how to limit other user's accounts?

[lime4x4]

How would i limit a user from like changing song id's and from gaining access to the admin area of ubuntu center?

[Sef]

How would i limit a user from like changing song id's and from gaining access to the admin area of ubuntu center?

Set them up in their own account. As an administrator you can limit what they do.

System > Administration > Users and Groups

[TTT_travis]

How would i limit a user from like changing song id's and from gaining access to the admin area of ubuntu center?

Currently there is no way, the authentication all goes to the same place, its mostly so if you share access you don't all have to use the same password. Expect multiple user access down the road a bit.

Travis

Set them up in their own account. As an administrator you can limit what they do.

System > Administration > Users and Groups

You're talking about Ubuntu Linux, we're talking about Ubuntu Center ;)

[foofightrs777]

First off, great work! I really love ubuntu center and it really shows a HUGE amount of potential.

Second, limited access accounts, in my opinion, are a must have high priority feature. Then, I wouldn't be afraid to log-in to ubuntu center using plaintext authentication over a public network if my account was limited. Plus, a root account by default seems to be against the linux limited user account philosophy. And besides, being logged in as root constantly is scary ;)

Anyway though, great work! I eagerly await your future releases.

[TTT_travis]

First off, great work! I really love ubuntu center and it really shows a HUGE amount of potential.

Second, limited access accounts, in my opinion, are a must have high priority feature. Then, I wouldn't be afraid to log-in to ubuntu center using plaintext authentication over a public network if my account was limited. Plus, a root account by default seems to be against the linux limited user account philosophy. And besides, being logged in as root constantly is scary ;)

Anyway though, great work! I eagerly await your future releases.

As much as I would love to add this feature it is simply way to hard to do in the applications current state, because Hive bundles other php programs the programs are all written differently, no consistency. Also, when logged into ubuntu center (hive) you can't really do much harm to the the system, the webserver (apache) runs by a limited user called www-data, so the only files www-data can touch is the ones it can access, so folders that are chmod'd 777 or chown'd to www-data.

I use the built in apache authentication because it is pretty strong, if you're worried about sending your passwords plain text it isn't too amazingly hard to install ssl on your server, if you're really worried about security that might be a good idea.

Travis

[foofightrs777]

I was able to install SSL but it doesn't seem to be working atm. I can connect through port 443 but no SSL....

I did this:

edit a system file or edit using vi at the
command line since your already root.

Browse to /etc/apache2/ and open apache2.conf

Locate DirectoryIndex and make sure index.php is in the list.
Should look like this:
DirectoryIndex index.html index.htm index.shtml index.cgi index.php index.pl
index.xhtml

then open /etc/apache2/ports.conf
and add port 443 for SSL

Should look like this:

Listen 80
Listen 443

4. At the command line again type these commands one at a time in this order
(I assume your in the same terminal still as root):

$ a2enmod ssl
$ a2enmod rewrite
$ a2enmod suexec
$ a2enmod include
$ apache2 force-reload

I then editted the .../sites-available/default to point to center.


Am i missing something? I'll continue to look into this.

[TTT_travis]

I wish I could tell you, I am not extremely experienced with using SSL with apache. I suggest checking out the server talk forum or the #apache on freenode irc channel, someone at one of those 2 places would probably help you.

Travis

[foofightrs777]

I have succeded in getting SSL to work. It really wasn't too difficult..I was just being dumb about it. Major thanks to jBilbo.

:-s The above post is for apache1.

A Mini-Howto for apache2: :)

apt-get install apache2
apache2-ssl-certificate
(and answer the questions)

Now, enable ssl:
a2enmod ssl

configure ssl:
cp /etc/apache2/sites-available/default /etc/apache2/sites-available/ssl
ln -s /etc/apache2/sites-available/ssl /etc/apache2/sites-enabled/ssl
"/etc/apache2/sites-enabled/ssl" should look like this:

NameVirtualHost *:443
<VirtualHost *:443>
(... configure the directories too...)
and "/etc/apache2/sites-enabled/default" should look like this:

NameVirtualHost *:80
<VirtualHost *:80>
(... configure the directories too...)
In /etc/apache2/ports.conf, add Listen 443

In the middle of /etc/apache2/sites-available/ssl file, insert this two lines:

SSLEngine On
SSLCertificateFile /etc/apache2/ssl/apache.pem



Additionally, I turned off the listen port 80 in apache2/ports.conf as I won't be using it. No sense having the port listen if it's not going to be used.

I suppose this is a pretty decent work around until limited accounts are supported. This way, no one will sniff my admin password and then delete my 30 gigs of music and photos. :)