/etc/ftpusers

Access control file for ftpd

Name:

/etc/ftpusers

Description:

The /etc/ftpusers file provides user access control for ftpd by defining which users may login.

If the /etc/ftpusers file doesn't exist, all users are denied access.

The syntax of each line is:

userglob[:groupglob][@host] [directive [class]]

where:

userglob

Match against the username. Calls fnmatch() (e.g. f*).

groupglob

Match against all the groups that the user is a member of. Calls fnmatch() (e.g. *src).

host

Either a CIDR address (see inet_net_pton()) to match against the remote address (e.g. 1.2.3.4/24), or a glob to match against the remote hostname (e.g. *.netbsd.org).

directive

Allow or deny user access.

• allow or yes -- allow user access
• deny or no -- deny user access

If none of the above values are specified, user access is denied.

class

Use this class in /etc/ftpd.conf. If class isn't specified, it defaults to one of the following:

• chroot -- there's a match in /etc/ftpchroot for the user.
• guest -- the user name is anonymous or ftp.
• real -- neither of the above is true.

No further comparisons are attempted after the first successful match. If no match is found, the user is granted access. This syntax is backward-compatable with the old syntax.

If a user requests a guest login, the ftpd server checks to see that both anonymous and ftp have access. If you deny all users by default, you'll need to add both anonymous allow and ftp allow to /etc/ftpusers in order to allow guest logins.

Related files

/etc/ftpchroot

List of the normal users who should have their session's root directory changed.

/etc/ftpusers

This file.

See also:

ftpd, /etc/ftpd.conf

fnmatch(), inet_net_pton() in the Library Reference