adding users

Hi all

can any one point me to some thing that is quiet simple to under stand

for adding users to Fedora Core 2 and giving him or her a disk quoter of 50megs and to be able to lock that user in his folder with out surfing though the system.

I got the user in and add a link to his folder.

Do i need to give back the folder to the user.

Here is what i done sofar.

[root@localhost home]# cd user/
[root@localhost user]# ls -al
total 24
drwx------  2 user user 4096 Sep  1 01:59 .
drwxr-xr-x  5 root    root    4096 Sep  1 01:55 ..
-rw-r--r--  1 user user  24 Sep  1 01:41 .bash_logout
-rw-r--r--  1 user user  191 Sep  1 01:41 .bash_profile
-rw-r--r--  1 user user  124 Sep  1 01:41 .bashrc
-rw-r--r--  1 user user  120 Sep  1 01:41 .gtkrc
lrwxrwxrwx  1 root    root      18 Sep  1 01:59 sbs -> /var/www/sites/sbs
[root@localhost michael]#

This is only a sample, I allways seem to get real lost on this side of things.

TT

Ok, so you want to lock the user in their home dir right? Chroot is your answer.

-twantrd

yer

I added a folder called sbs under /var/www/sites ( /var/www/sites/sbs )

Then i added the user to the system with his pass ok
then i added the link to sbs using WinSCP3 so under that users home their is a folder with a short cut to sbs

user path is /home/user

I got the vsftpd working and it allows user to log in etc user can write to his folder but not sbs.


Hope it makes sence..

TT

Is vsftpd setup to chroot users to their home directory? if /home/user becomes / when they login via ftp?

I'm not to sure what you mean

but i hope this is what you mean

# You may specify an explicit list of local users to chroot() to their home
# directory. If chroot_local_user is YES, then this list becomes a list of
# users to NOT chroot().
#chroot_list_enable=YES
# (default follows)
#chroot_list_file=/etc/vsftpd.chroot_list

TT

when users login to the ftp are they able to change directory to /home or / on the ftp server or they're locked inside their /home/username(which appears to be / on their ftp client)

User is able to log in ok, able to write to his folder, and able to surf past his folder but not write.

TT

are the permissions correct on /var/www/sites/sbs ?

I'm not sure if they are right but its set to 0755 ( /var/www/sites/sbs )

I was wondering if i could make a group then add that user to that group

I kind of get how to do the perms

chmod 755 file - Let owner be able to read, write, and execute
Group is able to read and execute
Other's is able to read and execute

is that right ?


TT

is the directory owned by the user?

you mean as in chrown user to that folder, I dont think so..

chown user /home/user/ or chrown user /var/www/sites/sbs

TT

chrown user /var/www/sites/sbs

Just a question by doing that i wouldn't need the short cut link in his /home/user ?

chowning now

some thing i notice we both spelt chown wrong.

tt

User can now write and read files in that directory /var/www/sites/sbs

and he's able to write in /home/user

just hinking about it user wouldn't need to write into the home/user just sbs or is that the way its meant to be, i under one can also have a home page there as well EG: http://localhost/~user/

is this right.

Is there anyway stoping user from surfing into the system directory. Just want to lock that user in.

TT

some thing i notice we both spelt chown wrong.

yea you're right, though I just did copy and paste from your line :-)

just hinking about it user wouldn't need to write into the home/user just sbs or is that the way its meant to be, i under one can also have a home page there as well EG: http://localhost/~user/ is this right.

If Apache is configured to allow UserDir's then yes http://localhost/~user/ will work, by default I think the directory is /home/user/public_html

Is there anyway stoping user from surfing into the system directory. Just want to lock that user in.

Yeah use chroot_local_user
however if you do this symlinks will cease to work
but you can get around it by using mount --bind