Topic: Oliver (formerly Webshare)

[Rien]

Has anyone installed Oliver (formerly Webshare) on SME server 7.2?

[judgej]

Has anyone installed Oliver (formerly Webshare) on SME server 7.2?

I just downloaded and installed it - just dropped it into an i-bay, copied config-dist.php to config.php (didn't change anything in it) and it works a treat. A very impressive little package indeed.

It seems to be a great way to manage files outside of the an ibay sandbox, while still making use of privileges to protect system files. The 'set permissions' function does not seem to work properly, but I expect that will be easy to fix.

Nice find. Thanks.

[Rien]

Hi Judgej,

I think it isn't save enough. A simple user can go up in the tree (even to /home/e-smith/files where they can see the ibays, users, samba, server-resources and ~Primary directories) and possibly destroy to much. I want to restrict users to their own home-directory or a directory within their home directory (e.g. /home/e-smith/files/users/[username]/home/My documents). but I don't know how I can do that.

[judgej]

Hi Judgej,

I think it isn't save enough. A simple user can go up in the tree (even to /home/e-smith/files where they can see the ibays, users, samba, server-resources and ~Primary directories) and possibly destroy to much. I want to restrict users to their own home-directory or a directory within their home directory (e.g. /home/e-smith/files/users/[username]/home/My documents). but I don't know how I can do that.

What they can see, and what they can change, are two different things. All the files are accessed using the login credentials of the username and password, so there should be very little they can change outside of their home directory and some iBays, unless they are an administrator.

But I agree, being able to limit directories is a good idea. How about installing the dungog smeserver-remotuseraccess contibution (http://www.dungog.net/sme/usermanager.php)? Using that, I believe you can limit a user's shell and the directories they can access. In other words, limit it at the FTP level, and not in the PHP application. Even if you do place limits in the PHP application, the potential for bugs to give them a workaround is high, compared to the security that FTP can provide at the network services level.

[stephen noble]

>(http://www.dungog.net/sme/usermanager.php)?

http://www.dungog.net/sme/admin.php#remote

[Mjohnson]

Here is another alternative to try, FileExecutive.  Drop it in an Ibay.  Has authentication and chroots you to the installation folder.  Simple PHP program, but works well.

http://sourceforge.net/projects/fileexecutive/

[Rien]

Thanks,

I installed smeserver-remoteuseraccess (dungog) and it works very well.

Now I'v two applications running:

• 'Oliver' - access to the users own documents
• 'Webshare' (smeserver-webshare-1.0.0-8dmay.noarch.rpm) - to share documents with others

I will also look at 'Fileexecutive'

[Rien]

I'v installed FileExecutive.


It looks nice, but:

• I can't get outside the Ibay. It don't accept '/home/e-smith/files/users/[username]/home' as 'Root Directory'. The highest level it accept is '../' (which is still inside the ibay). So it has the same limitation as Webshare (dmay)
• FileExecutive can't grant multiple users access to the same directory. Webshare (dmay) can do that.

To be correctly... may be it can do the things above, but I couldn't figure out how to do that.

The nice thing about 'Oliver (formerly Webshare)' is, that it follows the settings of sme server. You don't have to add new users (users can log in with their own username/password) and you don't have to set permissions (it follows the permissions set in ibays, users etc.). With smeserver-remoteuseraccess (dungog) you can set user's chroot path to restrict ftp access to certain directories and in config.php you can list directories and files that you want to be invisible.

[vegaslaptop]

HI guys,

I looked at Oliver and I downloaded it and the instructions lost me. Do I copy the contents of the config-dist.php into config.php and where is the config.php? I am a newbie in php and I am a little lost there. I have been researching but not much instruction in the Oliver INSTALL file. It assumes you know PHP and/or just SME. I do not know either and I read the Manual for SME and I love it so far. I just need some direction. I literally dumped the contents of the oliver zip to an ibay but I see nothing.

Can you give me a little bit more instructions as if to a beginner which I am?

Thanks for your time in advance!

Marian

[Rien]

Hi Marian,

• create an Ibay
• unzip oliver-1.2.2.tgz with: tar -zxvf oliver-1.2.2.tgz
• copy the files into the html-directory of the ibay
• go to the the html-directory and do: cp config-dist.php config.php
• you can edit config.php to your needs (title, language etc)

Don't forget to: chmod 777 ftp_cache ftp_sessions

In your browser go to http://your.domainname.com/ibay-name

That must be it

[vegaslaptop]

Hey Rein,

Thanks for the fast response but I still have this issue. I only see "This information bay has not yet been customized." I renamed index.html to index.OLD hoping that index.php will work but no luck. I followed your instructions exactly and now when I go to my ibay http://192.168.1.24/itest I get the directory listing with the folders and files... Apparently because I renamed the index.html but even after I put it back it still show the above "This information bay has not yet been customized." What am I missing?

