Topic: How To give control to Ibay's

[cvlcc]

I have an client that wants to be able to load-up and down-load information on his ibay?
The server is sme7.4, have User Remote Access, Web Share both installed on the server!
Now What is the best way to give him access to his Ibay, I have tried through the browser( http://fetz.cidhosting.com/server-manager ) it ask for the username and password where would i get that from? (users)? or (Web Shares)? Authorization Required and I put the username and then his password and the server enter username and password for https://fetz.cidhosting.com and dose not want to except so what's the best way for him to get in to his ibay? Also an answer for using WinSCP. Please?

[janet]

cvlcc

Use VPN and control ibay access via group memberships.

Also an answer for using WinSCP.

You don't really ask what you want to know.
Read the ibay chapter in the manual. The info re sftp access will apply generally to WinSCP

[cvlcc]

Mary I setup a usergroup under fetzm and went to the browser and put
https://fetz.cidhosting.com/server-manager  and poped an Authorization Required window and put the username and did not get in?

ftp://fetzm:M_anXXXXX@fetz.cidhosting.com and did not get in?

MARY I seem to be Getting most of your time Sorry about that!

I should follow KISS rule. if you know what I mean? STEP BY SETP?
what is the best way for me to give him access?

[janet]

cvlcc

I think you are confused.
If you really are referring to server manager, then only the admin user can access server manager. Note that external access is not allowed by default. You grant access by specifying the remote locations host IP number in the server manager remote management panel.

It's far better to install the user manager contrib if you wish to give 2nd level system administrators access to server manager functions. You set up access rights on a per user basis, and they login with their own sme user name and password to
https://youdomain/user-manager
User manager is subject also to access restrictions by default, so you will also need to allow access via host IP. IIRC user manager access can be specified differently than server manager access, check the message at the end of the contrib installation process.
Please visit the dungog wiki website for info re many contribs for sme including user manager.
http://www.dungog.net/wiki/Main_Page
All the free contribs are available in the smecontribs repo.

Re FTP access, I'd suggest you use webshare instead
http://wiki.contribs.org/Webshare

[janet]

cvlcc

Please LISTEN CAREFULLY.

I have an client that wants to be able to load-up and down-load information on his ibay?

ibays DO NOT support upload via http access
ibays DO support download via http (public access) or https (login protected via login name=ibayname and password=ibaypassword). The ibaypassword is configured in the ibay panel when you choose what type of web access you wish to set for that ibay. Upload via http IS NOT an option.

The only upload (write) options to an ibay are via FTP or local samba Windows networking (including VPN) access.

Please read ALL of the ibay chapter very carefully re FTP access. You need to use an FTP client eg SmartFTP or alternatively WinSCP as you CANNOT use a normal browser as a browser does not support the cd (Change directory) command.
You will need to login to the user home folder with your sme username and password (not login to the ibay), like:
ftp://smeusername@ftp.yourdomain.com
then you will have to use the FTP clients command line utility or command menu and issue the cd command to change to the ibay in question ie
cd /home/e-smith/files/ibays/ibayname/html
This is the ONLY way it can be done in sme by default.
Note that the FTP user can traverse the root filesystem, so this is where you use the remoteuseraccess contrib, to effectively jail the user (limit access) to a particular ibay.
This currently only supports FTP access, so your user is accessing the server insecurely when using plain text passwords via FTP that could easily be hacked.
So it's better to use sftp but the jailing does not work with current package version. There was reference to this recently in the forums where a newer version package could be installed which supposedly does support sftp jailing. I think it was the openssh package.

There were some long posts about all this a few years ago, which explained it in detail. Do an advanced search on sftp (click the magnifying glass) and go back 2 or 3 or 4 years or so, the information is still valid.

Re webshare.
The webshare contrib does not store data in ibays, but creates seperate webshare folders under /opt. Someone suggested creating links to ibays but I never tried that.

[cvlcc]

Mary; I got access but not were I want to go  Using winscp ibay-name@ipaddress userpassword but it sends me to the /home/e-smith/files/users and it is not secure because he can go any where he want to go on the server? Is there a more secure of giving access to my client and lock them into there ibay? Or you can show me how to fix it?
Thank You For All Your Help

[janet]

cvlcc

yum install --enablerepo=smecontribs smeserver-remoteuseraccess

Then configure the user "jail" in the new server manager panel.
You can specify the particular ibay you wish to allow the user to have access to.

Also see this thread re sftp access issues
http://forums.contribs.org/index.php/topic,45394.msg221083.html#msg221083

and this bug re issues with implementation of jailing with sftp
http://bugs.contribs.org/show_bug.cgi?id=3178

[cvlcc]

Mary I have enablerepo=smecontribs smeserver-remoteuseraccess But this has been a little dicy for me? This is the account:
Account    fetz
User Name    Manfred Fetz
Shell Access /bin/bash   
Sudo Access Yes   
RSSH + VPN Access YES
Select Chroot Path fetzm
Chroot Path /home/e-smith/files/ibays/fetzm
SSH Keys    (I don't Know how to set up a KEY)
Is this Right?

[dgs]

SSH Keys    (I don't Know how to set up a KEY)

http://wiki.contribs.org/SSH_Public-Private_Keys