Re: Locking a FTP user into a specific folder using stock FTP server on IBMi 7.1

[Vernon Hamberg <vhamberg@xxxxxxxxxxxxxxx>]

Hi Laurence

This kind of thing can be done but not with bare-bones FTP, which 
doesn't have any of that capability.

This needs to use what are called exit points, there are security 
products which can set this up easily, or you can write your own 
program, which will be called at a certain point, an exit point, in the 
FTP process. This program needs to be registered to that exit point in 
the registry (not Windows registry) on IBM i. WRKREGINF can show you all 
the exit points.

I think you want the QIBM_QTMF_CLIENT_REQ exit point. Google for that 
and you should find information and examples - of course, IBM's 
documentation is the first thing to read, IMO.

HTH
Vern

On 4/2/2020 4:00 PM, Laurence Chiu wrote:
> This might seem a simple question but I am not  IBMi person and I am just
> getting involved in a major IBMi project. One question arose was, using the
> stock FTP server in IBMi, can an account be set to be placed in a certain
> folder on logon and not be able to go a folder up?
>
> It was posed by our security team who are concerned about FTP security and
> the fact that we are using FTP (albiet only within the corporate network)
> and so passwords go through in clear text. At this point in time there is
> no possibility of moving to SFTP
>
> Thanks