Thanks again,
Marian

[judgej]

... I get the directory listing with the folders and files...

Did you take a peek inside any of those folders? I guess not, because if you had looked inside the 'oliver' folder with your browser, you would have brought up the applicatioin.

Basically, you need to navigate, with your browser, to the folder containing index.php

[Rien]

Strange,

You must delete index.html.

Is your index.php (from Oliver) in the root of your html-directory?

I looked in my own html directory. This is my listing:

/ftp_cache (777)
/ftp_sessions (777)
/graphics (755)
/lang (755)
/oliver (755)
ChangeLog (644)
INSTALL (644)
README (644)
TODO (644)
chmod.php (755)
config-dist.php (644)
config.php (644)
dl.php (755)
footer-inc.php (644)
functions-inc.php (644)
header-inc.php (644)
index.php (755)
loginform-inc.php (644)
mime-mapping.php (755)
updateconf.pl (755)
vfs-ftp.php (755)

Do you have the same files and the same permissions?

[vegaslaptop]

I am sorry I have not responded earlier but I had some health issues. I am now back to trying to resolve this.

judgej yes, I am in the right directory.

Rein,
this is how my directory oliver, inside my ibay looks like

total 116
drwxrwxrwx  7 root  shared  4096 Oct 19 17:20 .
drwxrws---  3 admin shared  4096 Oct 19 17:01 ..
-rw-r--r--  1 root  shared  3399 Jan 14  2006 ChangeLog
-rwxr-xr-x  1 root  shared  2101 Nov 24  2004 chmod.php
-rw-r--r--  1 root  shared  2355 Jan 14  2006 config-dist.php
-rw-r--r--  1 root  root    2355 Oct 19 17:18 config.php
-rwxr-xr-x  1 root  shared  2252 Jun 25  2005 dl.php
-rw-r--r--  1 root  shared   226 Jan 10  2005 footer-inc.php
drwxrwxrwx  2 root  shared  4096 Oct 19 17:01 ftp_cache
drwxrwxrwx  2 root  shared  4096 Oct 19 17:01 ftp_sessions
-rw-r--r--  1 root  shared  3681 Jun 23  2005 functions-inc.php
drwxr-xr-x  2 root  shared  4096 Oct 19 17:01 graphics
-rw-r--r--  1 root  shared   518 Mar  4  2005 header-inc.php
-rwxr-xr-x  1 root  shared 17072 Jan 13  2006 index.php
-rw-r--r--  1 root  shared  2122 May  9  2005 INSTALL
drwxr-xr-x  2 root  shared  4096 Oct 19 17:01 lang
-rw-r--r--  1 root  shared   921 Jul 22  2004 loginform-inc.php
-rwxr-xr-x  1 root  shared  6755 Apr 19  2005 mime_mapping.php
drwxr-xr-x  2 root  shared  4096 Oct 19 17:01 oliver
-rwxrw----  1 root  shared   774 Jul 22  2004 oliver.css
-rw-r--r--  1 root  shared  1609 May  9  2005 README
-rw-r--r--  1 root  shared   309 Jul 23  2004 TODO
-rwxr-xr-x  1 root  shared  1699 Jan 14  2006 updateconf.pl
-rwxr-xr-x  1 root  shared  1685 Jan 14  2006 vfs-ftp.php

this is in

pwd
/home/e-smith/files/ibays/itest/html/oliver

I have followed the INSTALL instructions

cp config-dist.php config.php (inside oliver)
chmod 777 ftp_cache ftp_sessions

and I still get just a directory tree with the php extension files not showing (as it should be).

What am I doing wrong? I did all the updates for the server after the install (before Oliver) and that's the only extra thing I have done. Could any of the standard SME updates mess something?

Thanks Rien for your continuous support!

Marian

[Rien]

Hi,

The only difference I see is the file oliver.css. On my directory it is 0644 (rw-r--r--).

Are the settings of your ibay correct?

Group: Admin
User access via file sharing or user ftp: Write=group, Read=group
Public access via web or anonymous ftp: Local network (no password reqquired) or Entire internet (no password required)
Execution of dynamic content (CGI, PHP, SSI): Enabled