Topic: SFTP via VPN access to all the SME?

[Proxy]

Hi there,..

If you grant a normal user SFTP access to you system (v7.4) via VPN the user is able to see your hole SME directory.
With FTP access this is not the case.

This can't be normal or does it?

Best regards.
Proxy

[fpausp]

Have you done the latest update 251109 ? There are problems with vpn, keyboard ...

Best

[Proxy]

Yep, all updates are up-to-date

[Daniel B.]

Yes, it's "normal". The version of OpenSSH included in SME doesn't support chroot. It's possible to configure some kinds of jails, but it's not very easy, nor practical.

Regards, Daniel

[Proxy]

Hi Daniel,

Can you tell me how i can give a normal user (from the internet) access to an ibay (HTML Dir) where he can up, download and modify things.
Whitout having access to all the SME.

Thanks in advance,
Proxy

[Daniel B.]

In your first post, you're talking about SFTP inside a VPN. If you use a VPN, you can use what ever you want (FTP, samba, etc...).
If you don't want the VPN to be mandatory, I suggest to use webdav, as explained here:

http://wiki.contribs.org/DAV_Enabled_Ibays

[Proxy]

Thanks for your answer, i've take a look at it but its to complicated for me to do.
I'm just a simple SME user (and mirror)

[janet]

Proxy

yum install --enablerepo=smecontribs smeserver-remoteuseraccess

then configure user access & specify user "jail" location in the newly added server manager panel

[Proxy]

Thanks but did you check your link, its not working via Putty.

[janet]

Proxy

Corrected mispelling.