Linux User & File Management - Revision history

Admin2047 at 14:09, 4 September 2013

2013-09-04T14:09:13Z

Admin2047 at 14:08, 4 September 2013

2013-09-04T14:08:55Z

Admin2047 at 14:08, 4 September 2013

2013-09-04T14:08:06Z

Admin2047 at 14:07, 4 September 2013

2013-09-04T14:07:31Z

Admin2047 at 19:22, 27 August 2013

2013-08-27T19:22:57Z

Admin2047 at 19:22, 27 August 2013

2013-08-27T19:22:37Z

Admin2047 at 16:06, 3 February 2013

2013-02-03T16:06:42Z

Admin2047 at 16:05, 3 February 2013

2013-02-03T16:05:29Z

Admin2047 at 16:04, 3 February 2013

2013-02-03T16:04:27Z

Admin2047 at 16:00, 3 February 2013

2013-02-03T16:00:36Z

← Older revision		Revision as of 14:09, 4 September 2013
Line 115:		Line 115:


−	==== Folders & Group Access ====	+	=== Folders & Group Access ===

	As you see in the screenshot above, there are two permission types you can set on each file/folder, You can give groups access to folders you want e.g. a "TF2_Server" you want your "TF2Admins" to have access to, all you would do is create a group & add the users you want to be in that group to it.		As you see in the screenshot above, there are two permission types you can set on each file/folder, You can give groups access to folders you want e.g. a "TF2_Server" you want your "TF2Admins" to have access to, all you would do is create a group & add the users you want to be in that group to it.

@@ Line 76: / Line 76: @@
   nano /etc/ftpusers
 === Jailing Users in a folder ===
@@ Line 152: / Line 128: @@
   usermod -a -G TF2Admins newuser

@@ Line 79: / Line 79: @@
 st Number = Owner Access
 nd Number = Group Access
 rd Number = Public Access

← Older revision		Revision as of 14:07, 4 September 2013
Line 75:		Line 75:

	nano /etc/ftpusers		nano /etc/ftpusers
		+
		+	===FTP Permission Numbers Explained===
		+
		+	1st Number = Owner Access
		+	2nd Number = Group Access
		+	3rd Number = Public Access
		+
		+
		+	0 No Permissions - The User(s) can't do anything
		+
		+	1 Execute Only - The User(s) can only execute the file)
		+
		+	2 Write Only - The User(s) can only write to the file / folder)
		+
		+	3 Write and Execute Permissions - The User(s) can only Write & Execute the file)
		+
		+	4 Read Only - The User(s) can only read from the file / folder
		+
		+	5 Read and Execute Permissions - The User(s) can only read from the file / folder & execute the file
		+
		+	6 Read and Write Permissions - The User(s) can only read & write to the file / folder
		+
		+	7 Read, Write and Execute Permissions - The User(s) can do everything - Read, Write & Execute the file / folder

	=== Jailing Users in a folder ===		=== Jailing Users in a folder ===

@@ Line 90: / Line 90: @@
 <pre>passwd testftp</pre>
-====SSH Lockout===
+===SSH Lockout===
 <pre>nano /etc/passwd</pre>

← Older revision		Revision as of 19:22, 27 August 2013
Line 81:		Line 81:

	You will have to edit your "proftpd.conf" file (or the vsftpd.conf file if you are using vsftpd instead) within that file you will see an option for default login root folder (If it is hashed out "#" unhash it & set it as "DefaultRoot ~"		You will have to edit your "proftpd.conf" file (or the vsftpd.conf file if you are using vsftpd instead) within that file you will see an option for default login root folder (If it is hashed out "#" unhash it & set it as "DefaultRoot ~"
		+
		+	Command to add a new user "testftp" & create a home / login folder in "/home/testftp"
		+
		+	<pre>useradd -m -d /home/testftp testftp</pre>
		+
		+	Set the password for the user
		+
		+	<pre>passwd testftp</pre>
		+
		+	====SSH Lockout===
		+
		+	<pre>nano /etc/passwd</pre>
		+
		+	Edit this file, find at the bottom their user name
		+
		+	You will see something like
		+
		+	<pre>testftp:x:1001:1001::/home/testftp:/bin/sh</pre>
		+
		+	name:x:userid:groupid::login/folder:/ssh settings (bin/sh = SSH Access, change this to /bin/false to prevent SSH login for this user)
		+
		+	You can also change the login/folder to where you want (as long as they have permissions to get into that folder it will work)
		+

