NSF File Server
This project is a Domino HTTP OSGi application that that launches an SFTP server backed by one or more NSFs, storing the files and directories as user-side documents.
Configuration
The server is configured by creating a database using the included “fileserverconfig.ntf” template and placing it in the root of the server's data directory as “fileserverconfig.nsf”. The path to the config NSF can be overridden using the SFTPConfigPath notes.ini parameter.
Inside the config NSF, you can specify per-server configuration for whether to enable the service and which port to use, as well as the sub directory “mounts” that will appear as the root of the SFTP server and a JSON-formatted configuration for the “env” property of the call to create the filesystem in Java.
There are currently four types supported:
NSF Document Layout
This is an NSF database created using the included “filestore.ntf”. This stores files as individual documents with the file data as attachments, presenting a POSIX-like view of these documents in a hierarchy. The Data Source value for these should be the path to the NSF, such as “store/docs.nsf”.
These NSFs are accessed as the connecting user, and so ACLs are enforced.
NSF WebContent
This represents the “WebContent” pseudo-directory in an NSF's design, useful for manipulating and deploying file resources meant for web use, such as built JavaScript applications or other resources.
Server Filesystem
This is a mount from the local server filesystem, where the Data Source is an OS-dependent file path such as “C:\docs” or “/home/notes”.
The filesystem is accessed as the user Domino is running as.
Generic URIs
These URIs are passed to Java's NIO FileSystem class as-is, with a parsed version of the Environment configuration. The supported types depend on what's available in the JVM, but currently the standard types are local filesystems (better handled above for Windows) and ZIP files.
To open a ZIP or JAR file, specify a URL like “jar:file:///C:/somefile.zip!/” and specify an environment configuration like {"create":"true","encoding":"utf-8"}. This is described somewhat more in the official Java documentation.
Authentication
The spawned SSH server uses the current server's Domino directories for authentication. It supports two methods:
- RSA public key authentication using a public key stored in the “sshPublicKey” item in the user's person document. This should be a text item containing the same contents as a “id_rsa.pub” file from OpenSSH, and it can be multi-value via line breaks
- Password authentication using the same mechanism as HTTP password auth. This method is off by default
Building
Compilation requires the availability of an NSF ODP Tooling environment.
Extending
New filesystem mount types can be introduced by registering an instance of org.openntf.nsffile.ssh.spi.FileSystemMountProvider via the IBM Commons ExtensionManager system (i.e. plugin.xml entries on Domino). These implementations provide a name that can be specified in the NSF as well as a data source whose meaning depends on the provider. The incoming env object will be pre-populated with a “username” key mapped to the authenticated username as a string.
License
The code in the project is licensed under the Apache License 2.0. The dependencies in the binary distribution are licensed under compatible licenses - see NOTICE for details.