665
edits
Changes
From SME Server
Jump to navigationJump to search
mLine 103:
Line 103: − {{Note box|Data encryption has only been tested on SME8, it might work on SME7 but it's not supported. YMMV}} − Since smeserver-shared-folders-0.1-50, you can now encrypt all the data stored in a shared folder. For this to work, you first have to install fuse-encfs from the Dag [[Dag|rpmforge]] repository (don't use the fuse-encfs from the EPEL repository as it's broken) − + − + + + − − {{Note box|on SME8 kernel, the fuse module fuse-kmdl is already included, so it does not need to be installed, but on SME7, you need to install the fuse-kmdl module for your current kernel. fuse-kmdl can be found in [[ATrpms|atrpms repository]]}}
→Encryption
=== Encryption ===
=== Encryption ===
To install fuse-encfs on both sme7 and sme8
Since smeserver-shared-folders-0.1-50, you can now encrypt all the data stored in a shared folder. For this to work, you first have to install fuse-encfs from the [[Epel|EPEL]] repository
yum --enablerepo=dag install fuse-encfs
To install fuse-encfs on sme8
yum --enablerepo=epel install fuse-encfs
After installing fuse-encfs, make sure the fuse module is loaded
After installing fuse-encfs, make sure the fuse module is loaded
lsmod | grep fuse
lsmod | grep fuse
Now, when you create a new shared folder, you have a new option to encrypt the data. You'll have to type a password, and to select '''enabled''' for the encryption. An encrypted shared folders can be '''protected''' (data is only available in encrypted form) or '''enabled''' (data appear in clear text, encryption/decryption is done on the fly). Changing the state of an encrypted shared folder can be done through the 'Shared Folder Encryption' panel in the server-manager. You can grant access to this panel to all users using the [[UserManager]] contrib. Users will only be able to toggle mode of shared folders they have access to (and of course, they need to know the correct password)
Now, when you create a new shared folder, you have a new option to encrypt the data. You'll have to type a password, and to select '''enabled''' for the encryption. An encrypted shared folders can be '''protected''' (data is only available in encrypted form) or '''enabled''' (data appear in clear text, encryption/decryption is done on the fly). Changing the state of an encrypted shared folder can be done through the 'Shared Folder Encryption' panel in the server-manager. You can grant access to this panel to all users using the [[UserManager]] contrib. Users will only be able to toggle mode of shared folders they have access to (and of course, they need to know the correct password)
