Koozali.org: home of the SME Server

Obsolete Releases => SME 7.x Contribs => Topic started by: millerte on May 04, 2007, 10:08:27 PM

Title: admin access other users home directories
Post by: millerte on May 04, 2007, 10:08:27 PM

Hey,

Does any one know if there is anyway to allow the "admin user" permissions to access and modify user home directories?

Title: Re: admin access other users home directories
Post by: mrjhb3 on May 05, 2007, 02:18:49 AM

Quote from: "millerte"

Hey,

Does any one know if there is anyway to allow the "admin user" permissions to access and modify user home directories?

Out of the box, no.  This is admin's /etc/passwd profile
admin:x:101:101:e-smith administrator:/home/e-smith:/sbin/e-smith/console

He can only run this program when he logs in.  What about using root, or if you have some specifics, please spell them out.

John

Title: Re: admin access other users home directories
Post by: millerte on May 05, 2007, 05:01:09 AM

I actually mean via FTP, and SAMBA

Title: Re: admin access other users home directories
Post by: haymann on May 07, 2007, 04:28:01 PM

Quote from: "millerte"

Hey,

Does any one know if there is anyway to allow the "admin user" permissions to access and modify user home directories?

I usually use WinSCP and log in as root. It gives me a graphical view of the directory structure and I have access to all I need and more... Works great remotely as well if you VPN in (I don't like to open SSH up to the internet).
Ryan

Title: admin access other users home directories
Post by: cjensen on May 07, 2007, 09:24:09 PM

Use keys.  Keeps things secure. Just keep the keys secure ;-)

http://wiki.contribs.org/SSH_Public-Private_Keys

Craig

Title: admin_shares
Post by: shell on May 08, 2007, 02:18:49 AM

I use a custom-template for samba - 55adminhomes

This allows you to allow specified users to have access to all users home directories.

Steps:
Create a custom-template fragment:

Code: [Select]

vi /etc/e-smith/templates-custom/etc/smb.conf/55adminhomes

With the following content:

Code: [Select]


 [admin_shares]
comment = home_directories
path = /home/e-smith/files/users/
valid users = admin root
admin users = admin root
write list = admin root
public = no
browsable = yes
writable = yes



you can put whatever username in the valid users / admin users.

Then expand the template:

Code: [Select]

expand-template /etc/samba/smb.conf

And then restart the samba service

Code: [Select]

service smb restart

this gives you a new samba share that has all the users directories, which is accessible the same way as all samba shares.

be aware that if you write files in here as admin or root the user permissions might not be correct.  i use this is a school environment where it is important for some teachers to be able to check on contents of childrens home directories, but be aware that this gives the authorised users access to EVERYONE's home directory, which contain mail etc.