Is it possible to give user only FTP access / browsing rights for certain directory within /srv/www/htdocs and prevent same user to browse all other directories, even user's /home directory on that server?
View 8 RepliesI'm developing an application in which one user must run java software that I'm compiling as another user. I wanted to give user A permission to see the bin direcory of my workspace, which is in the home directory of user B. I was wondering how can this be done? I gave the bin direcotry full read/execute premissions, but since it's in my home directory user A can't navigate to it.
I know there are a few ways I could get around the problem but they arn't very elegant. I was wondering if there is a simple method for giving a user access to a specific directory without giving access to all the parent directories. I tried symbolic link but user A still can't access it, and a hard link to a directory isn't allowed in Linux. I don't feel like making a hard link to every single file in the bin directory, and I'm not sure that would work anyways, since every recompile overwrites them.
I have my own 16GB sandisk cruzer flash drive, I've already mounted him and can read on my own user, but I can write on it only using root. how can I give my user Chmod +x on the folder /media/XXX ?
View 7 Replies View RelatedI have created a new user using sudo adduser "user1" from the root .but this user does not have full admin rights...How to give full access to this user1?
View 3 Replies View RelatedProblems with launching data files of the nas and saving to them is a kde problem. The dot desktop files have to contain access rights for smb/http etc and even when given these it still will not work. I have mainly concentrated on getting the VLC video player to work as it is capable of playing from just about any source, comes with codecs etc etc. Amazing package really.
Pure K apps such as kwrite at least work fine. I tried setting up samba but to no avail.
As dropping a file into VLC's focus didn't do anything I created a vlc desktop icon and dragged the nas file onto that. It plays and a kde error message pops up from plasma shell - can't find file!
I enable kde automount. The content of that when it starts is disturbing. It shows my system disks a detachable and not attached! No need to worry though. I selected mount on log in and attachment where the server was shown. VLC still wouldn't work.
Next I enable NFS file transfers on the NAS. This has allowed me to use open with directly onto an avi file on the nas. I can also click launch them. Remaining problem is opening files on the nas from within VLC. Up pops the kde message "you can only select local files". The file manager here seems to be an instance of dolphin. This suggest that there is going to be a problem saving files to the nas as well. Looks to be the case. VLC can convert formats and all sorts of things. If I select a file locally and try and convert it and save to the nas up pops the "you can only select local files" as soon as I select ok having set the path and file name.
Strange thing is that working transfers seem to be using CIF even though it took an NFS enable to get it partly working via KDE's automount. Dolphin only allows a CIF set up which has a distinct advantage as a direct ip address can be entered. The automount has introduced a very very long delay before kde is up and running following a log in. Samba is even worse in this respect and both seem to lack a method of direct ip input which means they have to find the server.
One other aspect. As far as NFS is concerned from a very recent post elsewhere nautilus works. Pass on CIF. And of course it's all instantaneous and ok on windows even on vista. Enabling the TV protocol on the nas has confused Vista as it only wants to connect like that and needs drivers. Might also be down to having NFS enabled though. MS might not like that.
I have filed all of this on bugzilla if anyone would like to vote - bug number 695648. Seems to me that the CIFs route should be the default for ease with many users on home networks. I'm also sure that the problem is basically KDE preventing aps from accessing the nas.
Q: How do I mount a CIFS share so that my user stevej has all rights to it?
Summary: I can mount the share as root.
mount.cifs //10.x.x.x/Data /home/stevej/Synology/Data/ --verbose -o user=stevej
Using Dolphin in Super-User mode, I can copy files and directories from the share to itself with no errors. Using Dolphin in Normal-user mode. I get the failure "Could not change permissions for...". The file is copied, but its owner,timestamp and permissions are wrong. If a subdirectory is involved, the copy aborts.
Using Windows XP I can copy files and directories from the share to itself with no errors.
Testing: If I mount with uid and gid, then my normal user can not access the share.
mount.cifs //10.x.x.x/Data /home/stevej/Synology/Data/ --verbose -o user=stevej uid=stevej gid=users
[code]...
Synology DS211 - There are 2 users on it. One of which is stevej and the other is julie. Rights RWX are applied to the users and the group called users. All files have stevej as the owner and users as the group with RWX Opensuse 11.4 - There are 2 pc's. One is run as stevej. The other pc runs as julie Windows 2000 - Runs as stevej and maps to the share as stevej.
Works as expected Windows XP - Runs as julie and maps the the share as julie. Works as expected Ultimately, I want the shares to automount at boot, or login and give the user full access. I have been to Swerdna's page and done as much as I can, but still no luck.
I currently have a LAMP server running with multiple virtual hosts configured. I have one virtual host with a sub directory that contains pdf news letters.do not want the directory browsable and tried putting an index.php file that re-directshe user to the root directory but when I go to the [web address]/[directory name] in any browser I see the contents of the folder listed.
