ispCP - Board - Support
Manual SSH accounts - Printable Version

+- ispCP - Board - Support (http://www.isp-control.net/forum)
+-- Forum: ispCP Omega Development Area (/forum-1.html)
+--- Forum: Suggestions (/forum-2.html)
+--- Thread: Manual SSH accounts (/thread-393.html)



Manual SSH accounts - Esni - 04-16-2007 11:33 PM

Hi,

Is it possible to manually create a user to the unix with username vuxxxx and group www-data.

Does this work without problems with the vuxxxx:www-data user/group that vhcs uses?


RE: Manual SSH accounts - ephigenie - 04-16-2007 11:46 PM

One user may have more than one group...

for ssh + sftp/scp + chroot look here :
http://www.isp-control.net/ispcp/wiki/chroot_wrapper_skript

I'd recommend you not to use ssh without chroot!


RE: Manual SSH accounts - hamerr - 04-25-2007 06:44 AM

ephigenie Wrote:One user may have more than one group...

for ssh + sftp/scp + chroot look here :
http://www.isp-control.net/ispcp/wiki/chroot_wrapper_skript

I'd recommend you not to use ssh without chroot!

Ok i`ve uploaded the script that I use and it works perfect but where,how to add it to the ispcp system for auto-creation of the user ?


RE: Manual SSH accounts - raphael - 04-25-2007 08:38 AM

For security reasons I don't recommend you making any domain-owner part of the www-data group. But if you use it in a private server where only people who you really trust and who doesn't have any need of stealing other users info, you can do that.


RE: Manual SSH accounts - hamerr - 04-25-2007 03:31 PM

raphael Wrote:For security reasons I don't recommend you making any domain-owner part of the www-data group. But if you use it in a private server where only people who you really trust and who doesn't have any need of stealing other users info, you can do that.

The system creates a vu2001 with group vu2001.where to add the script to create a user "testuser" with the same group ? So is there a way or not ?


RE: Manual SSH accounts - raphael - 04-26-2007 08:04 AM

What I'm saying is that the group www-data shouldn't be used at all for domain users.
If you want to create a user who has access to a same group, just use --groups GROUP1,GROUP2 when calling useradd and passing a list of extra groups, or, if you want it to belong only to that group, use --gid GROUP
for more information check man useradd(8)