Topic: admin access other users home directories

[millerte]

Hey,

Does any one know if there is anyway to allow the "admin user" permissions to access and modify user home directories?

[mrjhb3]

Hey,

Does any one know if there is anyway to allow the "admin user" permissions to access and modify user home directories?

Out of the box, no.  This is admin's /etc/passwd profile
admin:x:101:101:e-smith administrator:/home/e-smith:/sbin/e-smith/console

He can only run this program when he logs in.  What about using root, or if you have some specifics, please spell them out.

John

[millerte]

I actually mean via FTP, and SAMBA

[haymann]

Hey,

Does any one know if there is anyway to allow the "admin user" permissions to access and modify user home directories?

I usually use WinSCP and log in as root. It gives me a graphical view of the directory structure and I have access to all I need and more... Works great remotely as well if you VPN in (I don't like to open SSH up to the internet).
Ryan

[cjensen]

Use keys.  Keeps things secure. Just keep the keys secure

http://wiki.contribs.org/SSH_Public-Private_Keys

Craig

[shell]

I use a custom-template for samba - 55adminhomes

This allows you to allow specified users to have access to all users home directories.

Steps:
Create a custom-template fragment:

Code: [Select]

vi /etc/e-smith/templates-custom/etc/smb.conf/55adminhomes

With the following content:

Code: [Select]


 [admin_shares]
comment = home_directories
path = /home/e-smith/files/users/
valid users = admin root
admin users = admin root
write list = admin root
public = no
browsable = yes
writable = yes



you can put whatever username in the valid users / admin users.

Then expand the template:

Code: [Select]

expand-template /etc/samba/smb.conf

And then restart the samba service

Code: [Select]

service smb restart

this gives you a new samba share that has all the users directories, which is accessible the same way as all samba shares.

be aware that if you write files in here as admin or root the user permissions might not be correct.  i use this is a school environment where it is important for some teachers to be able to check on contents of childrens home directories, but be aware that this gives the authorised users access to EVERYONE's home directory, which contain mail etc.