Ubuntu Servers :: LAMP Setup With Limited Access To Users

Mar 9, 2010

I'd like to setup an Ubuntu LAMP server, and provide limited access to it for our in-house web developers/designers. I'm not quite sure how to go about the permissions side of things. Which user/group should "own" the /var/www directory? Is it www-data?

How do I create user accounts (for our developers) that have access to the /var/www directory - do I create accounts then add them to the www-data group? Or should I make a special 'webdev' group and give it access somehow?

View 5 Replies


ADVERTISEMENT

Ubuntu Servers :: Have SSH Running / But Create A New Login With Limited Access

Jun 7, 2011

I have SSH running on a computer I use as a server at home and login to it for my own purposes but am needing to share access to this server with someone else, and I'd like to do it in a way so that when they sign in all they see is the contents of one folder and nothing outside of it. So I'd like them to have full access to this folder and do anything they want with it, but not be able to browse outside of it at all via something like WinSCP (they're using Windows). I'm thinking I need to create a new account for them to sign in with but beyond that I'm not sure what I need to do. The only other special thing is that the folder I'd like them to be presented with is actually on an external hard drive. We're going to be doing a lot of online music collaboration and I need to give him lots of free space to drop files and the internal hard drive doesn't have a lot to spare right now.

View 6 Replies View Related

Ubuntu Servers :: Sftp Or Ftps - Configure Another User To Go Over The Web With Limited Folder Access?

Dec 11, 2010

I want to share files over the web with only a few people and limiting them to certain folders. I have been doing a remote access (ssh) to my server to access it from a pc on the local network. I later found out the same program doing ssh (open_ssh) was also doing sftp, great I could do both with one system account. Problem I couldn't find away to configure another user to go over the web with limited folder access without messing up my user to access the pc. I tried ftps by using vsftpd, I couldn't get chroot set up correctly or even log in. So my question is what program and/or protocol should I use to do secure ftp over the web?

OS: Ubuntu 64bit 10.04

View 4 Replies View Related

Ubuntu Servers :: Cannot Access Files / Folders In Www Directory / LAMP

Jan 21, 2010

Just installed lamp, I can access phpmyadmin mysql is set up and everything. When I try to view a directory [URL] I get an access denied error.

EDIT: I changed the permissions of the "folder" folder itself, I can access everything in that directory now but not any other folders in it. Do I really need to go through every folder every time and change the permissions?

View 4 Replies View Related

General :: Only Limited Users Should Login In NIS (not All Nis Users) RHEL 5.4?

Aug 1, 2011

i have a NIS master server and 4 NIS clients. out of 4 nis clients two are acting as login servers ie users will login and do all their stuffs and the remaining two are application servers. But sometimes users login into applications servers and started doing all their developer's job. i want to allow only a limited number of users tointo this application users not all the users who are all part of the nis domain.all the systems are running RHEL 5.4 on hp's proliant x86_64 based servers. Please advice me how should i proceed? enabling ip tables is not possible in my environment.

View 1 Replies View Related

OpenSUSE Network :: Setup Samba Share For Access With Certain Users?

Aug 28, 2010

I have currently have opensuse 11.2 installed. I am trying to setup samba shares which you can only access as certain user. Currently looks like the only way I can access these share is use root username/password!

I want to which GUI I need to use to setup this up properly. And of course what setting to exactly to use.

View 2 Replies View Related

Ubuntu Servers :: Recommended Way To Set Up FTP Users That Access Same Files?

Mar 23, 2010

I have a server setup with all my web development stuff in /var/www and in several sub-folders within that. (each project having it's own folder)It works great with one FTP account. But recently I've been getting help on a projects from a buddy of mine that freelances, and have made him an FTP user account as well. All is fine, except for when he tries to edit a file and gets a permissions error.

Here's the issue, I don't want us to have the same FTP login, but all the files are currently owned by my user name. So, when he logs in to edit a file, he can't because I'm the owner, and the files are set to 744. Will I cause any harm by adding both users to the same group (www-data) and chmod'ing the files to 775 so that we can both access and modify the files?

View 2 Replies View Related

Ubuntu Servers :: FTP Users Can Access Enitre Disk?

Apr 19, 2010

Quick question - I would like to know how to prevent users from accessing directories above the directory used for ftp. I'm running proftpd and I'm able to connect outside of my LAN, however all user accounts can click "Up to higher level directoy" and access everything, all the way up to the root directory. How can I make this unaccessable/not visible to users connecting to my server, allowing access only to the directories and subdirectories I have specified?

