| 00:06.29 | Utah_Dave | timinator: shoot. I've done this before. but it's not coming to me |
| 00:06.33 | Utah_Dave | and I have to go |
| 00:06.42 | timinator | np man |
| 00:06.51 | Utah_Dave | I'll take a look at it on Monday |
| 00:06.58 | timinator | cool |
| 00:07.00 | timinator | thx |
| 00:07.08 | *** part/#uphpu Utah_Dave (n=David_Bo@c-67-172-225-211.hsd1.ut.comcast.net) |
| 00:13.27 | herlo | timinator: that's easy |
| 00:13.36 | timinator | ya? |
| 00:13.39 | herlo | timinator: yeah |
| 00:14.02 | herlo | change the ownership so its <user>:<apache group> on the parent dir |
| 00:14.23 | herlo | timinator: er rather |
| 00:14.42 | herlo | apache:<a group the user is amember of> |
| 00:15.04 | herlo | if they aren't a member of their group |
| 00:15.39 | herlo | timinator: what os? |
| 00:15.42 | herlo | distro |
| 00:15.49 | timinator | Gentoo 2005 |
| 00:16.31 | herlo | timinator: oh, right. how do they assign user and group perms to a new user? |
| 00:16.57 | timinator | usermod |
| 00:17.05 | herlo | timinator: are the users in their own groups? |
| 00:17.10 | herlo | and what's the default umask? |
| 00:17.28 | timinator | not sure.... it's really just me |
| 00:17.32 | timinator | timothy:apache |
| 00:17.38 | timinator | now I'm trying to add another |
| 00:17.42 | herlo | timinator: type 'id' |
| 00:17.47 | herlo | as yourself |
| 00:18.03 | herlo | what's the primary group |
| 00:18.07 | timinator | 1 sec |
| 00:18.07 | herlo | then type umask |
| 00:20.22 | timinator | id == uid=1001(timothy) gid=1001(timothy) groups=16(cron),81(apache),100(users),250(portage),1001(timothy) |
| 00:20.38 | timinator | umask == 0022 |
| 00:20.39 | herlo | timinator: what's the group perms? |
| 00:20.46 | herlo | on the apache dir |
| 00:20.58 | timinator | apache is a group |
| 00:21.28 | herlo | okay, paste the current perms |
| 00:21.42 | timinator | oh.... it's timothy:apache |
| 00:21.51 | timinator | drwxrwx--- |
| 00:21.59 | herlo | okay, now |
| 00:22.17 | herlo | you'll need to change all of the perms underneath to a similar set of perms |
| 00:22.18 | herlo | run this |
| 00:22.54 | timinator | let's say this new user is jack |
| 00:22.55 | herlo | find /path/to/apache/ -type d -exec chmod g+s {} \; |
| 00:22.59 | herlo | oh |
| 00:23.02 | herlo | for a new user? |
| 00:23.06 | timinator | I want to add a jack folder that the user jack can access |
| 00:23.07 | timinator | right |
| 00:23.13 | herlo | still easy enough |
| 00:23.27 | herlo | but you don't want to change jack's original perms right? |
| 00:23.28 | timinator | so, jack user, with jack group can only access the folder jack under the web root |
| 00:23.52 | timinator | jack is a new user.... so I don't care |
| 00:23.53 | herlo | timinator: I'd suggest the UserDir feature of apache if you like that idea |
| 00:24.09 | timinator | never heard of it |
| 00:24.09 | herlo | it will provide a ~jack dir off the web root |
| 00:24.14 | timinator | sounds good |
| 00:24.23 | herlo | let me find the docs for it... |
| 00:24.23 | timinator | wait... off the web root? |
| 00:24.38 | timinator | nope.... he's a web dev... I'm giving him a web folder |
| 00:24.46 | timinator | so, it needs to be inside the web root |
| 00:24.49 | herlo | the directory can be anywere on the system, but when its shown as an http:// uri it appears off of the web root |
