Koozali.org: home of the SME Server
Obsolete Releases => SME 7.x Contribs => Topic started by: Rien on September 28, 2007, 10:48:28 PM
-
Has anyone installed Oliver (formerly Webshare) (http://sourceforge.net/projects/oliver/) on SME server 7.2?
-
Has anyone installed Oliver (formerly Webshare) (http://sourceforge.net/projects/oliver/) on SME server 7.2?
I just downloaded and installed it - just dropped it into an i-bay, copied config-dist.php to config.php (didn't change anything in it) and it works a treat. A very impressive little package indeed.
It seems to be a great way to manage files outside of the an ibay sandbox, while still making use of privileges to protect system files. The 'set permissions' function does not seem to work properly, but I expect that will be easy to fix.
Nice find. Thanks.
-
Hi Judgej,
I think it isn't save enough. A simple user can go up in the tree (even to /home/e-smith/files where they can see the ibays, users, samba, server-resources and ~Primary directories) and possibly destroy to much. I want to restrict users to their own home-directory or a directory within their home directory (e.g. /home/e-smith/files/users/[username]/home/My documents). but I don't know how I can do that.
-
Hi Judgej,
I think it isn't save enough. A simple user can go up in the tree (even to /home/e-smith/files where they can see the ibays, users, samba, server-resources and ~Primary directories) and possibly destroy to much. I want to restrict users to their own home-directory or a directory within their home directory (e.g. /home/e-smith/files/users/[username]/home/My documents). but I don't know how I can do that.
What they can see, and what they can change, are two different things. All the files are accessed using the login credentials of the username and password, so there should be very little they can change outside of their home directory and some iBays, unless they are an administrator.
But I agree, being able to limit directories is a good idea. How about installing the dungog smeserver-remotuseraccess contibution (http://www.dungog.net/sme/usermanager.php)? Using that, I believe you can limit a user's shell and the directories they can access. In other words, limit it at the FTP level, and not in the PHP application. Even if you do place limits in the PHP application, the potential for bugs to give them a workaround is high, compared to the security that FTP can provide at the network services level.
-
>(http://www.dungog.net/sme/usermanager.php)?
http://www.dungog.net/sme/admin.php#remote
-
Here is another alternative to try, FileExecutive. Drop it in an Ibay. Has authentication and chroots you to the installation folder. Simple PHP program, but works well.
http://sourceforge.net/projects/fileexecutive/ (http://sourceforge.net/projects/fileexecutive/)
-
Thanks,
I installed smeserver-remoteuseraccess (dungog) and it works very well.
Now I'v two applications running:
- 'Oliver' - access to the users own documents
- 'Webshare' (smeserver-webshare-1.0.0-8dmay.noarch.rpm) - to share documents with others
I will also look at 'Fileexecutive'
-
I'v installed FileExecutive.
It looks nice, but:
- I can't get outside the Ibay. It don't accept '/home/e-smith/files/users/[username]/home' as 'Root Directory'. The highest level it accept is '../' (which is still inside the ibay). So it has the same limitation as Webshare (dmay)
- FileExecutive can't grant multiple users access to the same directory. Webshare (dmay) can do that.
To be correctly... may be it can do the things above, but I couldn't figure out how to do that.
The nice thing about 'Oliver (formerly Webshare)' is, that it follows the settings of sme server. You don't have to add new users (users can log in with their own username/password) and you don't have to set permissions (it follows the permissions set in ibays, users etc.). With smeserver-remoteuseraccess (dungog) you can set user's chroot path to restrict ftp access to certain directories and in config.php you can list directories and files that you want to be invisible.
-
HI guys,
I looked at Oliver and I downloaded it and the instructions lost me. Do I copy the contents of the config-dist.php into config.php and where is the config.php? I am a newbie in php and I am a little lost there. I have been researching but not much instruction in the Oliver INSTALL file. It assumes you know PHP and/or just SME. I do not know either and I read the Manual for SME and I love it so far. I just need some direction. I literally dumped the contents of the oliver zip to an ibay but I see nothing.
Can you give me a little bit more instructions as if to a beginner which I am?
Thanks for your time in advance!
Marian
-
Hi Marian,
- create an Ibay
- unzip oliver-1.2.2.tgz with: tar -zxvf oliver-1.2.2.tgz
- copy the files into the html-directory of the ibay
- go to the the html-directory and do: cp config-dist.php config.php
- you can edit config.php to your needs (title, language etc)
Don't forget to: chmod 777 ftp_cache ftp_sessions
In your browser go to http://your.domainname.com/ibay-name
That must be it
-
Hey Rein,
Thanks for the fast response but I still have this issue. I only see "This information bay has not yet been customized." I renamed index.html to index.OLD hoping that index.php will work but no luck. I followed your instructions exactly and now when I go to my ibay http://192.168.1.24/itest I get the directory listing with the folders and files... Apparently because I renamed the index.html but even after I put it back it still show the above "This information bay has not yet been customized." What am I missing?
