Koozali.org: home of the SME Server

Contribs.org Forums => General Discussion => Topic started by: kryptos on February 04, 2008, 04:44:05 AM

Title: alternative to ftp
Post by: kryptos on February 04, 2008, 04:44:05 AM: hi all,

Just wanna ask for suggestion on how to access files externally? I have read about ftp but they says its not secure or advisable to use it.This is the scenario we want one of our foreign client to have a common exchange of files. So that we can update each other files regularly.

Regards,
Rocel
Title: Re: alternative to ftp
Post by: raem on February 04, 2008, 06:57:55 AM: kryptos

scp
or
WinSCP
Title: Re: alternative to ftp
Post by: kryptos on February 04, 2008, 10:00:11 AM: Hi Ray,

I have tried winscp but how do i connect as non-root? It seems that it won't accept as non-admin

Thanks,
Rocel
Title: Re: alternative to ftp
Post by: Daniel B. on February 04, 2008, 10:45:40 AM: Users need to have rssh access, look for smeserver-remoteuseraccess contrib, with it, you can define for each user if they'll have rssh access or not. (you can even enter a public key for key-based authentication)
Title: Re: alternative to ftp
Post by: raem on February 04, 2008, 11:15:26 AM: kryptos

configure the dungog repo with status disabled

db yum_repositories set dungog repository \
BaseURL http://dungog.net/sme/smeserver/$releasever/$basearch/dungog \
EnableGroups yes \
GPGCheck no \
Name 'SME Server 7 - dungog' \
Visible yes \
status disabled

the do
yum install --enablerepo=dungog smeserver-remoteuseraccess

or get it from
http://sme.dungog.net/packages/smeserver/7.0/i386/dungog/RPMS/smeserver-remoteuseraccess-1.2-8.noarch.rpm

Setup keys for different users
http://wiki.contribs.org/SSH_Public-Private_Keys
Title: Re: alternative to ftp
Post by: Boris on February 04, 2008, 06:39:42 PM: I don't necessarily trust other users to have rssh or any shell access to my servers. Their ability to browse through the other folders even without changing much causes me shivering.
Locking them (chroot) in the one folder is the only way I can accept and sleep at night.
Webshare, Oliver or FileExecutive are secure, easy to use my first and only choice.
Title: Re: alternative to ftp
Post by: raem on February 04, 2008, 07:42:50 PM: Boris & all

Quote
Locking them (chroot) in the one folder is the only way I can accept and sleep at night.

Which can be configured per user if you install smeserver-remoteuseraccess contrib
Title: Re: alternative to ftp
Post by: kryptos on February 05, 2008, 09:53:15 AM: hi all,

I have tried remoteuser-access from dungog but as of now i have encounter some problems with it. This server has so many contribs installed maybe some errors before that i haven't corrected.I will try to install remoteuser-access on another server. But anyway what i have noticed when i install that contrib one thing i noticed is that it displays unnecessary directories that I don't want to be seen even chrooting that user to specific IBAY.When try to browse some directories i can even see my list of usernames when the try dig on more on the accessed server. Is this the way it should be? or maybe cause by some errors on the server? If not how can I control the user which folder they will see and access from outside of lan?

Regards,
Rocel
Title: Re: alternative to ftp
Post by: william_syd on February 05, 2008, 01:56:16 PM: Quote from: RayMitchell on February 04, 2008, 11:15:26 AM
configure the dungog repo with status disabled

Ray,

A lot of previous off-site contribs are now in the smecontribs repo.

[root@tiger proc]# yum --disablerepo=* --enablerepo=smecontribs list available

[root@tiger proc]# yum --enablerepo=smecontribs install smeserver-remoteuseraccess.noarch
Title: Re: alternative to ftp
Post by: william_syd on February 05, 2008, 02:11:04 PM: Quote from: kryptos on February 05, 2008, 09:53:15 AM
This server has so many contribs installed .....

For a list of added rpms try...

[root@tiger proc]# /sbin/e-smith/audittools/newrpms
Title: Re: alternative to ftp
Post by: kryptos on February 07, 2008, 02:28:48 AM: Hi All,

I just use webshare it seems what i wanted to do.One thing is lacking with this contrib is that it doesn't have any logout option. In Oliver it has, does anyone here tried installing it on SME? But with webshare so far so good. Thank you all...

Regards,
Rocel
Title: Re: alternative to ftp
Post by: stephen noble on February 07, 2008, 11:06:07 PM: the dungog repo is now obsolete, all the rpms have been move to smecontribs

chroot ssh is possible, but someone else will have to work out how
maybe make a bug/NFR to discuss how to do it

you have to setup a chroot jail for each area
or I've read you can chroot selected users to their own ~/home with one jail
Title: Re: alternative to ftp
Post by: shriddx on February 08, 2008, 10:59:25 AM: Quote from: RayMitchell on February 04, 2008, 11:15:26 AM
or get it from
http://sme.dungog.net/packages/smeserver/7.0/i386/dungog/RPMS/smeserver-remoteuseraccess-1.2-8.noarch.rpm

Newer version at: http://distro.ibiblio.org/pub/linux/distributions/smeserver/releases/7/smecontribs/i386/repodata/repoview/smeserver-remoteuseraccess-0-1.2-16.el4.sme.html
Title: Re: alternative to ftp
Post by: raem on February 08, 2008, 11:51:10 AM: william, stephen, shriddx

It's tricky keeping up with all the changes that keep happening.
Thanks for the update.
Title: Re: alternative to ftp
Post by: shriddx on February 08, 2008, 11:56:56 AM: Found it as I was looking for this for myself earlier then read this thread a few minutes later....

Don't know if it fixes kyrptos' problems though...