Table of Contents
Advertisement
Aspera uses a specially configured system user for SSH authentication when starting transfers.
Note: If this user will be associated with Node API credentials that will be used to create access keys or bearer
tokens, either do not set a password for the user or create a very large password.
Create a user account—for example, aspera_user_1—by running the following command:
# useradd aspera_user_1
3. Restrict the system user's access to the server's file system.
If the Node API user will use access key or bearer token authentication to authenticate to the Node API, configure
a restriction for the system user. If the Node API user will use Node API credentials to authenticate to the Node
API, configure a docroot for the system user.
•
To configure a restriction:
Run the following command:
# asconfigurator -x
"set_user_data;user_name,username;file_restriction,|restriction"
Where username is the system user's username, | is a delimiter, and restriction is specific to the storage type
and path:
Storage Type
local storage
Amazon S3 and IBM Cloud Object Storage - S3
Azure
Azure Files
Azure Data Lake Storage
Alibaba Cloud
Google Cloud
HDFS
•
To configure a docroot:
Run the following command:
# asconfigurator -x "set_user_data;user_name,username;absolute,docroot"
Where username is the system user's username and docroot is the absolute path to which the system user has
access.
4. Restrict user permissions with aspshell.
By default, all system users can establish a FASP connection and are only restricted by file permissions. Restrict
the user's file operations by assigning them to use aspshell, which permits only the following operations:
•
Running Aspera uploads and downloads to or from this computer.
•
Establishing connections in the application.
| Set up HST Server for Node API | 273
Format Example
For Unix-like OS:
•
specific folder: file:////folder/*
•
drive root: file:////*
For Windows OS:
•
specific folder: file:///c%3A/folder/*
•
drive root: file:///c*
s3://*
azu://*
azure-files://*
adl://*
oss://*
gs://*
hdfs://*
Hide quick links:
Advertisement
Table of Contents
Troubleshooting
