Contents
 Local Services Security

Use Local Services Security to control who has access to services running on your PC. These services include Telnet (remote login) and FTP (remote file transfer).

Introduction

What Is Local Services Security?

How To...

Provide a User with Access to Your PC's Services

Delete a User's Access to Your PC's Services

Change a User's Authorization Password

Replace a Lost or Forgotten Authorization Password

Modify a User's Access Privileges

View the Contents of a User's Authorization File

Troubleshoot Local Services Problems


What Is Local Services Security?

Local Services Security sets up and maintains a database of users who may access your PC's daemon-based services.

When you enter the name and password of a user allowed access to your PC, Local Services Security creates a data file about the user on your PC. You can change password assignments (don't forget to notify the user involved), and you can add and delete users at any time.

You determine the services available to each user. In addition, you can limit a user's FTP privileges in two ways: by allowing read-only access to your PC, and by confining FTP operations to a specific directory (the user's home directory) on your PC.

You can also enter optional information about users to make access more convenient for them and to help you identify them.


Daemon-Based Services

SolarNet PC networking software provides various special services in the form of daemon programs, depending upon what version of the SolarNet software you purchased. You can run these programs on your PC to provide special functions not otherwise available. PC-based daemon programs include:

TELNETD - To allow others to establish a Telnet session with your PC.

FTPD - To allow others to transfer files to or from your PC.

LPD Print Server (PC-NFSpro only) - To enable others to print to a printer connected to your PC.

Network Event Log  (syslogd)- To log system messages and errors.

Use Local Services Security to control who has access to the TELNETD and FTPD services available on your PC.


Optional Information

Optional user information includes:

User's Full Name - This is the complete name of the user. It provides you with an additional means of identification when a person's user name does not reflect her/his real name.


Providing a User With Access to Your PC's Services

1.	Double-click the Local Services Security icon in the SolarNet Group.

The Local Services Security dialog opens.

2.	Enter in the User Name edit box the user name of the person you are allowing access.

The name can have a maximum of 8 characters and need not be the user's normal  network name.

3.	In the Services Permitted panel, choose the services this user will be able to access.

Available services are Telnet and/or FTP.

4.	If you are allowing FTP service, in the FTP Restrictions panel check any restrictions you want to place on the user.

Home Directory confines file transfers to the user's home directory on your PC. Read-only prevents file transfers to your PC.

Note: Telnet user access is not confined to this directory.

5.	If you are confining a user to a home directory on your PC, enter the path and name of the directory in the Home Directory edit box.

If the directory does not exist, you will be given the opportunity to create it.

6.	(Optional) Enter the user's full name in the Full Name edit box.

7.	Choose OK.

The Password dialog box opens.

8.	Enter and re-enter a password for this user.

9.	Choose OK.

The Password dialog box closes. Your password entries are validated, and an authorization file is created in the pcnfspro\etc\userauth database directory for the user. This user can now access daemon-based services on your PC.

10.	Choose Exit to exit from the Local Services Security utility.

Tip: Be sure to tell the user the authorization password.

See Also:

Changing a User's Password


Removing a User's Access to Your PC's Services
Deleting a User's Access to Your PC's Services

1.	Start the Local Services Security utility.

The Local Services Security main dialog box opens.

2.	Select the user name of the user whose access you want to delete.

The user name is highlighted.

3.	Choose Delete.

The user name is removed from the Local Services Security database, and the person with this user name can no longer access your PC's daemon-based services.


Changing a User's Authorization Password

1.	Double-click the Local Services Security icon in the SolarNet Group.

The Local Services Security dialog opens.

2.	Enter in the User Name edit box the user name of the person whose password you want to change.

Alternatively, select the name from the list of user names.

3.	Choose OK.

The Verify Old Password dialog box opens.

4.	Enter the old password and choose OK.

If the old password you entered is correct, the Password dialog box opens.

5.	Enter and re-enter the new password in the Password dialog box.

6.	Choose OK.

An Information box opens informing you that information about the user has been modified. The new password is written in encrypted form in the user's authorization file in the pcnfspro\etc\userauth directory.

7.	Choose OK.

The Information box closes.

8.	Choose Exit to exit from the Local Services Security utility.


Replacing a Lost or Forgotten Authorization Password

If you and a user accessing your PC services both forget the authorization password:

1.	Using File Manager, delete the user's authorization file in the pcnfspro\etc\userauth directory.

2.	Create a new authorization file for the user.

Tip: Write authorization user names and passwords on a piece of paper and store them in a safe place.

See Also:

Providing a User With Access to Your PC's Services


Modifying a User's Access Privileges

1.	Double-click the Local Services Security icon in the SolarNet Group.

The Local Services Security dialog opens.

2.	Select the user name of the user.

The settings for this user appear.

3.	Modify the user's settings to provide more or less access to your PC.

4.	Choose OK.

The Verify Old Password dialog opens.

6.	Enter the user's password and choose OK.

The Password dialog box opens.

7.	Enter and reenter the user's password and choose OK.

The Password dialog closes and an Information box opens informing you that information has been modified for this user. Your changes are recorded in the user's authorization file in the pcnfspro\etc\userauth directory.


Viewing The Contents of a User's Authorization File

1.	Using a text editor such as Notepad, open the authorization file with the same name as the user name.

This file will be located in the pcnfspro\etc\userauth directory.

2.	Note some or all of the following entries in the file:

password= An encrypted password entry

name= Entry identifying the full name of the person represented by user name

home= The home directory the user sees when initially accessing your PC

ftp-restrict= Can include a home directory and read-only status entry


Troubleshooting Local Services Problems

Local Services Security controls who has access to services, such as Telnet (remote login) and FTP (remote file transfer), running on your PC.  When these local services are not running or set up properly on your PC (the server), you will notice some problems on your PC.  Other problems will show up on the client PC (the PC of your coworker who is trying to use your FTPd or TELNETd).

Problems You See on the Server

Problem	Possible Causes	Solution
Cannot create home directory for a coworker.	You entered the name of a home directory that does not exist on your PC.   Local Services software tried to create the directory but could not.  This could be a file permission problem.	Check the file permissions on the directory in which you are creating this home directory.  If the directory is mounted from a remote UNIX machine, make sure the file permissions allow read and execute (r-e) access to everyone.
Cannot get local ftp or telnet services running on your PC.	The service is not listed correctly in the pcnfspro\etc\inetd.con file.	Check the /etc/inetd.con file: Is the service enabled? . (A pound sign # at the beginning of the line disables the service). Is the program name listed correctly? ftp    nfswftpd.exe telnet nfswteld.exe
Cannot update authentication file.	The database of users who may access your PC's daemon-based services. was deleted or corrupted.	Delete the file pcnfspro/etc/auth/username.  Then, use the Local Services Security screen to create a new entry for the user.
Problems Your Coworkers See on the Client

Here are some common problems that a coworker might notice, but that you can fix on your server PC:

Problem	Possible Causes	Solution
You see a Connection Refused message.	Local Services Startup is not running on the server.	On the server, double-click the Local Services icon to start it.
	The requested service (ftp, telnet, lpd) is not enabled on the server.	Use Configuration, Services to enable the services
Incorrect login message.	No login for this user.	On the server, use Local Services Security, Add user to allow the user to log on to the server PC.
	This user is not allowed to use the selected service.	On the server, use Local Services Security, Enable service for this user.
	Incorrect login.	Try again.