SSH access for non root/admin users

[blackstar]

Hi,

When can we expect this feature to finally be available ?

Thank you.

[Kerry]

But isn't the security will be a concern if SSH access is for non admin/root users? If any user login NAS with SSH, the right through SSH is again another topic. Personally, I would not prefer to have SSH right for the other user and he can then fiddle around my NAS. Of course, this is only my personal preference...

[blackstar]

Hi,

The issue for this is that for example when using git as a "master" repository to share projects with people, ssh access quickly becomes an issue because you definitely can't allow someone who is not you to use the root and/or admin account. If security is of any concern to you, that would be going completely the opposite way.

I'd rather have other users with limited access to the NAS via ssh that have them use the root or admin accoutn to be able to pull push data with git !

[Penchant]

But isn't the security will be a concern if SSH access is for non admin/root users? If any user login NAS with SSH, the right through SSH is again another topic. Personally, I would not prefer to have SSH right for the other user and he can then fiddle around my NAS. Of course, this is only my personal preference...

Normal user accounts wouldn't have too much scope to fiddle. They can attack but, if you don't trust them, why give them a login in the first place? The vulnerability's already there with an open ssh port, so you might as well make it useful - especially for git. It's the obvious application for a NAS like this - a no-brainer for a distributed dev team. But, right now, ssh is crippled (and crippled with the unsafe accounts showing...) and installing git's a bit futile.

I think they'd be better off with a much more sophisticated ssh control panel - locked down to start with, with the option to enable on a per-account (or per-group) basis. No root or admin ssh login by default (admin's done via the web portal anyway). Don't allow password-only logins and provide some way for an admin to drop in public keys to user accounts for authentication would be nice. While a sweet little GUI front end on sshd_config would be very cool, it needn't have to be too fancy to be exceptionally useful.

Right now, my Asustor NAS is a bit of a big toy. If I can get ssh access for user accounts, I can make it a real workhorse.

[blackstar]

Hello,

Any news on this subject from the ASUSTOR team.
This is a functionality that was said to be available with the latest release and was not provided.

While we're at it for the git part, anyway to make the paths to sh scripts be the same as on an usual server ? Or make it so the symbolic links created are kept even after reboot ?

Thanks.

[blackstar]

Hello,

This topic was opened a month ago and we still haven't had any reply from the asustor team.
Can we get a reply please ?

Thank you.

[Djuuu]

This topic was opened a month ago and we still haven't had any reply from the asustor team.

Yeah, and this one was 7 months ago!
This is a real bummer for Git (besides being ridiculously wrong when pretending the reason is "security " )