Configuring and Managing MPE/iX Internet Services (August 2002)

Chapter 5

TFTP Service

Configuring tftpd

4. Save the file and exit the editor program.

There are two options in the tftpd entry, [user] and [path], which are explained in the next two sections.

For more detailed information about editing the configuration file, read Chapter 2, “Internet Daemon.”

Specifying the TFTP User

The Internet daemon runs tftpd as the user specified in the [user] parameter of its entry in the inetd

configuration file. For example, this entry instructs inetd to run the TFTP server as USER.TFTP:

tftp dgram udp wait USER.TFTP /SYS/NET/TFTPD tftpd

Hewlett-Packard recommends that you run tftpd this way, and that you use the following steps to create the

TFTP account and two user identifications, USER.TFTP and MGR.TFTP, with the appropriate capabilities:

1. If necessary, log onto the system as MANAGER.SYS or to another user identity that has been assigned SM

capability.

2. Create the TFTP account by entering the following command at the CI prompt:

:NEWACCT TFTP,MGR;CAP=AM,PH,DS,ND,SF,IA,BA

3. Create the new user of the TFTP account with a home directory of TFTPDIR by entering the following

command at the CI prompt:

:NEWUSER USER.TFTP;cap=BA,PH,DS;home=TFTPDIR

When a client accesses tftpd it will first look for the file in the home group TFTPDIR.

4. Create the home directory TFTPDIR by entering the following command at the CI prompt:

:NEWGROUP TFTPDIR.TFTP

5. Modify the new manager of the TFTP account by entering the following command at the CI prompt:

:ALTUSER MGR.TFTP;cap= PH,DS,ND,SF,IA,BA

For security reasons, USER.TFTP is not assigned ND, SF, PM or SM capabilities. This way USER.TFTP can be

used to run tftpd while MGR.TFTP, who is assigned some of these capabilities, can control which files are

placed in the TFTPDIR group.