Staff/Faculty Web Server

Userdirs are set up in /srv/www/personal

To create a new userdir SoCSIT must create a new folder with the user's central login username in that folder and chown the correct permissions. Faculty can then manage files in this folder via ssh/scp/sftp.

Move this section to legacy? Don't know what we used it for

It is possible to set up sites in such a way that students can sftp files to the server, but are unable to ssh to the server.

In /etc/ssh/sshd_config add the following code for each site:

Match group <sitegroup>
      ChrootDirectory /srv/www/<site>
      X11Forwarding no
      AllowTcpForwarding no
      ForceCommand internal-sftp

Create a group in /etc/groups with the afore mentioned site group and add any users who should access this site to it.

Get the user's passwd entry with getent passwd <username> and add that to the local passwd file. Modify the shell to /bin/false. Add the /etc/shadow entry as well.

Create the website folder,

/srv/www/<site>

This folder must be owned by root. Under this folder create a folder with permissions that are modifiable by the members of <sitegroup>