Koozali.org: home of the SME Server

Pydio not logging out

Offline Daniel B.

  • *
  • 1,699
  • +0/-0
    • Firewall Services, la sécurité des réseaux
Re: Pydio not logging out
« Reply #15 on: April 04, 2016, 10:32:07 AM »
I should add that if security is a concern to you, you should close your browser when you're done using it, not matter which auth mechanism is used.
C'est la fin du monde !!! :lol:

Offline nicolatiana

  • *
  • 721
  • +0/-0
Re: Pydio not logging out
« Reply #16 on: April 04, 2016, 10:42:35 AM »
Quote
I should add that if security is a concern to you, you should close your browser when you're done using it, not matter which auth mechanism is used.

Just an idea as workaround: can we think to link the PYDIO close/logout button to a Security-Warning box offering to shutdown the browser ?
Consulente di Smeserver.it -  Soluzioni e supporto su Sme server in Italia.

Offline Daniel B.

  • *
  • 1,699
  • +0/-0
    • Firewall Services, la sécurité des réseaux
Re: Pydio not logging out
« Reply #17 on: April 04, 2016, 10:44:06 AM »
You could use the LogoutURL for this. Unfortunately, LogoutURL doesn't work anymore. I need to check if the bug still exists in Pydio 6 branch
C'est la fin du monde !!! :lol:

Offline CharlieBrady

  • *
  • 6,918
  • +3/-0
Re: Pydio not logging out
« Reply #18 on: April 04, 2016, 05:10:21 PM »
The introduction states: 'Koozali SME Server is a complete, secure, stable and versatile'
If smeserver is designed for business use, security should be the first priority.

pydio is not part of SME server.

Re: Pydio not logging out
« Reply #19 on: May 05, 2016, 01:07:29 PM »
Would it be possible to configure Pydio to use SME Server's LDAP instead of basic authentication? I had a go at it, and I could get it to recognise a username, but couldn't actually login with it.
LemonLDAP-NG isn't really ideal for my situation - client doesn't have a wildcard SSL certificate, so I don't want to use virtualhosts and subdomains, just access it as domain.com/pydio.

Also, is the desktop/mobile app supported? I tried the desktop app and got "Server not found (404), is it up and has it Pydio installed?"

I'm happy to spend more time fiddling with it (I'm relatively experienced with SME Server), but won't bother if there's any reason why it's not possible.

Online Jean-Philippe Pialasse

  • *
  • 2,746
  • +11/-0
  • aka Unnilennium
    • http://smeserver.pialasse.com
Re: Pydio not logging out
« Reply #20 on: May 06, 2016, 12:28:47 PM »
you should use let's encrypt to get a free wildcard certificate.


I think the desktop app is only supported by the v6 version of pydio. An update of the contribs would be necessary, but need some work to adapt it to SME to use its user db.

As Daniel, Charlie and I use most of our spare time for SME 10 , we would be happy to assist somebody to do the migration process to pydio 6 and then make an rpm of it, but we do not have the time to do all the process.


I can however confirm that the ios and android apps work with pydio v5 currently available on SME.
« Last Edit: May 06, 2016, 12:33:03 PM by Jean-Philippe Pialasse »

Re: Pydio not logging out
« Reply #21 on: May 08, 2016, 09:52:08 AM »
Thanks Jean-Philippe. I hadn't seen Let's Encrypt before, I'll check it out.

I'll have a go at installing v6 and see how I go.

Offline DanB35

  • ****
  • 764
  • +0/-0
    • http://www.familybrown.org
Re: Pydio not logging out
« Reply #22 on: May 08, 2016, 12:34:38 PM »
you should use let's encrypt to get a free wildcard certificate.
Let's Encrypt doesn't do wildcard certs, but they'll put as many hostnames as you want (up to 100) on a single cert.  See the wiki at https://wiki.contribs.org/Letsencrypt for instructions; I think that letsencrypt.sh is a better path for SME than using the official client at this point.
......

Re: Pydio not logging out
« Reply #23 on: May 10, 2016, 01:06:03 PM »
I've installed v6.0.7 in an iBay and appear to have most of the functionality working (although I haven't thoroughly tested it yet).
I mostly followed the instructions at https://wiki.contribs.org/Pydio with a few minor changes:

PHPBaseDir=/home/e-smith/files/ibays/<pydio_ibay>/:/tmp/:/etc/ (I had to do this to get the ldap authentication working properly - not sure if there's a better way)
I entered the ibay options individually (copying and pasting from that page didn't work)

Then I setup Pydio to use LDAP:
LDAP URL: localhost
Protocol: Standard (ldap)
LDAP Port: 389
People DN: ou=Users,dc=clientdomain,dc=com
LDAP Server Page Size: 500
LDAP Filter: objectClass=person
Groups DN: ou=Groups,dc=clientdomain,dc=com
LDAP Groups Filter: objectClass=posixGroup
Group Attribute: displayName
Fake Member From: memberUid
Fake MemberOf value of Member/MemberUID Attribute of Group: No (Use CN, not DN)
LDAP Attribute: memberOf
Mapping Type: Role Id

Now I can create a workspace using SMB as follows:
Host: localhost
URI: <share name>
Session Credentials: Yes
Recycle Bin Folder: Recycle Bin
alias: <share name>

I haven't got as far as creating the workspace automatically when signal-event share-create (etc) are called. Looks like I'd need to enter the data into ajxp_repo and ajxp_repo_options in the database, but I'm not sure how the uuid is generated.

It's been a decade since I've built an RPM, so I'm probably not going to be much help packaging this up for others, but I'll do what I can to help if someone else is able to.