| View previous topic :: View next topic |
| Author |
Message |
CurtE
Guru
Joined: 17 Apr 2004
Posts: 361
Location: Minneapolis, MN
|
 Posted: Sun Sep 16, 2012 7:41 am Post subject: Allowing access to server. |
 |
|
I have a web developer that I need to give access to the server but I only want to allow the directory to the actual web pages.
Let's say I'm giving him access to /home/webguy where /webguy will hold the temporary web site.
How do I do this properly? |
|
| Back to top |
|
 |
audiodef
Advocate
Joined: 06 Jul 2005
Posts: 4952
|
| Posted: Sun Sep 16, 2012 2:50 pm Post subject: |
|
|
Easy - set the guy up with /home/webguy/.ssh/authorized_keys, which contains his public ssh key. Have him send you his public key and cat webguy_publickey > /home/webguy/.ssh/authorized_keys. He can then ssh/scp to his home dir.
I have exactly the same situation. I mirror Pappy's Kernel Seeds, and this is how Pappy updates my mirror.
_________________
Gentoo Studio: http://gentoostudio.org
Pappy's Kernel Seeds: http://kernel-seeds.gentoostudio.org
Linux 'Tude Tees: http://skreened.com/geektudetees
A cloud is evaporated water in the sky, thanks. |
|
| Back to top |
|
|
cach0rr0
Moderator
Joined: 13 Nov 2008
Posts: 4117
Location: Houston, Republic of Texas
|
| Posted: Mon Sep 17, 2012 8:46 am Post subject: |
|
|
if it's just plain ole html/css/javascript/whatever, then Userdir should be fine
if you want to be a bit more fancy, and run something like e.g. php, you'd probably want to look at suPHP
some people take yet another route and run an ftp daemon, but set their ftp daemon to run as the apache user. I don't care for ftp at all personally, but it does work.
should be good reading fodder at least.
_________________
Lost configuring your system?
dump lspci -n here | see Pappy's guide | Link Stash |
|
| Back to top |
|
|
audiodef
Advocate
Joined: 06 Jul 2005
Posts: 4952
|
|
| Back to top |
|
|
cach0rr0
Moderator
Joined: 13 Nov 2008
Posts: 4117
Location: Houston, Republic of Texas
|
| Posted: Fri Sep 21, 2012 1:46 pm Post subject: |
|
|
| audiodef wrote: | | Isn't FTP a security risk compared to scp? |
considerably so, yes.
there is the advent of SFTP, but it's of little value IMHO
...nonetheless, for whatever reason people still do FTP. I think, largely, because where the "average user" would be lost if you asked them to use SCP, they aren't with an FTP client - even though it looks like the same bloody thing! (e.g. WinSCP)
i understand it from a user side. i dont understand it from an admin side. but, c'est la vie
_________________
Lost configuring your system?
dump lspci -n here | see Pappy's guide | Link Stash |
|
| Back to top |
|
|
Yess1934
n00b
Joined: 25 Sep 2012
Posts: 1
|
| Posted: Tue Sep 25, 2012 8:47 am Post subject: |
|
|
| audiodef wrote: | Easy - set the guy up with /home/webguy/.ssh/authorized_keys, which contains his public ssh key. Have him send you his public key and cat webguy_publickey > /home/webguy/.ssh/authorized_keys. He can then ssh/scp to his home dir.
I have exactly the same situation. I mirror Pappy's Kernel Seeds, and this is how Pappy updates my mirror. |
There is 1 small problem with keys, you won't be able to use non-default clients (http://webssh.uni.me, smartphones, ...). |
|
| Back to top |
|
|
|
Networking & Security
