free
/
freedombone
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Add users via the control panel

This commit is contained in:
Bob Mottram 2015-11-03 20:02:14 +00:00
parent 1f15905720
commit c40de1dda6
2 changed files with 26 additions and 22 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
doc/EN/faq.org
View File

@ -40,27 +40,29 @@ It was originally designed to run on the Beaglebone Black, but that should be re
/Out of fashion/ but still working computer hardware tends to be cheap and readily available, yet still good for providing internet services. /Out of fashion/ but still working computer hardware tends to be cheap and readily available, yet still good for providing internet services.
* Can I add more users to the system? * Can I add more users to the system?
Yes. Freedombone can support a small number of users, for a "/friends and family/" type of home installation. This gives them access to an email account, XMPP, SIP phone and the blog (depending on whether the variant which you installed includes those). To add a user login as root then run the command: Yes. Freedombone can support a small number of users, for a "/friends and family/" type of home installation. This gives them access to an email account, XMPP, SIP phone and the blog (depending on whether the variant which you installed includes those).
#+BEGIN_SRC bash #+BEGIN_SRC bash
freedombone-adduser [username] ssh username@mydomainname -p 2222
su
control
#+END_SRC #+END_SRC
Or optionally with an /ssh public key/, given either as a filename or directly pasted. Specifying an ssh key will allow the user to log in more securely if they wish to use the Mutt email client. Select /Manage Users/ and then /Add a user/. You will be prompted for a username and you can also optionally provide their ssh public key.
#+BEGIN_SRC bash
freedombone-adduser [username] [ssh public key]
#+END_SRC
Something to consider when having more than a single user on the system is the security situation. The original administrator user will have access to all of the data for other users (including their encryption keys), so if you do add extra users they need to have *complete trust* in the administrator. Something to consider when having more than a single user on the system is the security situation. The original administrator user will have access to all of the data for other users (including their encryption keys), so if you do add extra users they need to have *complete trust* in the administrator.
Another point is that Freedombone installations are not intended to support many users (maybe ten at most). Large numbers of users may make the system unstable, and the more users you have on one system the more it becomes a single point of failure and also perhaps a honeypot from the standpoint of adversaries. Think of what happened with Lavabit and the moral dilemma which an administrator can be faced with (comply with threats and betray the trust of your users or don't comply and suffer other consequences). Ideally, you never want to put yourself into a situation where you can be forced to betray others. Another point is that Freedombone installations are not intended to support many users (maybe ten at most). Large numbers of users may make the system unstable, and the more users you have on one system the more it becomes a single point of failure and also perhaps a honeypot from the standpoint of adversaries. Think of what happened with Lavabit and the moral dilemma which an administrator can be faced with (comply with threats and betray the trust of your users or don't comply and suffer other consequences). Ideally, you never want to put yourself into a situation where you can be forced to betray others.
* How do I remove a user from the system? * How do I remove a user from the system?
To remove a user login as root then run the command: To remove a user:
#+BEGIN_SRC bash #+BEGIN_SRC bash
freedombone-rmuser [username] ssh username@mydomainname -p 2222
su
control
#+END_SRC #+END_SRC
Select /Manage Users/ and then /Delete a user/. Note that this will delete all of that user's files and email.
* How do I reset the tripwire? * How do I reset the tripwire?
The tripwire will be automatically reset once per week. If you want to reset it earlier then do the following: The tripwire will be automatically reset once per week. If you want to reset it earlier then do the following:

26
website/EN/faq.html
View File

@ -4,7 +4,7 @@
<html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"> <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en">
<head> <head>
<title></title> <title></title>
<!-- 2015-11-03 Tue 19:54 --> <!-- 2015-11-03 Tue 20:01 -->
<meta http-equiv="Content-Type" content="text/html;charset=utf-8" /> <meta http-equiv="Content-Type" content="text/html;charset=utf-8" />
<meta name="generator" content="Org-mode" /> <meta name="generator" content="Org-mode" />
<meta name="author" content="Bob Mottram" /> <meta name="author" content="Bob Mottram" />
@ -277,25 +277,21 @@ It was originally designed to run on the Beaglebone Black, but that should be re
<h2 id="orgheadline4">Can I add more users to the system?</h2> <h2 id="orgheadline4">Can I add more users to the system?</h2>
<div class="outline-text-2" id="text-orgheadline4"> <div class="outline-text-2" id="text-orgheadline4">
<p> <p>
Yes. Freedombone can support a small number of users, for a "<i>friends and family</i>" type of home installation. This gives them access to an email account, XMPP, SIP phone and the blog (depending on whether the variant which you installed includes those). To add a user login as root then run the command: Yes. Freedombone can support a small number of users, for a "<i>friends and family</i>" type of home installation. This gives them access to an email account, XMPP, SIP phone and the blog (depending on whether the variant which you installed includes those).
</p> </p>
<div class="org-src-container"> <div class="org-src-container">
<pre class="src src-bash">freedombone-adduser [username] <pre class="src src-bash">ssh username@mydomainname -p 2222
su
control
</pre> </pre>
</div> </div>
<p> <p>
Or optionally with an <i>ssh public key</i>, given either as a filename or directly pasted. Specifying an ssh key will allow the user to log in more securely if they wish to use the Mutt email client. Select <i>Manage Users</i> and then <i>Add a user</i>. You will be prompted for a username and you can also optionally provide their ssh public key.
</p> </p>
<div class="org-src-container">
<pre class="src src-bash">freedombone-adduser [username] [ssh public key]
</pre>
</div>
<p> <p>
Something to consider when having more than a single user on the system is the security situation. The original administrator user will have access to all of the data for other users (including their encryption keys), so if you do add extra users they need to have <b>complete trust</b> in the administrator. Something to consider when having more than a single user on the system is the security situation. The original administrator user will have access to all of the data for other users (including their encryption keys), so if you do add extra users they need to have <b>complete trust</b> in the administrator.
</p> </p>
@ -309,14 +305,20 @@ Another point is that Freedombone installations are not intended to support many
<h2 id="orgheadline5">How do I remove a user from the system?</h2> <h2 id="orgheadline5">How do I remove a user from the system?</h2>
<div class="outline-text-2" id="text-orgheadline5"> <div class="outline-text-2" id="text-orgheadline5">
<p> <p>
To remove a user login as root then run the command: To remove a user:
</p> </p>
<div class="org-src-container"> <div class="org-src-container">
<pre class="src src-bash">freedombone-rmuser [username] <pre class="src src-bash">ssh username@mydomainname -p 2222
su
control
</pre> </pre>
</div> </div>
<p>
Select <i>Manage Users</i> and then <i>Delete a user</i>. Note that this will delete all of that user's files and email.
</p>
</div> </div>
</div> </div>
<div id="outline-container-orgheadline6" class="outline-2"> <div id="outline-container-orgheadline6" class="outline-2">