Koozali.org: home of the SME Server

User Shell Access

Offline Catton

  • *
  • 36
  • +0/-0
User Shell Access
« on: November 09, 2011, 03:17:05 AM »
I need to give a user shell access to the SME Server.
But I would like to limit the access to just their home directory/home
I followed SME Server:Documentation:FAQ and this works fine
db accounts setprop username Shell /bin/bash
chsh -s /bin/bash username
I tried it on myself first. The shell starts at the top of my home directory which includes the maildir etc.
I would like the login shell to start and maybe limit to just the  /home/e-smith/files/users/username/home/
I wonder if this is possible or should I just create a new user for this particular shell access need.

Offline CharlieBrady

  • *
  • 6,918
  • +3/-0
Re: User Shell Access
« Reply #1 on: November 09, 2011, 08:45:36 AM »
There's no easy way to solve what you are asking, and perhaps no way at all. What problem are you trying to solve? Users have access to Maildir via IMAP in any case. If you don't trust a user, don't give them shell access.

Offline Stefano

  • *
  • 10,894
  • +3/-0
Re: User Shell Access
« Reply #2 on: November 09, 2011, 09:31:24 AM »
Catton, take a look to smeserver-remoteuseraccess contrib, maybe it's what you are looking for

Offline Catton

  • *
  • 36
  • +0/-0
Re: User Shell Access
« Reply #3 on: November 09, 2011, 08:19:36 PM »
Hi Charlie
  I thought this might not be possible because of imap/email clients, but wanted to give the user access to run a script. I trust the user. Stefano suggestion smeserver-remoteuseraccess looks like ftp access not shell/bash access. Is that correct ?
Perhaps a better way would be like dungogs dungog-cron but one for users.
Thanks all

Offline Stefano

  • *
  • 10,894
  • +3/-0
Re: User Shell Access
« Reply #4 on: November 09, 2011, 09:27:54 PM »
Catton: you are right, take a look here:
http://bugs.contribs.org/show_bug.cgi?id=3178

Offline Catton

  • *
  • 36
  • +0/-0
Re: User Shell Access
« Reply #5 on: November 10, 2011, 12:59:15 AM »
Thanks all
I was able to have my script run via CGI on an IBAY. I should have thought of it sooner.