View 2 Replies View Related

Ubuntu Servers :: Win 7 Users Won't Be Able To Authenticate Unless Access Using IP Address

Sep 22, 2010

I've got a Samba server (CentOS)(I swear all my non-work boxes are Ubuntu) that has been working fine in our Active Directory environment for a long time, now that Windows 7 has been forced upon us, we've noticed that Win 7 users aren't able to authenticate to this server unless they access it using the IP address, e.g. \192.168.1.22. We've tried the different Windows 7 registry hacks and nothing makes a difference. We were advised to update Samba and we did to 3.3.8. However, this being a virtual machine, upgrading a clone of this machine did work, the configuration was identical, except the hostname

View 9 Replies View Related

Ubuntu Servers :: Allow Users Access Via SSH Terminal Or Sftp Via WinSCP?

Jun 6, 2010

I am currently running Ubuntu Server 9.10 as an FTP server. It has become a necessity to allow users access via SSH terminal or sftp via WinSCP. I need to be able to monitor what users are doing at any given time and be able to pull up each users activity history. Essentially I need to be able to pinpoint who modified a file at what time. Also what is the best method to monitor things like nmap probes?

View 1 Replies View Related

Ubuntu Servers :: Access Restricted To Select Computers Not Users

Apr 21, 2011

I want to configure a remote internet facing server as git server. I would like to restrict access to the server to a few systems (access is restricted to select computers, not users). I first thought of using ssh key, but the key can be copied to another system hence that alone is not sufficient. I am having a dynamic IP, so simple IP based firewall blocking is also not possible. I was thinking about the possibility of using both SSH Key and IP based access. Is it possible to update the firewall rule whenever my ip gets changed?

View 6 Replies View Related

Server :: Apache - Free Access From Lan Users And Password Access To Wan Users ?

Jun 26, 2009

Im trying to config my intranet to be accessible from inside the network (lan) without need of password and ask for a passwd for those who are viewing from Wan ....

Today my intranet can only be accessed from Lan, external access give me an Unauthorized message, I took look around, try #irc and still can get the appropriated help, I hope that someone here could help me on that...

A piece of my config:

Code:

View 4 Replies View Related

Ubuntu Servers :: Stop Client Access To All Windows AD Domain Users Profile?

Feb 27, 2010

I am using Unbunto desktop and installed "likewise open" so that my linux client can access windows active directory(join the domain). On server side i have windows 2003 server. On windows 2003 server in active directory i have assigned each user a disk space. I have sucessfully joined linux (ubunto) box to the active directory domain but my linux box has access ($ it can use) to all other user diskpace ( they can browse other users) and when i joined windows xp client with the same server it works properly( xp client cant access or use other diskpace)

View 1 Replies View Related

Ubuntu Servers :: Give Power Users Ability To Access All Of Their Folders Without Thrashing Security.

Feb 8, 2011

So, I am looking to implement an FTP server with Isolated Client accounts/directories where a client can only access what's in their directory. I also need to provide my internal user's (content managers) the ability to upload, delete, etc from all of the Client accounts. The simple part is creating the secure client accounts. It's a matter of changing DIR_MODE in adduser.conf to 700 or 770, creating a user, having the FTP server chroot them to their home directory, revoke/restrict shell/ssh access and maybe even slap on some ACL to prevent botched permissions.The hard part is figuring out how to give my power users the ability to access all of their folders without thrashing security.

My first thought was to put all of the client user-groups in a parent group and having my internal users inherit group permissions..but you can't have groups inside of groups.My second thought was to put all of the client users in the same group and prey that the FTP chroot is enough to keep them from poking around but then I have the problem of how do my internal users access other user directories if they are chrooted. Do I create a second server without chroot.do I create some weird nested homedir structure..I honestly have no idea how to satisfy both requirements (secure client accounts and privileged user accounts). I need my privileged users to authenticate against Active Directory via Likewise open, LDAP, etc and I don't care how the clients authenticate. Though, I would prefer to have both file and FTP-server level protection just to make sure no one can see the other client's data.

View 1 Replies View Related

Ubuntu Servers :: Setup Fileserver For Remote Access?

May 19, 2010

I am very new to Ubuntu (any Linux) evironment. And it has been a long long time since I have dealt with seting up servers. I have done alot of searching but haven't found exactly what I THINK I am looking for.
I want to create a file server (I have created my Ubuntu server cd) and add it to my home network (all windows pcs). I need to be able to access it when away from home ( I work away from home mostly). I will be accessing this with a Windows 7 laptop.