	Now if you have already created your user great, if not see the steps above on creating a user (useradd username), Once you have created a user edit the "/etc/passwd" file & edit the home directory to the folder location you want e.g. /home/newuser (Make sure that user has permission on that folder, otherwise they wont be able to login (because they dont have access to that folder)		Now if you have already created your user great, if not see the steps above on creating a user (useradd username), Once you have created a user edit the "/etc/passwd" file & edit the home directory to the folder location you want e.g. /home/newuser (Make sure that user has permission on that folder, otherwise they wont be able to login (because they dont have access to that folder)

← Older revision		Revision as of 16:06, 3 February 2013
Line 96:		Line 96:

	You then set the permissions on that folder e.g. "TF2Admins" as owner of the "TF2_Server" folder, then anyone in your "TF2Admins" group will have the access they should.		You then set the permissions on that folder e.g. "TF2Admins" as owner of the "TF2_Server" folder, then anyone in your "TF2Admins" group will have the access they should.
		+
		+	You can get the group id from /etc/group (As said about above)

	use these commands to add a group & add users into that group		use these commands to add a group & add users into that group

@@ Line 84: / Line 84: @@
 Now if you have already created your user great, if not see the steps above on creating a user (useradd username), Once you have created a user edit the "/etc/passwd" file & edit the home directory to the folder location you want e.g. /home/newuser (Make sure that user has permission on that folder, otherwise they wont be able to login (because they dont have access to that folder)
-You can check folder permissions either on PuTTy using "ls -l" or the GUI / easier way in WinSCP
+You can check folder permissions either on PuTTy using "ls -l" or the GUI / easier way in WinSCP - http://winscp.net
-When you are connected via WinSCP you can right click on a folder & it will give you an option to enter a UID (User ID, as spoken about above) enter the users id to view/set their permissions on the folder, they will need at least Read & Execute on the folder in order for them to access the folder (You can set them the owner if you want to)
+When you are connected via http://winscp.net you can right click on a folder & it will give you an option to enter a UID (User ID, as spoken about above) enter the users id to view/set their permissions on the folder, they will need at least Read & Execute on the folder in order for them to access the folder (You can set them the owner if you want to)
 [[File:winscpuserperm.png|350px]]

← Older revision		Revision as of 16:04, 3 February 2013
Line 89:		Line 89:

	[[File:winscpuserperm.png\|350px]]		[[File:winscpuserperm.png\|350px]]
		+
		+
		+	==== Folders & Group Access ====
		+
		+	As you see in the screenshot above, there are two permission types you can set on each file/folder, You can give groups access to folders you want e.g. a "TF2_Server" you want your "TF2Admins" to have access to, all you would do is create a group & add the users you want to be in that group to it.
		+
		+	You then set the permissions on that folder e.g. "TF2Admins" as owner of the "TF2_Server" folder, then anyone in your "TF2Admins" group will have the access they should.
		+
		+	use these commands to add a group & add users into that group
		+
		+	groupadd TF2Admins
		+
		+	usermod -a -G TF2Admins newuser

← Older revision		Revision as of 16:00, 3 February 2013
Line 88:		Line 88:
	When you are connected via WinSCP you can right click on a folder & it will give you an option to enter a UID (User ID, as spoken about above) enter the users id to view/set their permissions on the folder, they will need at least Read & Execute on the folder in order for them to access the folder (You can set them the owner if you want to)		When you are connected via WinSCP you can right click on a folder & it will give you an option to enter a UID (User ID, as spoken about above) enter the users id to view/set their permissions on the folder, they will need at least Read & Execute on the folder in order for them to access the folder (You can set them the owner if you want to)

−	[[File:winscpuserperm.png~~\|thumb~~\|350px]]	+	[[File:winscpuserperm.png\|350px]]