The Answer Guy

Hi James, how you doing?

I'm writing to you as The Answer Guy 'cause I have some problem with setting up the guest trick with wu-ftpd. What I mean is to have a chrooted enviroment for some special user with their home directory and user-id and password.

I'm using Slackware '96 Linux with the wu-archive-ftp that comes already compiled with it.

This is what I did:

• I compiled gnu ls statically and put it in ~ftp/user-foo/bin directory.
• I did the /etc hack:
  • added the guest group in/etc/group
  • modify the/etc/passwd file for the user I want to be chrooted giving him /home/ftp/user-foo./ directory

I don't recall whether the "ftponly" (or whatever you call your "guestgroup" group) has to be that user's primary group (the one listed in /etc/passwd) or whether it can be one of the supplemental groups (as listed in /etc/group)

• added /etc/ftponly to /etc/shells
• I modify the /etc/ftpaccess file adding ...
path-filter guest /etc/pathmsg ^[-A-Za-z0-9_\.]*$ ^\. ^-
....
guestgroup guest
• I created the user home directory which has the following attribute:

  [root]:/home/ftp>ls -la
  total 104
  dr-xr-xr-x   9 root     root          512 Jun  2 14:01 .
  drwxrwxr-x   6 user-foo guest     512 Jun  3 13:54 user-foo
  dr-xr-xr-x   2 root     root       512 Jun  3 09:45 bin
  

Now the ftp server is running fine (both with normal and anonymous users) and even the chrooted enviroment for guest is working fine: the user can login, upload and download files and it is locked in that directory... i.e. can go in all the subdirectory but can't go up. So it is perfect!

The only problem is that ls and dir are not working and he can only list files using nlist.

For example:

Name (localhost:root): user-foo
331 Password required for user-foo.
Password:
230 User amex logged in.  Access restrictions apply.
ftp> nlist
200 PORT command successful.
150 Opening ASCII mode data connection for file list.
bin
.profile
etc
.rhosts
.forward
.sh_history
test-directory
test-file.txt
226 Transfer complete.
ftp> dir
200 PORT command successful.
150 Opening ASCII mode data connection for '/bin/ls'.
226 Transfer complete.
ftp> ls
200 PORT command successful.
150 Opening ASCII mode data connection for '/bin/ls'.
226 Transfer complete.
ftp>quit

What am I missing? how can I allow him to do ls and dir? Note: i'm sure that the new ls is working:

[root@Goliath /home/ftp/user-foo//bin]#./ls
compress  cpio        gzip            ls              sh        tar
[root@Goliath /home/ftp/user-foo/bin]#

and that is statically linked:

[root@Goliath /home/ftp/user-foo/bin]#ldd ./ls

Statically linked (ELF)

[root@Goliath /home/ftp/user-foo/bin]#