Currently the news letter list is drawn from a database table and displayed as links on a page in the root directory. The links point to the file name in the sub directory. How do I block users from going to that sub directory and seeinge contents of that directory listed? Would I add another <directory> statement in the vhosts.conf file? If so how would I structure that directive?
I'm trying to setup an Apache server on my computer which will allow browsing of files in a specific directory and subdirectories, without needing any sort of authentication.
I've got the Apache2 server up and running through yast, and everything works fine as long as I try to point it to the /www/htdocs folder. However, I want to point it at another folder, which is on another partition. This partition is formatted as NTFS, if that matters at all (here's some background on some permissions issues I had with the NTFS partitions recently).
When I change the "Directory" setting in the Yast http server configuration utility to the directory on the NTFS partition I wish to use, attempting to access the server results in the following error:
Code: Access Forbidden: You don't have permission to access the requested directory. There is either no index document or the directory is read-protected. If you think this is a server error, please contact the webmaster.
Error 403
192.168.1.100
Mon Jun 13 23:43:29 2011
Apache/2.2.17 (Linux/SUSE)
Prelude: OpenSUSE 11.2 (2.6.31.8-0.1-desktop), installed Novell client 2.0 SP2 (novell-client-2.0-sp2-sle11-i586.iso).
I found that if any usual user is logged into a NDS-tree, then _local_ root has full access to user's network shares, including the user's home directory located on remote Netware-server. Is it by design or
have I missed something? Nevertheless in windows local admin has no access to network resources mounted of any other user. If you runas shell (as admin) then admin in principle can't "see" network shares which were mounted (connected) by other users - they are accessible ("visible") per session.
Take a physical user FRED. FRED is a linux user ( known by linux on his laptop ) FRED is a Samba user ( Known by samba on the samba pdc server ) When he logs locally (with username/password) on its standalone laptop (with no network), he is known as FRED:user. He access his data in /home/FRED/. When he logs through samba (with username/password) on the domain MY_DOM, he is known as MY_DOMFRED:MY_DOMdomain user. He access his data in /home/MY_DOM/FRED/. ) Is it possible that the human FRED has only one repository and have full access to its repository regardless of how it was connected. If yes, how to do it
2) If not, Is it possible that the human FRED has full access to /home/FRED/.............. and /home/MY_DOM/FRED/.
I'm trying to do something like thisi created a group called www and made this group the owner of the directory/var/www/htmlso i can read and write to it.of course I've add my self to this group, but it seems i can't read and write.the syntax i used was something like chown :www /var/www/html.didn't workonly when i used chown samurai:www /var/www/html i could finally could create new file.the reason i don't want to specify the user name is because I'm thinking of a scenario when i need to give permission to a large group of ppl and don't want to do it user by user.
View 5 Replies View RelatedApache by defaults points to /var/www/eachdomain. I need to be able to give users ftp access to /var/www/specific domains.
It seems that if I change the owner of /var/www/specificdomains/ to the user in question, then www:data no longer owns the directory and Apache starts to have issues..
What's the best way to set this such that I can allow users to FTP into specific directories, and still have www:data own them? I'm currently using vsftp, but that can easily change.
How give all access (same as root) to other user because i need to run some application s/w from other user login.
View 2 Replies View RelatedI have a log server that collects logs from all the cisco devices on our network.he company policy states that any logs should only be accessible by root. So I have the following permissions set on the directory, as well as everything inside the directory where the cisco logs are kept.
Code:
drwx------ 65 root root 4096 Apr 29 7:38 rsyslog
The cisco folks are requesting access to these logs, which is allowed by company policy.
[code]...
How can I give 1 user access to mount 1 particular filesystem? This is for Debian 6 64bit.
View 4 Replies View RelatedI want few users to have access for sending mails in sendmail and others not.
View 3 Replies View RelatedI want to set samba to act as domain controller PDC.Is it possible to create user profil in samba with rights to change network settings but not install software, create users.Something like network admin that is like normal user but he is able change network settings.
View 1 Replies View RelatedI've got a USB Epson Perfection1200 (usb-id: 04b8:0104) connected to my Fedora 13 x86_64 system. The scanner works fine for me, the console user. If someone logs in to the system via "ssh -X ..." and starts "xsane", xsane reports that no scanner is available.
Googling turns up countless recommendations, mostly identical, which pretty much say:
1. find usb device (lsusb)
2. find bus and dev IDs
3. chmod 666 /dev/bus/usb/BUSID/DEVID
this is a best a miserable hack. I would like to know how to adapt the permissions that hald uses when a usb device is connected. Does someone understand this and can explain it?
I have created vsftp server with grop of users and they can access only to /home/ftp-folder file which i made for them..nw if i apply read rite privilages to this folder then these previlages get by users in the group obvious...bt wot i want z if i creat a folder in /home directory i.e /home/test and i want the particular user in the group can have 777 access and other users in the grop coud nt access that folder..
how to do it...
