I wanted to talk to you about a previous issue that you where having in [This Thread|http://forum.java.sun.com/thread.jspa?messageID=9751068#9751068] .
ireneusz.tarnowski wrote in another thread:
Hi,
I've noticed many failures in my error log. I use SJSWS 6.1u7. Some example are below:
[04/Jul/2007:11:29:11] failure ( 9310): HTTP3068: Error receiving request from 156.17.73.28 (Connection refused)
[04/Jul/2007:11:32:40] failure ( 9310): HTTP3068: Error receiving request from 156.17.73.28 (Connection refused)
[04/Jul/2007:11:32:40] failure ( 9310): HTTP3068: Error receiving request from 156.17.73.28 (Connection refused)
[04/Jul/2007:11:32:41] failure ( 9310): HTTP3068: Error receiving request from 156.17.73.28 (Connection refused)
[04/Jul/2007:11:34:53] failure ( 9310): HTTP3068: Error receiving request from 156.17.73.28 (Connection refused)
[04/Jul/2007:11:34:53] failure ( 9310): HTTP3068: Error receiving request from 156.17.73.28 (Connection refused)
[04/Jul/2007:11:35:45] failure ( 9310): HTTP3068: Error receiving request from 156.17.73.28 (Connection refused)
[04/Jul/2007:11:37:21] failure ( 9310): HTTP3068: Error receiving request from 156.17.73.28 (Connection refused)The IP address which is noticed in error line is a router of some NAT in my corporation. I want to tune my webserver and receive all request from this address.
Any idea?
IrekDid you ever figure out how to fix this issue with the Sun Webserver 6.1 that you had back in July last year with the "Error receiving request from <ip address> (Connection refused)" messages? We are getting the same errors on our Sun ONE / Sun Java System webserver version 6.1 SP6. Please let me know.

Setup SAPRouter FTP Access

Hi,
Is there anyone who use the webdynpro for SAPRouter FTP Access?
When I call http://host:port/sap/bc/webdynpro/sap/ags_saprouter_edit I see the message "No SAProuter have been maintained yet".
How do I configure this? Is there any documentation about this tool?
My Solution Manager version is 7.0 Eph1

I found the solution.
I needed to run the following reports:
AI_SC_REFRESH_READ_ONLY_DATA
AI_SC_MIGRATION

FTP Access through router.

Hello,
I am trying to set up a simple ftp server to exchange files with my friends in other cities. When i start the service (FTP Access) it gives me this link:
ftp://192.168.0.3/
However this ip is the internal ip address i use to connect with my wireless router, and not my actual ip address. So is there a way to make it work, or this service can only be used if you dont share the internet?
Any advice will be very much appreceiated, bear in mind that i have control of the router so i can easily set up port permissions.
ps. I guess i 'll have the same problem if i try to set up a web server, and the solution will be the same as well.
THANKS!!
Mac Mini Duo Mac OS X (10.4.6) having switched one month now and never going baaaaack!

Hi frag,
Yes that IP address is on your internal network - your Mac has no knowledge of the external IP address that your router interfaces to the outside world with.
The config page for your router, or an external IP tracer, will show you the address that your friends need to use. But, depending on the connection you have to your ISP, your IP address may change on occasion (dynamic). In which case you may have to look into using a dynamic DNS provider which allows a fixed domain name to point to a dynamic IP.
Also, you are probably better off to use a 3rd party FTP server - such as PureFTPd Manager - which allows more flexibility with config, which will be very helpful for navigating through the router.
Graham

How do I give third party ftp access?

I have a client who has a "friend" who is an IT guy. He wants FTP access to work on his site's SEO. I created it in Muse with meta-tags on each page. Do I just grant him admin rights as a user in BC?

Hi,
Simply create an admin account for this user from within the admin console via Site Settings > Admin Users. Ensure the role assigned to this user has the permission 'Can use SFTP & File Manager' selected.
For information on how to connect via sFTP, please refer to the following article: kb.worldsecuresystems.com/kb/connecting-your-site-using-ftp.html.
Cheers.

Limit FTP access

Similar Messages

Maybe you are looking for