Koozali.org: home of the SME Server

Obsolete Releases => SME Server 9.x => Topic started by: Mar on April 18, 2017, 03:18:27 PM

Title: User manager
Post by: Mar on April 18, 2017, 03:18:27 PM

Hello Everybody
I would to ask if I can provide http://172.16.xxx.xxx/user-manager from wan because I would like to grant access to user-manger for my staff from outside the office.
Can I do?
Thanx

Title: Re: User manager
Post by: Fumetto on April 18, 2017, 10:45:18 PM

The exposure of services is always BAD. Better get them access via VPN ... imho

Title: Re: User manager
Post by: Jean-Philippe Pialasse on April 18, 2017, 11:52:33 PM

There is two approaches here:

1- your staff are always at the same place with a fixed IP : you can set this IP in remote access in the server manager to allow access to this particular IP or group of IP. (Do not put 0.0.0.0/0.0.0.0 here as you will have some contribution that might rely on this setting and start to consider any  IP in the world as local.)

2- your staff is either at a place where the IP is dynamiclly assigned or they move from place to place, then the beast approach as suggested Fumetto is to set up a VPN. One easy way would be to use openvpn bridge see https://wiki.contribs.org/OpenVPN_Bridge on how to setup this contrib.

Jean-Philippe

Title: Re: User manager
Post by: janet on April 19, 2017, 12:12:06 AM

M_aboush

Quote

I would (like to) provide http://172.16.xxx.xxx/user-manager from wan

Alternatively you can setup a ssh tunnel on port 443 (using Putty & ideally using public/private keys for high security), then access the URL
https://localhost/user-manager

The ssh access could also be by user name rather than root & you limit what users can do at command line that way (with appropriate settings on sme server ie user permission file /etc/sudoers).

Title: Re: User manager
Post by: Mar on April 19, 2017, 01:21:06 PM

Thanx a lot done with fixed IP