Koozali.org: home of the SME Server

alternative to ftp

Offline kryptos

  • *****
  • 245
  • +0/-0
alternative to ftp
« on: February 04, 2008, 04:44:05 AM »
hi all,

Just wanna ask for suggestion on how to access files externally? I have read about ftp but they says its not secure or advisable to use it.This is the scenario we want one of our foreign client to have a common exchange of files. So that we can update each other files regularly.

Regards,
Rocel

Offline raem

  • *
  • 3,972
  • +4/-0
Re: alternative to ftp
« Reply #1 on: February 04, 2008, 06:57:55 AM »
kryptos

scp
or
WinSCP
...

Offline kryptos

  • *****
  • 245
  • +0/-0
Re: alternative to ftp
« Reply #2 on: February 04, 2008, 10:00:11 AM »
Hi Ray,

I have tried winscp but how do i connect as non-root? It seems that it won't accept as non-admin

Thanks,
Rocel

Offline Daniel B.

  • *
  • 1,700
  • +0/-0
    • Firewall Services, la sécurité des réseaux
Re: alternative to ftp
« Reply #3 on: February 04, 2008, 10:45:40 AM »
Users need to have rssh access, look for smeserver-remoteuseraccess contrib, with it, you can define for each user if they'll have rssh access or not. (you can even enter a public key for key-based authentication)
C'est la fin du monde !!! :lol:

Offline raem

  • *
  • 3,972
  • +4/-0
Re: alternative to ftp
« Reply #4 on: February 04, 2008, 11:15:26 AM »
kryptos

configure the dungog repo with status disabled

db yum_repositories set dungog repository \
 BaseURL http://dungog.net/sme/smeserver/$releasever/$basearch/dungog \
 EnableGroups yes \
 GPGCheck no \
 Name 'SME Server 7 - dungog' \
 Visible yes \
 status disabled

the do
yum install --enablerepo=dungog smeserver-remoteuseraccess


or get it from
http://sme.dungog.net/packages/smeserver/7.0/i386/dungog/RPMS/smeserver-remoteuseraccess-1.2-8.noarch.rpm

Setup keys for different users
http://wiki.contribs.org/SSH_Public-Private_Keys
...

Offline Boris

  • *
  • 783
  • +0/-0
Re: alternative to ftp
« Reply #5 on: February 04, 2008, 06:39:42 PM »
I don't necessarily trust other users to have rssh or any shell access to my servers. Their ability to browse through the other folders even without changing much causes me shivering.
Locking them (chroot) in the one folder is the only way I can accept and sleep at night.
Webshare, Oliver or FileExecutive  are secure, easy to use my first and only choice.

...

Offline raem

  • *
  • 3,972
  • +4/-0
Re: alternative to ftp
« Reply #6 on: February 04, 2008, 07:42:50 PM »
Boris & all

Quote
Locking them (chroot) in the one folder is the only way I can accept and sleep at night.

Which can be configured per user if you install smeserver-remoteuseraccess contrib
...

Offline kryptos

  • *****
  • 245
  • +0/-0
Re: alternative to ftp
« Reply #7 on: February 05, 2008, 09:53:15 AM »
hi all,

I have tried remoteuser-access from dungog but as of now i have encounter some problems with it. This server has so many contribs installed maybe some errors before that i haven't corrected.I will try to install remoteuser-access on another server. But anyway what i have noticed when i install that contrib one thing i noticed is that it displays unnecessary directories that I don't want to be seen even chrooting that user to specific IBAY.When try to browse some directories i can even see my list of usernames when the try dig on more on the accessed server. Is this the way it should be? or maybe cause by some errors on the server?  If not how can I control the user which folder they will see and access from outside of lan?

Regards,
Rocel

Offline william_syd

  • *****
  • 1,608
  • +0/-0
  • Nothing to see here.
    • http://www.magicwilly.info
Re: alternative to ftp
« Reply #8 on: February 05, 2008, 01:56:16 PM »
configure the dungog repo with status disabled

Ray,

A lot of previous off-site contribs are now in the smecontribs repo.

[root@tiger proc]# yum --disablerepo=* --enablerepo=smecontribs list available

[root@tiger proc]# yum  --enablerepo=smecontribs install smeserver-remoteuseraccess.noarch



« Last Edit: February 05, 2008, 02:07:48 PM by william_syd »
Regards,
William

IF I give advise.. It's only if it was me....

Offline william_syd

  • *****
  • 1,608
  • +0/-0
  • Nothing to see here.
    • http://www.magicwilly.info
Re: alternative to ftp
« Reply #9 on: February 05, 2008, 02:11:04 PM »
This server has so many contribs installed .....

For a list of added rpms try...

[root@tiger proc]# /sbin/e-smith/audittools/newrpms
Regards,
William

IF I give advise.. It's only if it was me....

Offline kryptos

  • *****
  • 245
  • +0/-0
Re: alternative to ftp
« Reply #10 on: February 07, 2008, 02:28:48 AM »
Hi All,

I just use webshare it seems what i wanted to do.One thing is lacking with this contrib is that it doesn't have any logout option. In Oliver it has, does anyone here tried installing it on SME? But with webshare so far so good. Thank you all...


Regards,
Rocel

Offline stephen noble

  • *
  • 607
  • +1/-0
    • Dungog
Re: alternative to ftp
« Reply #11 on: February 07, 2008, 11:06:07 PM »
the dungog repo is now obsolete, all the rpms have been move to smecontribs

chroot ssh is possible, but someone else will have to work out how
maybe make a bug/NFR to discuss how to do it

you have to setup a chroot jail for each area
or I've read you can chroot selected users to their own ~/home with one jail



Offline raem

  • *
  • 3,972
  • +4/-0
Re: alternative to ftp
« Reply #13 on: February 08, 2008, 11:51:10 AM »
william, stephen, shriddx

It's tricky keeping up with all the changes that keep happening.
Thanks for the update.
...

Offline shriddx

  • ***
  • 44
  • +0/-0
Re: alternative to ftp
« Reply #14 on: February 08, 2008, 11:56:56 AM »
Found it as I was looking for this for myself earlier then read this thread a few minutes later....

Don't know if it fixes kyrptos' problems though...