| 00:25.18 | herlo | is this what you want? |
| 00:25.21 | timinator | ok, I missunderstood |
| 00:25.46 | timinator | yes, I want to give jack a web directory |
| 00:25.51 | herlo | http://httpd.apache.org/docs/1.3/mod/mod_userdir.html |
| 00:25.54 | timinator | and nothing else |
| 00:25.55 | timinator | reading |
| 00:26.15 | herlo | let me find the example in my httpd.conf |
| 00:26.47 | herlo | <PROTECTED> |
| 00:26.47 | herlo | <PROTECTED> |
| 00:26.47 | herlo | <PROTECTED> |
| 00:26.47 | herlo | <PROTECTED> |
| 00:26.49 | herlo | <PROTECTED> |
| 00:26.52 | herlo | <PROTECTED> |
| 00:26.55 | herlo | <PROTECTED> |
| 00:26.57 | herlo | <PROTECTED> |
| 00:27.00 | herlo | <PROTECTED> |
| 00:27.02 | herlo | oops, pasted it twice |
| 00:28.20 | herlo | timinator: if that's not what you want, then I suggest facls |
| 00:40.13 | timinator | it appears that this would give jack complete access to the rest of the server as he would be a normal user of the server.... so this isn't going to work |
| 00:40.43 | timinator | but I'm going to pass this on to my server admin as I'm tired of messing w/ it |
| 00:40.47 | timinator | thank you though |
| 00:41.00 | herlo | timinator: it doesn't do that |
| 00:41.09 | timinator | ...no? |
| 00:41.13 | herlo | no |
| 00:41.43 | herlo | timinator: you specify where the UserDir is and then apache will load pages from that dir when accessed with a ~dir |
| 00:41.55 | timinator | I must be missreading it then.... it appears to make the user's home dir a shortcut to the web dir |
| 00:42.01 | herlo | if you put the public_html dir in his home dir for instance |
| 00:42.15 | herlo | timinator: it is, the other way around though |
| 00:42.31 | herlo | it means that if he has a home dir apache can see it, not him seeing the apache stuff |
| 00:42.49 | timinator | oh |
| 00:43.00 | herlo | :) |
| 00:43.11 | timinator | can apache see it enough to attach virtual hosts to his subdirectories then? |
| 00:43.33 | herlo | timinator: if you define a userdir inside the vhost, sure |
| 00:44.23 | timinator | but couldn't this user see his home dir, and all other directories? |
| 00:44.34 | herlo | timinator: what user? |
| 00:44.40 | timinator | cause right now he can see everything on the server, but not the web root |
| 00:44.42 | timinator | jack |
| 00:44.45 | timinator | I've set him up |
| 00:44.54 | herlo | youre not making sense |
| 00:45.09 | herlo | jack can of course see his own home dir |
| 00:45.33 | herlo | and subdirs |
| 00:45.49 | timinator | but when I log in as jack, I can see all the bin, dev, home, lost+found opt root tmp var boot etc lib mnt proc sbin sys usr folders |
| 00:45.53 | timinator | and subfolders |
| 00:46.07 | herlo | sure |
| 00:46.14 | timinator | it's only when I try to go to /var/www/vhosts/html that I can't go any further |
| 00:46.16 | herlo | but you don't have write access to them... |
| 00:46.28 | timinator | oh.... that's probably true |
| 00:46.33 | herlo | oh, so you want to put his user in a chroot jail |
| 00:46.39 | herlo | I see. |
| 00:46.46 | timinator | yes..... sounds about right |
| 00:46.52 | timinator | and give him sftp access |
| 00:47.06 | timinator | so, he logs on w/ sftp, and ONLY see's his web directory |