What do I need installed on the server? Samba for the file server part. What else for the remote access? I also would rather not access the data via FTP. I would like it to come up as a drive in my Windows Explorer. If not, I remember back in college (20 years ago) when I could open a little window (XWindow maybe) on the other server.

An issue I see that might not be an issue. I have a static IP from my ISP. It comes into my home via their modem. I attach to the modem with a router. All my laptops connect to it wireless and this server will be wired. How do I hit the server and not one of the laptops with only having the one IP address? Each of these plus my external harddrive and printer have their own internal IP address' that I have assigned.

View 3 Replies View Related

Ubuntu Servers :: Installed Postfix Setup - Can't Access Email

Nov 20, 2010

I installed Postfix, Amavis-new + Spamassassin + Clamav, Dovecot, and SquirrelMail today, using the Ubuntu guides for each. I have 10.04 LTS Server. My PHP scripts can send email, but when I tried to log into Squirrelmail, I couldn't. Here is what my error log produced (the server name and user name have been changed) :

Code:

myserver dovecot: imap-login: Login: user=<username>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured
myserver dovecot: IMAP(username): opendir(/home/username/Maildir) failed: Permission

[code].....

View 1 Replies View Related

Ubuntu :: How To Create User With Limited Access

Oct 24, 2010

I want to create a limited user, such that the user should only have the access to usb drives, cd drives and internet. And also I want to restrict the user from deleting the files from the system. How to do it..?

View 5 Replies View Related

Ubuntu Servers :: Apache Setup For Hostname Access On Local Network

Apr 13, 2011

I have installed Ubuntu on four machines at work and have been blown away. On my machine I have Apache setup for web development and other machines can "see" it using my IP address. I would like to have it so they can access by the name of my computer though. I have no local DNS server so I guess I need to hard code the relationship in each machine? Ideally I'd actually like to be able to use subdomains (which I use locally to avoid annoying .htaccess path problems). i.e. from another machine on the network to go to [URL].

View 3 Replies View Related

Ubuntu Servers :: Setup A Localhost In System - Phpmyadmin Access Not Granted

Jul 3, 2011

i setup a localhost in my system. but am not getting access to the phpmyadmin by entering the user name and password i entered at the time of set up. the /etc/phpmyadmin/config-db.php file is shown below.

<?php
##
## database access settings in php format
## automatically generated from /etc/dbconfig-common/phpmyadmin.conf
## by /usr/sbin/dbconfig-generate-include

[code]....

when i access http://localhost/phpmyadmin/ , the login screen appears but entering the username and password as in the file gives the error #1405 cannot log into mysql server.

View 3 Replies View Related

Ubuntu Servers :: Post Citadel Setup Users "postmaster, Root, Smmsp"?

Jan 19, 2010

I am running 8.04 Server on a VPS. I have installed Citadel. I also have some web pages that use sendmail for contacts.I see my mail.info logging a lot of the following entries.

Code:
mail sendmail[14051]: o0GNe7bS014051: from=smmsp, size=404, class=0, nrcpts=1, msgid=<201001162340.o0GNe7bS014051@mail.server.com>, relay=smmsp@localhost

[code]...

View 4 Replies View Related

Ubuntu Security :: Making New User With Limited Access?

Sep 19, 2010

is there any way to make user with command text, just with accessbility to change network IP Address ?

View 4 Replies View Related

General :: How To Setup The LAMP

Nov 8, 2010

i did install it correctly because when i typed localhost in the adress bar it opens this

Code:

It works! This is the default web page for this server. The web server software is running but no content has been added, yet. so i create a phpinfo.php file and inside it is

Code:

<?php phpinfo();?>

but instead of displaying php information, it tries to download the phpinfo.php file. why?

View 44 Replies View Related

Ubuntu :: Re Setup Mail/LAMP Server?

Oct 14, 2010

Ubuntu 10.10point me the URL of Howto re setup a mail/LAMP server Google brought me the howto from howtoforge. I need the howto from Ubuntu documentation/Greek.

View 2 Replies View Related

Ubuntu Servers :: Setup A Server To Where It Does Not Give A Password Prompt To Access A Shared Folder

Nov 28, 2010

How do I set up a server to where it does not give a password prompt to access a shared folder?

View 1 Replies View Related

Ubuntu :: LAMP Setup - Get A 403 Permission Denied Error

May 2, 2011

I'm breaking my head on this.I want to create a development environment. This means that I want to be able to create/change files myself, but php should be able to do the same. I installed a lamp-stack using tasksel. Afterwards I installed phpmyadmin. So far so good. Going to http://localhost shows "it works".