Thanks again,
Marian
-
... I get the directory listing with the folders and files...
Did you take a peek inside any of those folders? I guess not, because if you had looked inside the 'oliver' folder with your browser, you would have brought up the applicatioin.
Basically, you need to navigate, with your browser, to the folder containing index.php
-
Strange,
You must delete index.html.
Is your index.php (from Oliver) in the root of your html-directory?
I looked in my own html directory. This is my listing:
/ftp_cache (777)
/ftp_sessions (777)
/graphics (755)
/lang (755)
/oliver (755)
ChangeLog (644)
INSTALL (644)
README (644)
TODO (644)
chmod.php (755)
config-dist.php (644)
config.php (644)
dl.php (755)
footer-inc.php (644)
functions-inc.php (644)
header-inc.php (644)
index.php (755)
loginform-inc.php (644)
mime-mapping.php (755)
updateconf.pl (755)
vfs-ftp.php (755)
Do you have the same files and the same permissions?
-
I am sorry I have not responded earlier but I had some health issues. I am now back to trying to resolve this.
judgej yes, I am in the right directory.
Rein,
this is how my directory oliver, inside my ibay looks like
total 116
drwxrwxrwx 7 root shared 4096 Oct 19 17:20 .
drwxrws--- 3 admin shared 4096 Oct 19 17:01 ..
-rw-r--r-- 1 root shared 3399 Jan 14 2006 ChangeLog
-rwxr-xr-x 1 root shared 2101 Nov 24 2004 chmod.php
-rw-r--r-- 1 root shared 2355 Jan 14 2006 config-dist.php
-rw-r--r-- 1 root root 2355 Oct 19 17:18 config.php
-rwxr-xr-x 1 root shared 2252 Jun 25 2005 dl.php
-rw-r--r-- 1 root shared 226 Jan 10 2005 footer-inc.php
drwxrwxrwx 2 root shared 4096 Oct 19 17:01 ftp_cache
drwxrwxrwx 2 root shared 4096 Oct 19 17:01 ftp_sessions
-rw-r--r-- 1 root shared 3681 Jun 23 2005 functions-inc.php
drwxr-xr-x 2 root shared 4096 Oct 19 17:01 graphics
-rw-r--r-- 1 root shared 518 Mar 4 2005 header-inc.php
-rwxr-xr-x 1 root shared 17072 Jan 13 2006 index.php
-rw-r--r-- 1 root shared 2122 May 9 2005 INSTALL
drwxr-xr-x 2 root shared 4096 Oct 19 17:01 lang
-rw-r--r-- 1 root shared 921 Jul 22 2004 loginform-inc.php
-rwxr-xr-x 1 root shared 6755 Apr 19 2005 mime_mapping.php
drwxr-xr-x 2 root shared 4096 Oct 19 17:01 oliver
-rwxrw---- 1 root shared 774 Jul 22 2004 oliver.css
-rw-r--r-- 1 root shared 1609 May 9 2005 README
-rw-r--r-- 1 root shared 309 Jul 23 2004 TODO
-rwxr-xr-x 1 root shared 1699 Jan 14 2006 updateconf.pl
-rwxr-xr-x 1 root shared 1685 Jan 14 2006 vfs-ftp.php
this is in
pwd
/home/e-smith/files/ibays/itest/html/oliver
I have followed the INSTALL instructions
cp config-dist.php config.php (inside oliver)
chmod 777 ftp_cache ftp_sessions
and I still get just a directory tree with the php extension files not showing (as it should be).
What am I doing wrong? I did all the updates for the server after the install (before Oliver) and that's the only extra thing I have done. Could any of the standard SME updates mess something?
Thanks Rien for your continuous support!
Marian
-
Hi,
The only difference I see is the file oliver.css. On my directory it is 0644 (rw-r--r--).
Are the settings of your ibay correct?
Group: Admin
User access via file sharing or user ftp: Write=group, Read=group
Public access via web or anonymous ftp: Local network (no password reqquired) or Entire internet (no password required)
Execution of dynamic content (CGI, PHP, SSI): Enabled
-
Rein,
THANKS A BUNCH, DUDE! I am almost ashamed to admit what my problem was. I knew it was something really stupid. I did not enable the PHP script on the ibay. As soon as I saw your post it clicked.
Everything is working great. Thank you again!
Marian
-
Wow,
That match quite nice what i was searching for.
-Users are the one of the sme server (that really cool)
-graphic style is nice and customizable via a css and by replacing icons in graphics file. That's really cool.
-ability to CHRoot user via dundog remote user access
What i want to do now is to chroot my extranet users to an ibay that they can't get out from (ok this should not be a problem). Then what i want is the ability to create groups that can see/access/write certain folder. Users could be in one or more group. Any idea how it's possible?