| 00:47.08 | herlo | but it won't be until a bit later... |
| 00:47.13 | timinator | np |
| 00:47.16 | timinator | I appreciate ya |
| 00:47.17 | herlo | yeah, that makes sense. |
| 00:47.30 | herlo | np. I've wanted to figure that out before anyway... |
| 00:48.08 | timinator | well, I've needed it a few times.... and I just end up taking their files and uploading them myself |
| 00:48.31 | herlo | timinator: yeah, I see the need for exactly that. |
| 00:48.36 | timinator | but I don't want to be on call for this guy |
| 00:49.01 | timinator | ya.... I appreciate any info you get.... and let's do it another day when my nerves aren't shot |
| 00:49.04 | timinator | :) |
| 00:49.38 | timinator | I've seriously been trying to do this since just before noon |
| 00:50.25 | timinator | btw, I've tried scponly.... and it's installed, but I can't attach a user to it, or that user can't do ANYTHING |
| 00:50.39 | timinator | so I'm not sure that's configured correctly |
| 01:03.45 | timinator | herlo: this is also something I found, but haven't tried: http://www.pizzashack.org/rssh/ |
| 01:07.30 | herlo | timinator: that's very interesting |
| 01:08.43 | timinator | ya, I was thinking so.... |
| 01:08.49 | timinator | it looks like a simple emerge |
| 01:40.44 | *** join/#uphpu cycokilr (n=cycokilr@216.112.116.6.ptr.us.xo.net) |
| 01:42.05 | mindjuju | hail to the king |
| 01:50.31 | mindjuju | so what was for dinner |
| 01:50.59 | jsmith | Bison, turnips, biscuits, and applesauce |
| 01:51.06 | mindjuju | bison sounds good |
| 01:51.11 | jsmith | It was ;-) |
| 01:51.48 | jsmith | It was also followed by a 45-minute nap, which was the perfect dessert |
| 03:01.43 | *** join/#uphpu jsmith (n=jsmith@68.247.95.55) |
| 03:01.43 | *** mode/#UPHPU [+v jsmith] by ChanServ |
| 03:17.42 | *** join/#uphpu Black_Chaos (n=admin@oalug/member/blackchaos) |
| 03:17.42 | *** mode/#UPHPU [+v Black_Chaos] by ChanServ |
| 05:13.44 | *** join/#uphpu mgeary (n=mgeary@72.8.120.115) |
| 05:13.44 | *** mode/#UPHPU [+v mgeary] by ChanServ |
| 05:18.01 | mgeary | ~lart westhost |
| 05:18.01 | jbot | blasts westhost to oblivion with a kamehameha wave |
| 05:18.13 | mgeary | ~lart westhost |
| 05:18.13 | jbot | moos at westhost |
| 05:18.24 | mgeary | ~lart westhost |
| 05:18.24 | jbot | hits westhost with an anvil and laughs with a contralto voice ... Haha Ha HA Ha |
| 05:35.36 | mgeary | ~lart westhost |
| 05:35.36 | jbot | stabs westhost |
| 05:35.43 | *** part/#uphpu mgeary (n=mgeary@72.8.120.115) |
| 06:09.01 | *** join/#uphpu Black_Ch1os (n=admin@63-228-200-243.slkc.qwest.net) |
| 06:14.41 | *** join/#uphpu tierra (n=tierra@ibaku.net) |
| 06:14.41 | *** mode/#UPHPU [+v tierra] by ChanServ |
| 06:19.16 | *** join/#uphpu Black_Ch3os (n=admin@63-228-200-243.slkc.qwest.net) |
| 06:26.57 | *** join/#uphpu bradym (n=bradym@c-98-207-18-133.hsd1.ca.comcast.net) |
| 06:26.57 | *** mode/#UPHPU [+v bradym] by ChanServ |
| 16:09.28 | *** join/#uphpu burnin (n=burnin@204-228-142-194.ip.xmission.com) |
| 16:09.28 | *** mode/#UPHPU [+v burnin] by ChanServ |
| 20:04.29 | *** join/#uphpu tierra (n=tierra@ibaku.net) |
| 20:04.29 | *** mode/#UPHPU [+v tierra] by ChanServ |
| 23:48.45 | *** join/#uphpu mgeary (n=mgeary@72.8.120.115) |
| 23:48.45 | *** mode/#UPHPU [+v mgeary] by ChanServ |