Remoteuseraccess

From SME Server
Revision as of 04:59, 17 December 2012 by RayMitchell (talk | contribs) (text changed)
Jump to navigationJump to search

Remote User Access

Installing to SME 7.x

yum --enablerepo=smecontribs install smeserver-remoteuseraccess

Then open server manager:

server-manager > Remote Access > Remote User Access

Configure users as required

Installing to SME 8

Configure the sme7contribs repository (repo) as per http://wiki.contribs.org/SME8.0_Contribs_QA#Setup

Then install using the following command to get any dependencies & the contrib package:

yum --enablerepo=smecontribs --enablerepo=sme7contribs install smeserver-remoteuseraccess

Then open server manager: server-manager > Remote Access > Remote User Access

Configure users as required

Overview

Individuals can be changed with the modify link next to their name.


Individual Configuration

Userpanel

A user can upload his own ssh keys using the UserManager


Help

Enable Services

  • To use SSH, SSH access must be enabled with the /server-manager > Remote Access panel.

Users can then use a ssh client such as putty or a sftp client sush as winscp or filezilla

  • To use FTP, FTP access must be enabled with the /server-manager > Remote Access panel.

When users FTP into the sme server they are allowed to view ibays, primary and some system information. By chrooting the user you restrict the user to below that directory. This isn't a security problem, files are protected with normal permissions, chrooting saves users time traversing to their regular uploading area.

Global Settings

You can globally set FTP chroot with the following

You can chroot all users to their home directory with the command.

config setprop ftp ChrootDir home

or an ibay (where the ibay name is mission)

config setprop ftp ChrootDir mission

or anywhere on the filesystem ibay

config setprop ftp ChrootDir /opt

to return to default settings of /home/e-smith/files/

config delprop ftp ChrootDir

then enable

expand-template /etc/proftpd.conf