Then I created a folder /home/hwc/www and created a new apache site called hwc, disabled default and enabled hwc that points to /home/hwc/www and has the directive AllowOveride All set. But when I go to http://localhost know I get a 403 Permission denied error. I've tried several trings like changing ownership of /home/hwc/www to www-data:www-data, to hwc:www-data, to hwc:hwc, but all to no avail. Even adding www-data to group hwc and hwc to group ww-data did not help. According to other posts at least on of these solutions should have worked, but it did not. I could probably fix it by letting apache run as hwc, but that doesn't seem right.

View 3 Replies View Related

General :: Squid And Iptables - Limited Access To Websites

Sep 23, 2010

I have configured my squid that have a limited access to websites but still some website were accessable vis https so I removed transparent from squid. Now what changes do I have to make in iptbles

View 1 Replies View Related

Software :: Making Copy Of Website With Limited Access

Jul 14, 2010

Trying to make a copy of my website to a local ubuntu server - I have very limited access ie: no shell access. What is the best way to make a copy of my site. have ftp cli, lftp, wget ... just not sure what to use and how.

View 3 Replies View Related

Ubuntu Security :: PHP Is Not Running Under Apache 2 And Limited By The Www-data Filesystem Access?

Jun 30, 2010

I'm about to have a web server at home for the first time. I've always missed having full control and not having to contact my hosting company when I need to do some specific changes - and some changes they won't do for you at all.I've chosen the non-GUI Ubuntu Server with LAMP, and nothing more is installed really except for a couple of command line tools from the repository. The LAMP software has been locked down as good as I can by following some guides on the net and using common sense. Like Apache 2 don't have access to the file system except for the www folder, and setting the headers to Prod. MySQL has skip-networking and I've commented out the listen string to localhost. PHP has a truckload of functions that I've disabled in the php.ini, also by following some guides on the net, among some other security enhancing php.ini editing.

The only thing the server will serve is a well known PHP forum and some html docs, and that's all. Nothing advanced or complicated stuff, and I'm definitely not programming PHP myself or letting anyone do it for me.But I do want to sleep well at night knowing that my server is always on and sitting on the edge of my home network! And can I do that? I've heard that you don't need to be worried about getting your Linux server box hacked, but you should be worried about anyone getting root access to it. But is it really that simple? Ubuntu is shipped without root account and you must have the sudo password, right? What's the odds for anyone to get full access to my system?An issue: I've heard that Apache never must run as root. When I do a ps -ef, I see that there are several www-data processes running apache, but there's one root process running apache too. Is this normal and is it safe?An issue: I've heard that PHP can fail pretty easily. But isn't PHP running under apache 2 and limited by the www-data filesystem access?An issue: MySQL is running as a MySQL user, and I guess that's an unprivileged user right?

View 9 Replies View Related

Ubuntu Installation :: Setup A LAMP Server On An Old Desktop Machine?

Jan 27, 2010

I am a total noob with regards Linux so will undoubtedly frequent this board asking some lame questions in the coming weeks. At present I am trying to setup a LAMP Server on an old desktop machine I have lying about, however there is not going to be a keyboard, monitor or mouse attached beyond the installation process. My question simply is am I best installing the server or desktop version of Ubuntu for this requirement?

I have been playing with Desktop 9.04 and found it tough to use headlessly, however understand that Server 9.04 fully supports headless access. Being a newbie I do prefer to use the GUI to make changes and generally play around, so a UI such as GNOME would be essential. Having read about I understand the best way to access remotely is to install SSHServer and VNCServer and then login over SSH and VNC into the box.My remote machine I will use to connect to Ubuntu is a Windoze 7/XP machine.

View 6 Replies View Related

OpenSUSE Network :: Firefox - No Or Extremely Limited Internet Access

Nov 15, 2009

I've been running Suse 11.2 KDE on a 64-bit Dell Studio 1535 since last week's release, and have had no trouble using Firefox. At some point today, however, it stopped accessing webpages -- or, when managing to grab a page, it would do so without full html rendering. 95% of the time I get an error splash, while the other 5% I get some sort of truncated page that looks nothing like it should. Konquer and Opera work fine, as does KMail.

I tried deleting the profile.int file (no luck), then uninstalled/re-installed (no luck), then uninstalled and deleted every Mozilla/Firefox file I could find in order for a fresh install -- but this has not worked after several attempts. I still cannot get Internet access. How to completely wipe-out Firefox in order to allow for a totally new installation?

View 9 Replies View Related







Copyrights 2005-15 www.BigResource.com, All rights reserved