LinuxQuestions.org
Visit Jeremy's Blog.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices


Reply
  Search this Thread
Old 02-26-2004, 03:53 PM   #1
MagicMike
LQ Newbie
 
Registered: Feb 2004
Posts: 1

Rep: Reputation: 0
File server on Debian Sarge with Samba, SSH and vsftpd?


I am going to build a small workgroup type of file server with needs for Samba, SSH (scp or sftp) and FTP (so far vsftpd has looked nice). HW will include 1 IDE HD for the OS and some data, but also a simple 2 disk IDE RAID 1 controller for the data storage. I have planned using ext3 or equivalent as filesystem. We have used RH servers previously, but are planning to go with Debian in future, that's why Debian Sarge (100 MB netinst).

My question is - do you have any recommendations regarding how to arrange the access control / security? Chroot jail with home directories is familiar to me as a concept, and we have used that in our web servers. So do you recommend continuing with chroot jails on all home dirs (we need to enable shares for the workgroup and each user, some SSH based accounts as well as FTP accounts)? I wouldn't want to share any data between these groups unless especially planned and permitted.

So, the easiest way (but not necessarily the most secure) would be setting Samba users and shares as one thing (limiting access only from local net), FTP users under their own jail and SSH users under their own jail. The Samba users are the most reliable and uniform group, but the data is probably most sensitive. They shouldn't need shell access on the server. FTP and SSH I want to separate somehow because FTP passwords are transferred unencrypted. So there actually could be even 3 accounts for one user: Samba, FTP and SSH?

Any ideas or pointers to existing FAQ or Howto is of course welcome. The server will be accessible from the local net and internet, maybe even via VPN.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
SSH in Debian Sarge securitybreach Debian 4 06-08-2005 03:15 PM
Debian (Sarge) me5sum file nap0m Linux - Newbie 2 04-18-2005 01:45 PM
Where can I download Debian Sarge image file? harlemno1 Linux - Newbie 1 03-06-2005 05:04 AM
VSFTPD Debian VSFTPD "unrecognised variable in config file" DCT Linux - Software 0 05-30-2004 12:59 AM
debian sarge samba-2 Tero Debian 1 03-11-2004 02:35 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Networking

All times are GMT -5. The time now is 08:42 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration