Skip to content

Commit

Permalink
* Fix various issues.
Browse files Browse the repository at this point in the history
* Add hint how to to become an administrator as non-privileged users.

Signed-off-by: Volker Theile <volker.theile@openmediavault.org>
  • Loading branch information
votdev committed Aug 10, 2020
1 parent 9c6c842 commit e7c195e
Show file tree
Hide file tree
Showing 6 changed files with 24 additions and 12 deletions.
10 changes: 10 additions & 0 deletions .editorconfig
Original file line number Diff line number Diff line change
@@ -0,0 +1,10 @@
# EditorConfig is awesome: http://EditorConfig.org
root = true

[*]
charset = utf-8
indent_style = tab
indent_size = 4
insert_final_newline = true
trim_trailing_whitespace = true
end_of_line = lf
3 changes: 2 additions & 1 deletion administration/access_rights_management.rst
Original file line number Diff line number Diff line change
Expand Up @@ -40,7 +40,8 @@ Public Key

- The user profile information (except password) is also stored in the internal |omv| database, along with the public keys.
- The grid shows information from internal database and also parses information from :file:`/etc/passwd` lines with a `UID` number higher than 1000. A user created in terminal is not in the internal database. This causes trouble with samba, as there is no user/password entry in the tdbsam file. Just click edit for the user, enter the same or new password, now the user has the linux and samba password synced.
- A user can log into the web interface to see their own profile information. Depending if the adminstrator has setup the username account to allow changes, they can change their password and mail account.
- A user can log into the |webui| to see their own profile information. Depending if the administrator has setup the username account to allow changes, they can change their password and mail account.
- A non-privileged user can become a |webui| administrator by adding them to the ``openmediavault-admin`` group.

Import
^^^^^^
Expand Down
11 changes: 6 additions & 5 deletions faq.rst
Original file line number Diff line number Diff line change
Expand Up @@ -26,13 +26,14 @@ Can I use a usb flash drive (stick) for installing the system?
What are the default credentials for the UI?
Use the user 'admin' and the password 'openmediavault' for the first login.

Can I give access to non-admin users to the web control panel?
No. By default non-admin users can only access their account profile, they can change
password and their email address if the admin has allowed changes on their account.
Can I give administrator privileges to non-privileged users to access the web control panel?
Yes. By default non-privileged users can only access their account profile, they can change
password and their email address if the administrator has allowed changes on their account.
However the current |webui| framework is designed for developers to create plugins where
they can give limited or full access to non-admin users to their plugin. An example is in the
they can give limited or full access to non-privileged users. An example is the
`openvpn plugin <https://github.com/OpenMediaVault-Plugin-Developers/openmediavault-openvpn>`_
by omv-extras.
by `omv-extras.org <https://omv-extras.org>`_.
A non-privileged user can become a |webui| administrator by adding them to the ``openmediavault-admin`` group.

What is the file :file:`/etc/openmediavault/config.xml` for?
It is the database configuration store file for |omv|. When a change is
Expand Down
6 changes: 3 additions & 3 deletions features.rst
Original file line number Diff line number Diff line change
Expand Up @@ -7,11 +7,11 @@ System
General settings
----------------

**General settings:** Change |webui| listening port, SSL and force SSL. Change admin password
**General settings:** Change |webui| listening port, SSL and force SSL. Change admin password.

**Notification system:** Integrated into several services in the form of email using Postfix [1]_ backend as MTA, these include scheduled tasks, services monitoring, S.M.A.R.T., MDADM and cron-apt. Since |omv| 3.0 is possible to add also third party notification systems by using scripts, more information `here <https://github.com/openmediavault/openmediavault/blob/master/deb/openmediavault/usr/share/openmediavault/notification/sink.d/README>`_ and real example on how to use it `here <https://forum.openmediavault.org/index.php/Thread/14919-GUIDE-Use-Telegram-as-notification-service/>`_.

**Network configuration:** The web interface provides configuration options for ethernet, WiFi (only WPA/WPA2 supported), bond and vlan interfaces. This also includes a panel for firewall configuration.
**Network configuration:** The |webui| provides configuration options for ethernet, WiFi (only WPA/WPA2 supported), bond and vlan interfaces. This also includes a panel for firewall configuration.

**Certificates:** Create or import existing SSL and SSH certificates. This certificates can be used for securing the |webui| or SSH access. Plugins can use the backend framework to select the available certificates.

Expand All @@ -28,7 +28,7 @@ Storage

**S.M.A.R.T.:** Based on smartmontools [3]_, It can display advanced information of S.M.A.R.T values in the webUI. It can also schedule health tests as well as send notifications when S.M.A.R.T. attributes values change.

**RAID Management:** Based Linux RAID [4]_, create arrays in 6 different configurations. Levels available are linear, 0, 1, 10, 5 and 6. The array can have disks removed or expanded using the web interface.
**RAID Management:** Based Linux RAID [4]_, create arrays in 6 different configurations. Levels available are linear, 0, 1, 10, 5 and 6. The array can have disks removed or expanded using the |webui|.

**File Systems:** Volume format, device mount and unmount. More information in the :doc:`filesystem section </administration/storage/filesystems>`.

Expand Down
2 changes: 1 addition & 1 deletion howitworks.rst
Original file line number Diff line number Diff line change
Expand Up @@ -156,7 +156,7 @@ Why is zeroconf marked dirty?
Because the samba |omv| `code <https://github.com/openmediavault/openmediavault/blob/a846afb5a648cb89b2dad0fdf25ee7b261d89a78/deb/openmediavault/usr/share/openmediavault/engined/module/samba.inc#L266-L269>`_ indicates that whenever a change is performed in this section, zeroconf must be marked dirty. This is by design, avahi is configured to announce samba server if is enabled, so needs to know if |omv| Samba server is enabled or disabled. If the database shows it is disabled the avahi servie file will be removed
The module backend is something all plugins can use. For example, a plugin that wants to use the privilege database model will have to listen to any changes in the |sf| database so it can reconfigure its files acordingly.

What can break the web interface?
What can break the |webui|?
As explained, the |webui| depends on several third party software components.

1 - Nginx http engine. The web server software is very sensitive to any syntax mistakes in ``sites-available`` folder. Any files there that do not pass syntax check will result in a fail to restart/reload nginx daemon. Also editing the openmediavault-webui nginx file improperly will result in failure. Nothing will be displayed by the browser, it will just say "Connection refused", as there is no software running on the http port.
Expand Down
4 changes: 2 additions & 2 deletions releases.rst
Original file line number Diff line number Diff line change
Expand Up @@ -13,6 +13,6 @@ Releases
1.0,Kralizec,Debian 7,EOL,Sept 2014
2.0,Stoneburner,Debian 7,EOL,Jun 2015
3.0,Erasmus,Debian 8,EOL,Jun 2016
4.0,Arrakis,Debian 9,Oldstable (EOL 30.06.2020),Apr 2018
4.0,Arrakis,Debian 9,EOL,Apr 2018
5.0,Usul,Debian 10,Stable,Mar 2020
6.0,xxx,Debian 1x,In Development,est. Q1/2021
6.0,xxx,Debian 1x,In Development,est. Q2/2021

0 comments on commit e7c195e

Please sign in to comment.