iX 6.5)

70 Chapter5

TFTP Service

Conﬁguring tftpd

There are two options in the tftpd entry, [user] and [path], which

are explained in the next two sections. For more detailed information

about editing the conﬁguration ﬁle, read Chapter 2 , “Internet

Daemon.”

Specifying the TFTP User

The Internet daemon runs tftpd as the user speciﬁed in the [user]

parameter of its entry in the inetd conﬁguration ﬁle. For example, this

entry instructs inetd to run the TFTP server as USER.TFTP:

tftp dgram udp wait USER.TFTP /SYS/NET/TFTPD tftpd

Hewlett-Packard recommends that you run tftpd this way, and that

you use the following steps to create the TFTP account and two user

identiﬁcations, USER.TFTP and MGR.TFTP, with the appropriate

capabilities:

1. If necessary, log onto the system as MANAGER.SYS or to another user

identity that has been assigned SM capability.

2. Create the TFTP account by entering the following command at the

CI prompt:

:NEWACCT TFTP,MGR;CAP=AM,PH,DS,ND,SF,IA,BA

3. Create the new user of the TFTP account with a home directory of

TFTPDIR by entering the following command at the CI prompt:

:NEWUSER USER.TFTP;cap=BA,PH,DS;home=TFTPDIR

When a client accesses tftpd it will ﬁrst look for the ﬁle in the home

group TFTPDIR.

4. Create the home directory TFTPDIR by entering the following

command at the CI prompt:

:NEWGROUP TFTPDIR.TFTP

5. Modify the new manager of the TFTP account by entering the

following command at the CI prompt:

:ALTUSER MGR.TFTP;cap= PH,DS,ND,SF,IA,BA

For security reasons, USER.TFTP is not assigned ND, SF, PM or SM

capabilities. This way USER.TFTP can be used to run tftpd while

MGR.TFTP, who is assigned some of these capabilities, can control which

ﬁles are placed in the TFTPDIR group.