Home Forums OS X Server and Client Discussion File Serving hiding folders in FTP

Viewing 4 posts - 1 through 4 (of 4 total)
  • Author
    Posts
  • #365748
    mixduptransistor
    Participant

    We’re having an issue with the built-in FTP server for Tiger. We want to give our customers an FTP login and allow them only to their allowed sharepoints. The problem we’re having is that we don’t want folders for other customers to be listed. Permissions aren’t letting people into folders they shouldn’t, but we don’t even want them listed if the user does not have permission to view the contents. how can we turn that off? We’ve tried doing home directory only but we still get sharepoints, so I dont know what the deal is.

    #368536
    seanqt
    Participant

    I’ve got the same exact needs as mixduptransistor. Have there been any thoughts or comments in the past year? Please let me know if you hear of anything…

    #371852
    Dave Holt
    Participant

    I’m in the same boat. I’m also assuming since another year has gone by, that there is not an easy answer.

    Any suggestions on the best route to setting up a secure ftp site? Would that solve the problem?

    #372252
    Eden.Nelson
    Participant

    This should get you what you want. Assuming that these are local users, not OD.

    Set “Authenticated users see:” to “Home Directory with Share Points”.
    Usering WGM apply a ACL:
    User “Everyone”, Type “Deny”, Permission “Full Control”, Path “/Library/FTPServer/FTPRoot”

    This makes the FTPRoot disappear in when browsing with a ftp client.

    Now you need to give your users access to the resources they should have access to.
    So I would create a new FTP root for them and call it UserFTPRoot.
    Then I would create symlinks to the shares the user needs to access.
    [code]
    mkdir /Users/(USERNAME)/UserFTPRoot
    ln -s /(PATH)/(TO)/(SHARE)/(SHARENAME1) /Users/(USERNAME)/UserFTPRoot/(SHARENAME1)
    ln -s /(PATH)/(TO)/(SHARE)/(SHARENAME2) /Users/(USERNAME)/UserFTPRoot/(SHARENAME2)
    [/code]

    You would probably want to script the creation of these symlinks.
    Let me know if you need help with that.

Viewing 4 posts - 1 through 4 (of 4 total)
  • You must be logged in to reply to this topic.

Comments are closed