Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I have installed NAS sever which is accessible from Internet by SFTP with certificate authentication. but I have a challenge:

I want to control who is using my server but If I send a certificate+username+server to a specific user, the receiver or user can share this information with everyone without us knowing, so we can not control who is using our server. is there any solution for it? if I can not exactly figure out who is using, at least I want to block sharing the username+password+certificate and use better solution than simple username and password. (should I use VPN? or hardware authenticators? software authenticators? using mac address?)

share|improve this question
    
What are you using for a NAS server? Have you checked the documentation to find out if there are other authentication methods? –  Taegost Jul 25 '13 at 13:27
    
sorry I don't understand what you mean by your question: what are you using for a NAS server? Do you mean which protocol I use? –  user240710 Jul 26 '13 at 8:16
    
You said you installed a NAS server... What are you using? Is it dedicated NAS hardware? An actual server? A workstation that you call a NAS? What's the model... Based on your response to my question, the answer would be that you hadn't checked the documentaiton... –  Taegost Jul 29 '13 at 14:09
    
My NAS server is a dedicated NAS hardware (Diskstation) –  user240710 Jul 30 '13 at 12:13
    
You still haven't fully answered my questions. Did you check the documentation? and what is the model? –  Taegost Jul 30 '13 at 13:41

1 Answer 1

UPDATE:

In the end, if you can't trust the users of your system, they will find a way to thwart whatever security mechanism you put in place. It's just that simple.

As the saying goes, loose lips sink ships.

On that note, you can make it harder for them to do so. Based on what you have described the only thing I can think of at the moment that would be feasible for you is some kind of one-time authentication system or maybe even smart card authentication. However, even these solutions are probably overkill for protecting a "NAS". That and the chances of the NAS software/firmware supporting these features is unlikely.

ORIGINAL ANSWER:

If the device supports it you could setup an IP address whitelist, though this isn't completely full proof. It would still allow anyone behind a given address access to your server. It does prevent everyone else though.

share|improve this answer
    
Thank you for your comment. Yes, Apparently there is no solution to recognize who exactly connect to server. Do you know any solution for blocking users to share their username and password to someone else... I mean I am looking for a solution better than username and password... –  user240710 Jul 26 '13 at 8:20
    
Actually my question is: My question is: I have a NAS server which I put all my files in it and I want to let some specific users to connect to my NAS server with SFTP protocol and upload or download files from my server.... so I am looking for the best security solution for Authenticate them (not just simple username and password) and encryption.... do you have any solution? –  user240710 Jul 26 '13 at 8:30
    
@user240710 See updated answer –  dtmland Jul 26 '13 at 14:48

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.