Re: [openSSH] home dir shared between users

Hi there,

You shouldn't have a common home directory between users. Instead
create an own home directory for each user and put an authorized_keys
(with a single key) and a symlink to the actual data directory there.
Example:

/var/scpusers/ Directory containing data to download
/var/scpupload/ Common upload directory

/home/someuser/.ssh/authorized_keys Holding a single auth key
/home/someuser/pub Symlink to /var/scpusers
/home/someuser/upload Symlink to /var/scpupload

If you use useradd(8) to create users, then you can predefine this
directory structure in /etc/skel/, and then create users with something
like this:

useradd -m USERNAME

You'll still need to create the authorized_keys file manually in a
separate step.

Regards.
.

Relevant Pages

  • Re: MS rights...
    ... supports ifmemberof(as well as many other scripting var's. ... She also has a home directory. ... > I have a User Data directory that contains all the users' ... > directory that contains her Accounting department folder ...
    (microsoft.public.win2000.security)
  • MS rights...
    ... I have a user Betty Sue that is a member of the Accounting ... She also has a home directory. ... I have a User Data directory that contains all the users' ...
    (microsoft.public.win2000.security)
  • Re: Config files
    ... application data directory so the user does not have to enter them each ... the solution will be platform ... directory to store initialisation data and on Windows it is common ... to use either the Application Data directory under the home directory ...
    (comp.lang.tcl)
  • Re: openssh and PAM
    ... DBF> and common home directory. ... OpenSSH determines the login account's home directory with ... getpwnam, so it looks as if that is returning "/home/user". ...
    (comp.security.ssh)
  • Re: Best Programming Practice?
    ... Your Terminal Services Security Website ... somewhere under the user's home directory or under ... the user's application data directory? ... directory is often mapped from a network location but I don't know if this ...
    (microsoft.public.windows.terminal_services)
Quantcast