Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 27 Nov 1995 16:11:38 -0600 (CST)
From:      Guy Helmer <ghelmer@alpha.dsu.edu>
To:        Raul Zighelboim <mango@communique.net>
Cc:        questions@freebsd.org
Subject:   Re: Secure ftp under FreeBSD...
Message-ID:  <Pine.OSF.3.91.951127155255.9704A-100000@alpha.dsu.edu>
In-Reply-To: <Pine.A32.3.91.951127112228.8153E-100000@ryu.communique.net>

next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, 27 Nov 1995, Raul Zighelboim wrote:

> I am trying to set secure ftp on a FreeBSD box;  ie, all my users can ftp
> into the box, but, as they get in, I want to chroot them to their home 
> directory...

Interesting -- I'd be interested in hearing how you solve the need for
"/bin/ls" relative to each user's home directory...

> My first problem was that every user is set to his own group; easily fixed
> by adding them to another group...
> 
> Now, it seems that the '/etc/groups' line is restricted to ~1000 characters
> (or is ~ 1000/6 users ?).  Is there a way to overcome this ?  OR does 
> this question belongs to some wu-ftp maillist ?

Yes, getgrent(3) and friends use a fixed-size buffer (1024 bytes, I 
believe) to read and parse the lines in /etc/group.  This problem was 
recently discussed on the alpha-osf-managers list; one hack to overcome 
this limitation was to split the group members over multiple lines but 
using the same GID, like:

group:678:*:lots,of,members
group1:678:*:more,members

Unfortunately, it's not a general solution (due to the different group 
names for each line), but it may work for you...

> Raul Zighelboim                         e-mail:    mango@communique.net  
> Communique Inc.                            Tel:    504.527.6200
> Technical Specialist                       Fax:    504.527.6030 

Guy Helmer, Dakota State University Computing Services - ghelmer@alpha.dsu.edu




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.OSF.3.91.951127155255.9704A-100000>