Help with Remote Login

[tedro]

@tedro Those steps are for OS X Server. To my knowledge the only option is to use the File Sharing pane which would work just fine.

well, to test that you could make me a user on your machine, turn on Remote Login...set your Sharing as you have described.
i promise not to touch anything. it will let me everywhere except your Home dir.
i'll send you a screen snap.

p.s. osx client has the same services as server, just not the gui controls, afaik. you'd have to do the fancy stuff via CL.
p.p.s. File Sharing is only for local access.

 

[Altemose]

@tedro File Sharing rules differ from Remote Login. Is there a reason you must use SSH rather than AFP?

 

[tedro]

@tedro File Sharing rules differ from Remote Login. Is there a reason you must use SSH rather than AFP?

yes: File Sharing is only for local access.
i need outside (remote) access.

 

[Altemose]

yes: File Sharing is only for local access.
i need outside (remote) access.

You can forward the port on the router to allow file sharing access from outside your network.

 

[Geeky Chimp]

You'll need to setup chroot in sshd_config if you want to restrict the user to just their home directory via SSH;
https://developer.apple.com/library...in/Reference/ManPages/man5/sshd_config.5.html

You can also force the command to internal-sftp to enable to only SFTP access rather than full SSH.

 

[tedro]

You'll need to setup chroot in sshd_config if you want to restrict the user to just their home directory via SSH;
https://developer.apple.com/library...in/Reference/ManPages/man5/sshd_config.5.html

You can also force the command to internal-sftp to enable to only SFTP access rather than full SSH.

that's what i thought! d'oh!
thanks so much.
i might be back! ;-)

p.s. this is something i'd add per user right?

 

[Geeky Chimp]

that's what i thought! d'oh!
thanks so much.
i might be back! ;-)

p.s. this is something i'd add per user right?

I think you can make the config file edits to users or a group then just set the permissions to the folders per user.
I've only done it once and it was a while ago.

 

[tedro]

I think you can make the config file edits to users or a group then just set the permissions to the folders per user.
I've only done it once and it was a while ago.

ah yes.

like this?
http://apple.stackexchange.com/questions/41652/create-a-remote-only-user-in-os-x

thanks much

 

[tedro]

I think you can make the config file edits to users or a group then just set the permissions to the folders per user.
I've only done it once and it was a while ago.

maybe i could something different:
setup a folder on a AE networked drive for the user/group,
where the perms keep them out of the rest if the drive?

i wonder if i started using osx server again...if all of the options we're discussing would make it VERY easy (GUI) to do?