Part I Network Services Topics
Part II Accessing Network File Systems Topics
4. Managing Network File Systems (Overview)
5. Network File System Administration (Tasks)
6. Accessing Network File Systems (Reference)
8. Planning and Enabling SLP (Tasks)
10. Incorporating Legacy Services
Part V Serial Networking Topics
15. Solaris PPP 4.0 (Overview)
16. Planning for the PPP Link (Tasks)
17. Setting Up a Dial-up PPP Link (Tasks)
18. Setting Up a Leased-Line PPP Link (Tasks)
19. Setting Up PPP Authentication (Tasks)
20. Setting Up a PPPoE Tunnel (Tasks)
21. Fixing Common PPP Problems (Tasks)
22. Solaris PPP 4.0 (Reference)
23. Migrating From Asynchronous Solaris PPP to Solaris PPP 4.0 (Tasks)
25. Administering UUCP (Tasks)
Part VI Working With Remote Systems Topics
27. Working With Remote Systems (Overview)
28. Administering the FTP Server (Tasks)
Administering the FTP Server (Task Map)
How to Define FTP Server Classes
How to Control the Number of Invalid Login Attempts
How to Disallow FTP Server Access to Particular Users
How to Restrict Access to the Default FTP Server
How to Set Up Anonymous FTP Users
How to Create the /etc/shells file
How to Customize Message Files
How to Create Messages to Be Sent to Users
How to Configure the README Option
Controlling Access to Files on the FTP Server
How to Control File Access Commands
Controlling Uploads and Downloads on the FTP Server
How to Control Uploads to the FTP Server
How to Control Downloads to the FTP Server
Starting the FTP Server Automatically
How to Start an FTP Server Using SMF
How to Start a Standalone FTP Server in the Background
How to Start a Standalone FTP Server in the Foreground
How to Shut Down the FTP Server
How to Check syslogd for FTP Server Messages
How to Use greeting text to Verify ftpaccess
How to Check the Commands Executed by FTP Users
Configuration Help for Busy Sites
29. Accessing Remote Systems (Tasks)
Part VII Monitoring Network Services Topics
Virtual hosting allows the FTP server to support multiple domains on the same machine. Each virtual host requires a separate logical interface and IP address.
The FTP server supports two types of virtual hosting: limited and complete. With limited virtual hosting, the same configuration files are used for all virtual hosts. With complete virtual hosting, separate configuration files can be used for each virtual host.
Note - By default, real and guest users are not allowed to log in to virtual hosts. You can set the following ftpaccess directives to override the default.
To allow access to specific users: virtual address allow username To deny access to anonymous users: virtual address private username
See ftpaccess(4) for further information.
Limited virtual hosting provides partial support for virtual FTP servers. You can enable support for limited virtual hosting by specifying the virtual root directory. If required, you can also set the following parameters for the virtual host in the ftpaccess file:
banner
logfile
hostname
All directives in the ftpaccess file are shared globally across all virtual servers.
Roles contain authorizations and privileged commands. For more information about roles, see Configuring RBAC (Task Map) in System Administration Guide: Security Services.
virtual address root|banner|logfile path virtual address hostname|email string
Keyword that is used to enable virtual server capabilities
IP address of the virtual server
The root directory of the virtual server
Banner file that is displayed when a connection is made to the virtual server
Record of file transfers that are made to and from the virtual server
Variable that is used to specify the location of directories and files on the virtual server
Email address that is used in message files and in the HELP command
Name of the host that is shown in the greeting message or status command
Variable that is used to specify email or hostname parameters
Note - While it is possible to use hostname as the address of the virtual server, you are strongly encouraged to use the IPv4 address instead. DNS must be available when the FTP connection is received in order for hostname to be matched. For an IPv6 host, use the host name rather than the IPv6 address.
Example 28-15 Enabling Limited Virtual Hosting in the ftpaccess File
virtual 10.1.2.3 root /var/ftp/virtual/ftp-serv virtual 10.1.2.3 banner /var/ftp/virtual/ftp-serv/banner.msg virtual 10.1.2.3 logfile /var/log/ftp/virtual/ftp-serv/xferlog
The preceding example sets the location of the root directory, banner, and logfile on a virtual FTP server.
Example 28-16 Enabling Limited Virtual Hosting on the Command Line
The ftpaddhost(1M) script with the -l option is provided to configure limited virtual hosts.
In the following example, ftpaddhost is run with -l -b -x options to configure limited virtual hosting with a test banner and the logfile /var/ftp/virtual/10.1.2.3/xferlog under a virtual root /var/ftp/virtual/10.1.2.3.
# ftpaddhost -l -b -x /var/ftp/virtual/10.1.2.3/xferlog \ /var/ftp/virtual/10.1.2.3
Complete virtual hosting allows separate configuration files for each virtual domain. To enable complete support for virtual hosting on the FTP server, you can create or modify the following FTP configuration files for specific domains:
ftpaccess
ftpusers
ftpgroups
ftphosts
ftpconversions
For further information, see ftpaccess(4), ftpusers(4), ftpgroups(4), ftphosts(4), and ftpconversions(4).
Note - If separate versions of the configuration files are unavailable, master versions of the files in the /etc/ftpd directory are used.
Roles contain authorizations and privileged commands. For more information about roles, see Configuring RBAC (Task Map) in System Administration Guide: Security Services.
address /config-file-dir
IP address of the virtual server
Directory that contains the configuration files that are customized for the virtual host
Note - While it is possible to use hostname as the address of the virtual server, you are strongly encouraged to use the IPv4 address instead. DNS must be available when the FTP connection is received in order for hostname to be matched. For an IPv6 host, use the host name rather than the IPv6 address.
For further information, see ftpservers(4).
Example 28-17 Enabling Complete Virtual Hosting in the ftpservers file
# # FTP Server virtual hosting configuration file # 10.1.2.3 /net/inet/virtual/somedomain/ 10.1.2.4 /net/inet/virtual/anotherdomain/
The preceding example specifies the IP addresses for two different domains on the virtual server.
Example 28-18 Enabling Complete Virtual Hosting from the Command Line
The ftpaddhost(1M) script with the -c option is provided to configure complete virtual hosts.
In the following example, ftpaddhost is run with -c -b -x options to configure complete virtual hosting with a test banner and the logfile /var/ftp/virtual/10.1.2.3/xferlog under a virtual root /var/ftp/virtual/10.1.2.3.
# ftpaddhost -c -b -x /var/ftp/virtual/10.1.2.3/xferlog \ /var/ftp/virtual/10.1.2.3