APPENDIX B
FTPUSERS PERMISSIONS
The following is a list of the user permission values required for the
FTPUSERS file.
Name: value (hex)
FTP_READ 1 0x1 /* Read files */
FTP_CREATE 2 0x2 /* Create new files */
FTP_WRITE 4 0x4 /* Overwrite or delete existing files */
AX25_CMD 8 0x8 /* AX.25 gateway operation allowed */
TELNET_CMD 16 0x10 /* Telnet gateway operation allowed */
NETROM_CMD 32 0x20 /* NET/ROM gateway operation allowed */
SYSOP_CMD 64 0x40 /* Remote sysop access allowed */
EXCLUDED_CMD 128 0x80 /* This user is banned from the BBS */
PPP_ACCESS_PRIV 256 0x100 /* bit for PPP connection */
PPP_PWD_LOOKUP 512 0x200 /* Priv bit for peerID/pass lookup */
NO_SENDCMD 1024 0x400 /* Disallow send command */
NO_READCMD 2048 0x800 /* Disallow read command */
NO_3PARTY 4096 0x1000 /* Disallow third-party mail */
IS_BBS 8192 0x2000 /* This user is a bbs */
IS_EXPERT 16384 0x4000 /* This user is an expert */
NO_CONVERS 32768 0x8000 /* Disallow convers command */
NO_ESCAPE 65536 0x10000 /* Default is no escape char */
NO_LISTS 131072 0x20000 /* No lists displayed from mailbox */
NO_LINKEDTO 262144 0x40000 /* Disable '*** linked to' */
NO_LASTREAD 524288 0X80000 /* Ignore lastread in <area>.usr
(shared accts)*/
NO-FBBCMP 1048576 0x100000 /* Avoid FBB compression */
XG_ALLOWED 2097152 0X200000 /* Allow XG (dynip route) cmd */
To set options, simply add values.
Format in /ftpusers file is:
<name> <password> [<drive:></rootdir>;</root2>] <#perms>] [=]...
<name> is the userid, normally a callsign for amateur radio use.
The <name> "univperm" should be included in the ftpusers file.
"univperm" allows anyone not otherwise found in the ftpusers file
to logon with "guest" status. Protocol-specific permissions can be
allowed by using the following names vice "univperm";
tcpperm - telnet login to mailbox
ax25perm - ax.25 login to mailbox
nrperm - netrom login to mailbox
confperm - convers signin
pppperm - ppp's call to userlogin
ftpperm - ftp login
tipperm - tip login to mailbox
If <password> is set to '<string>', then <string> must
be used. If <password> is set to '*', then any entry will
satisfy password.
User can be given access to several drives and directories with
varying permissions. These are all given on one line.
<drive:> is the drive letter for each drive to which the user is
being given access.
</rootdir> is the highest directory in the system tree the user
may access. It becomes the users root directory. Subdirectories
under </rootdir> may be accessed by the user. More than one
</rootdir> may be given per drive. The initial directory
(that is, your starting directory after an ftp session is established)
is the first directory listed, UNLESS one of the following directories
is preceded by an "=" to flag it as the initial directory. Example:
anonymous * /pub/wr_only 2 /pub/rw_del 7 =/pub 1 f:/1
<#permissions> is the sum of the decimal OR hexadecimal values
which defines what the user is allowed to do while logged onto
the system.
You may provide access to more than one set of drives and
directories with different permissions for each set. This
allows a user to access a personal directory with complete
read/write/delete access and a public directory with read
permissions only, or any other combination you may desire.
univperm * /public 138283 (or 0x21c2b)
gives anyone not otherwise known login permission as a guest
who can read or create (upload) new files on FTP connections,
access ax25 or netrom stations, but has no mbox send, read,
3rd_party, or list functions.
wg0b doug c:/wg0b 0x407f /public;/nts ox407b
defines two different setps of permissions for three different
areas.
End of Appendix B, FTP User Permissions