How can you give total access to the system to a user other than root?
* Make the user a member of the root group.
* Change the UID of the user to 0.
* Add the user to the /etc/sudoers file.
I think none of these are correct answers.
First, I am new to linux I just finished installing Fedora 14 on a different PC which I will be using solely to explore Linux. However the first annoying problem I encountered was that I can't do a lot of things without Linux asking me for the root password. This has become really annoying, I want to stop fedora from asking for root authentication every time I want to explore something here and there.
Among the work-arounds that I've tried and didn't quite work for me are:
1. login as root on the kdm - I can login as root but because I am also encouraging my sister to explore fedora 14 she needs the same access as root too. We have our own preferences so we both need individual accounts that have same access level as root.
2. change userid to 0 (same as root) and modify groups to be exactly the same as root's groups - very bad solution, what it did was make my user a sort of "alias" for the root. It basically uses the same /root/ folder, same settings and all that stuff. Again, my sister and I need separate accounts for a more personal feel.
3. use terminal and go sudo, sudoers, etc - very bad idea, I want to explore using the kde gui. And again I want to eliminate the inconvenience of having to type things over and over again. I'd rather type the password over and over again than having to use terminal and sudo everything.
4. beesu, gksu - anyone knows how to make linux automatically wrap everything with beesu/gksu?
since we are just exploring, we are willing to trade the systems, integrity and security for the convenience of having freedom to explore everything in it. I don't care, it could blow up the pc for all I care (it's old and for experiment anyway).
This exploring linux of ours is a make or break for us to using linux. If there is no solution to this problem, we'll probably scrap the whole "migrate to linux" idea.
I thinking of making Linux recognize our user id the same way it recognizes uid 0 but I have no idea how to do this.
How to give nfs share access to only particular user at client machine.
View 1 Replies View RelatedI'm a new user for oracle,tried to install oracle 10g on redhat linux 5 but gettinh the same error message. response/ runInstaller [oracle2@localhost database_10201]$ sh runInstaller_runInstaller: line 54: /tmp/database_10201/install/.oui: Permission denied_
how to give full set of permisions to an user in linux to access a folder?
What is the command I need to create a new user and give the user only permission to a single folder via ftp?
View 3 Replies View RelatedWhen I insert some homemade DVDs of a friend, I can't view its contents. DVD works fine on windows XP, but not on opensuse. Dolphin gives an error: access denied to /media/071114_1638.I can't do a chown command because dvd is read-only...And when I do an ls -l I get:
Code:
ls -la /media/071114_1638/
ls: can't access /media/071114_1638/.: Permission denied
ls: can't access /media/071114_1638/..: Permission denied
[code]...
I am posting the o/p of /etc/fstab and /etc/mtab...Currently i am the only user but if i add one more , how can i give that user the right to mount any partition
View 7 Replies View RelatedI've got a problem with my usb pen drives. If I put some data inside, from the 2nd time I insert the pendrive in the computer I can't write on the usb pen, I can't change my files, and also they are hidden. I've formatted them with the format/partitioner tool in yast, but I can't solve my problem. This happens with all my usb pendrives and also with the sd of my camera. Is there something that I can do to solve this inconvenient?
View 3 Replies View RelatedUnfortunately I haven't been able to figure out yet how to share specific directories only, so I set up my Samba server to share users' home directories (which is not a security issue here since the only possible client is my other machine). My user's home directory contains a symlinked directory on another hard drive partition, which I had to explicitly share to be able to access it from the other machine. This setup has been working for months now, but for a reason that escapes me at the moment it stopped working today, presumably after samba got updated from 3.4.2-1.1.3.1 to 3.4.3-3.2.1.
The error message on the client (Windows XP/SP3) for this one above mentioned directory, and for this directory alone, is "Access denied"; I can access all other directories fine.
I have configured my Laptop running OS 11.1 as an ftp server with vsftpd behind a router on my home network. I have managed to get it working so that I have authenticated users who can connect and write using the external ip address. The problem is that the authenticated user, rather than being allowed access only to the folder in question (/srv/ftp), can browse my entire directory structure.
When I tried this from a different computer (a Mac) from within my home network (but connecting through the external IP address) with fileZilla, using a user name I established as the authenticated ftp user (not my own uname), I could even download and write to other locations in the directory. I had another person try from outside the network, and they could browse the entire directory, but couldn't download from it. how can I confine an authenticated FTP user to the designated ftp directory?
I am attempting to setup the following:
1.User login/authentication via a single NIS server.
2. User home directory should also be on the Same NIS server.
3. If possible to setup a single shared home directory for all users.
OpenSuse version 11.2 There are twelve workstations from which users will login using the NIS authentication. I have succeeded in setting up NI server. However login fails as the home directory is not accessible.