Re: How to Restrict a User's Access Using SFTP?

2011-12-29 Thread Mark Phillips
Eric, vsftp is in the Debian repositories, but the developer's tool does not use it...only sftp or ftp. The program is iWeb on the mac. However, the article http://www.debian-administration.org/articles/590 did the trick for me! Mark On Thu, Dec 29, 2011 at 12:20 PM, Eric Shubert wrote: > Oop

Re: ruby woes

2011-12-29 Thread Michael Havens
Thank you so much for your help guys. Those debugging lessons will prove invaluable in the future. Thanks for teaching that to me. On Thu, Dec 29, 2011 at 10:14 AM, Kevin Fries wrote: > On Wed, 2011-12-28 at 22:56 -0700, Michael Havens wrote: > > I hate it when you are trying to learn something

Re: How to Restrict a User's Access Using SFTP?

2011-12-29 Thread Eric Shubert
Oops. Sorry Mark. I forgot that you said sftp, which is part of OpenSSH. I'm using vsftp, which does not require a login shell. Probably why it's considered "very secure". ;) I expect that if vsftp is in a debian repo, you could use that instead of sftp. vsftpd is stock in the RHEL repos. On 1

Re: How to Restrict a User's Access Using SFTP?

2011-12-29 Thread azlobo73
Also please note, native chroot is a native option in OpenSSH since v4.9, so if you are in an environment that isn't running v4.9+ and can't be upgraded, my original link will not work so well. YMMV. On Thu, Dec 29, 2011 at 11:32 AM, azlobo73 wrote: > When installed, depending on your distro an

Re: How to Restrict a User's Access Using SFTP?

2011-12-29 Thread azlobo73
When installed, depending on your distro and packagement manage system's post-install process, the psuedo/restricted 'shell' may need to be added to the /etc/shells or equivalent file to work as a listed shell for a user in /etc/passwd. Another such one is called scponly. One plus with a non-shel

Re: ruby woes

2011-12-29 Thread Kevin Fries
On Wed, 2011-12-28 at 22:56 -0700, Michael Havens wrote: > I hate it when you are trying to learn something and what you are > learning from is incomplete or wrong. This is the beginning of a ruby > script I am writing which will (in the section shown) erase a file. > ruby tells me that line 15 is

Re: spread the word

2011-12-29 Thread Lyle Tuttle
Key word: Guru At 08:40 AM 12/29/2011, Lisa Kachold wrote: Looks like you are nominated Lyle? On Thu, Dec 29, 2011 at 7:56 AM, Lyle Tuttle <l.tut...@cox.net> wrote: Looks like an opportunity to showcase Linux here

Re: spread the word

2011-12-29 Thread Lisa Kachold
Looks like you are nominated Lyle? On Thu, Dec 29, 2011 at 7:56 AM, Lyle Tuttle wrote: > Looks like an opportunity to showcase Linux here > > http://www.cox7.com/metro-**tech-computer-and-networking > > Maybe invite students / instr

Re: ruby woes

2011-12-29 Thread Lisa Kachold
Hi Mike, This script appears to require the "filename" passed to the command line when invoked? #./script /tmp/filename variable becomes ARGV.first {filename} Be sure you have the right filename and complete path. On Wed, Dec 28, 2011 at 10:56 PM, Michael Havens wrote: > I hate it when you

spread the word

2011-12-29 Thread Lyle Tuttle
Looks like an opportunity to showcase Linux here http://www.cox7.com/metro-tech-computer-and-networking Maybe invite students / instructor to Plug event(s)? A Plug guru offer an 'introductory' Linux overview to class? Get'em while their young, and train'em right! -

Re: How to Restrict a User's Access Using SFTP?

2011-12-29 Thread Lisa Kachold
Hi Mark, No, you cannot use a nologin with scp or ssh. There are a few restricted shells, most notably rssh (which is in apt-get for Debian): http://www.cyberciti.biz/tips/howto-linux-unix-rssh-chroot-jail-setup.html http://www.cyberciti.biz/tips/rhel-centos-linux-install-configure-rssh-shell.ht

Re: How to Restrict a User's Access Using SFTP?

2011-12-29 Thread Mark Phillips
Eric, The Debian equivalent to /sbin/nologin appears to be /bin/false. When I tried that, I could not sftp or ssh or gain access to the machine in anyway. I am not sure if there is another Debian shell that allows sftp but not ssh. Thanks! Mark On Wed, Dec 28, 2011 at 9:54 PM, Eric Shubert wro

Re: How to Restrict a User's Access Using SFTP?

2011-12-29 Thread Mark Phillips
Ben Thanks - that worked very well and looks very secure. Which method is more secure/"the right way" to set up users with web publishing rights - a. create a link from a user's directory to a document root at /var/www/domain/user b. change document root to /home/user/www/site Mark On Thu, Dec

Re: backup entire system

2011-12-29 Thread kitepi...@kitepilot.com
I have cloned and restored 2464720174+1 systems with: rsync -vaxHXY --checksum /path1 /path2 /path3 someone@remotebox:/mybackup The 'x' constrain the sweep to a partition to avoid memory directories (/proc, /dev, /sys) which forces to explicitly name every mounted directory to copy. Then yo