687
edits
Changes
From SME Server
Jump to navigationJump to search→FTP Access to Ibays
== FTP Access to Ibays ==
== FTP Access to Ibays ==
Author: mmccarn
Author: mmccarn
=== Objective ===
=== Objective ===
Allow chroot'ed access to a single ibay for a specific non-admin user.
Allow chroot'ed access to a single ibay for a specific non-admin user.
=== Procedure ===
=== Procedure ===
==== 1. Configure the free dungog repository ====
==== 1. Configure the free dungog repository ====
The commands below will configure yum on your SME server to recognize the free dungog repository. As shown here, the repository will not be accessed unless you specifically instruct yum to do so using the "--enablerepo=dungog" directive.
The commands below will configure yum on your SME server to recognize the free dungog repository. As shown here, the repository will not be accessed unless you specifically instruct yum to do so using the "--enablerepo=dungog" directive.
==== 2. Install the smeserver-remoteuseraccess contrib ====
==== 2. Install the smeserver-remoteuseraccess contrib ====
yum --enablerepo=dungog install smeserver-remoteuseraccess
yum --enablerepo=dungog install smeserver-remoteuseraccess
signal-event post-upgrade; signal-event reboot
signal-event post-upgrade; signal-event reboot
After creation
After creation
* Be sure to select 'modify' after creating the user in order to set a password.
* 'modify' your new user and set a password
==== 5. Create the target ibay, granting read and write access to the group created in step 3 ====
==== 5. Create the target ibay, granting read and write access to the group created in step 3 ====
=== Security Implications ===
=== Security Implications ===
* ftp passes usernames and passwords over the internet in plain text; therefore, enabling ftp access from the internet using passwords is a security risk.
* ftp passes usernames and passwords over the internet in plain text; therefore, enabling ftp access from the internet using passwords is a security risk.
* I am unaware of any security impact from installing smeserver-remoteuseraccess
* I am unaware of any security impact simply from installing smeserver-remoteuseraccess, but almost everything you can do with it does have a potential impact on your server's security.
----
----
[[Category:Howto]]
[[Category:Howto]]
