Community Developer
  • Posts

  • Joined

  • Last visited

Everything posted by SlrG

  1. @PlanetDyna Looking at your config and the error message a bit more, I would try to add "RequireValidShell no" to your virtual server config, as the global one probably doesn't carry over. Also following proftpds example sftp conf from here, I would try to remove the "SFTPAuthMethods publickey" clause and add "MaxLoginAttempts 6".
  2. @PlanetDyna That looks as if you didn't add the keyword "ftpuser" in the comment field of your user test, or didn't restart the plugin after creating the user. The plugin prevents "normal" users without the keyword from logging in via FTP by assigning an invalid shell for security reasons.
  3. @kricker I'm glad you got it working. 😀 The number of ports in the range should match the range of ports opened in your router. Of course it would be possible to open more ports than proftpd needs, but that wouldn't really make sense. And going the other way round and declaring ports as open, that really are not, is not advised either. It increases the chance the connection fails, as AFAIK the passive ports are opened randomly and not in order starting with the lowest one.
  4. @solomonshv Thank you very much for your kind words. 🥰 I wish I had time to work on the plugin and remove the old and broken webserver based configuration functionality. I'm very happy it works for you as it is.
  5. @postboy99 It's possible to check if there are users connected and what they are doing by calling /usr/local/SlrG-Common/usr/local/bin/ftptop from a shell.
  6. @bonienl Thank you very much, for answering my request. I'm not set on fork awesome in any way. It was just an example of what could easily be used as open source alternative. If there already is a special font the gui uses, I would really like to apply for the proftpd font icon I designed for fork awesome to be included. I have the permission of the original proftpd author to use it. If there are any changes needed or source files I could supply or a place for me to supply a pull request, please let me know. Or do you know an alternative how I could include an icon in my plugin which is compatible with all available themes? As you already did, I don't want to tag @limetech or @Mex again at the moment. I hope they see this and I get a response. If not, may I ask you later to ask them in my Name if there is a chance? @Squid Thank you for testing. Please see my answer above. Of course I don't want to degrade the unraid icon quality. I would have liked for font awesome to include a proftpd icon, but their prices are insane for me as hobby developer with a non profit plugin. 😢 So I'm searching for alternatives.
  7. @limetech@bonienl I would like to kindly ask for an official answer regarding my feature request: I really think Unraid would benefit from having its own icon font. Maybe it doesn't even need to replace Font Awesome, but could complement it.
  8. @Mr_Jay84 You don't. The functionality is sadly broken since a long time. But you don't really need it anyway. Just use the shell editor of your choice (nano, vi or mc's editor) to edit the proftpd.conf directly. nano /etc/proftpd.conf Check the changes by running: /usr/local/SlrG-Common/usr/local/sbin/proftpd -t -c /etc/proftpd.conf Which will look like this, if no errors are found (the mod_lang message can be ignored). Checking syntax of configuration file 2022-02-09 17:42:39,824 lafiel proftpd[18318] mod_lang/1.1: unable to scan the localised files in '/usr/local/share/locale': No such file or directory Restart the ProFTPd server afterwards in the plugins settings or from the shell for the changes to take effect. /etc/rc.d/rc.ProFTPd restart
  9. @eFrame You seem to be establishing a connection in passive mode. Please make sure you define a passive port range and make sure the firewall on your router opens the passive ftp port range to your server, too. Also you probably need to set a masquerade address (your dyndns hostname or static external ip). Also my usual "disclaimer". I don't recommend for the unraid server to be directly accessible from the internet. IMHO it is better to create a VPN connection to your home network and then using that to connect to your server. Then the VPN handles the encryption and FTP can be used unencrypted. This works only for your own and family devices, however and not if you need other "clients" to connect., too.
  10. @Gee1 I think this is not possible. To be absolutely sure, its probably better to ask in the proftpd forum.
  11. Do you connect as root or as another user? The symlink /etc/proftpd.conf requires root access to be modified. Alternatively you could modify the file in it's storage location /boot/config/plugins/ProFTPd/proftpd.conf.
  12. @KentBrockman I'm glad you are happy. KB/s is Kilo Bytes per Second. 1 Kilo Byte is 1024 Byte and 1 Byte is 8 bit. So 1 KB/s is 8192 bits per second or 8192 bps. Your chosen values of 500 KB/s are 4096000 bps or 4 Mbps and 1000KB/s are 8192000 bps or 8 Mbps. If other things in your network besides your FTP server generate some traffic too, this would probably explain the overhead reported by your router.
  13. @KentBrockman The proftpd version in the plugin is compiled with integrated mod_shaper support. So by editing your proftpd.conf file and adding directives as described in the link you have posted above, you should be able to limit the bandwith proftpd is able to use. An configuration example is given on the bottom of the page you linked. Obviously you will have to modify the paths and directives from the example to suit your needs, but it should get you started. <IfModule mod_shaper.c> ShaperEngine on ShaperLog /var/log/ftpd/shaper.log ShaperTable /var/log/ftpd/ # An overall rate (in KB/s) must be set. This line explicitly # sets both the download and upload rates to be the same. ShaperAll downrate 1500 uprate 1500 # Allow all system users to see shaper info ShaperControlsACLs info allow user * # Allow FTP admins to alter settings both overall and per-session ShaperControlsACLs all,sess allow group ftpadm </IfModule> Don't forget to test your modified configuration. It should give you hints if something is not correctly configured: /usr/local/SlrG-Common/usr/local/sbin/proftpd -c /etc/proftpd.conf -t Also remember to restart the proftpd server from the plugins configuration page for the changes to take effect.
  14. @KluthR Using FTPS is possible, and if you search this thread, you will find infos how to do it, but it is not a very straightforward process and integrating it flawlessly into the plugin wouldn't be easy. More so if LE certificates would be used, as they need to be renewed regularly and the server has to fulfill certain requirements (e.g. fixed public IP) to get a certificate. Also if it works and what is needed to make it work depends heavily on the users personal network setup which come in a multitude of variants. Such "complicated" setups leave the scope of what this plugin is designed for (quick, easy, unencrypted FTP for private networks, tightly integrated into the unraid user management) and I recommend using a docker alternative or setting up a VM which will allow for much more ease and freedom in tinkering with the system. The underlying slackware linux of unraid is very basic and is missing a lot of packages and management tools other distros have by default. As plugins are directly modifying the unraid system any additional package increases the risk to break the base functionality and potentionelly harm the data integrity. Firing up an ubuntu vm with proftpd and gadmin-proftpd gui or using another ftpserver with gui and mounting the shares to be accessed by ftp is much easier and will be more flexible in the long run. Personally for larger projects I like CrushFTP, which is not free however.
  15. @KluthR Thank you very much. I'm happy that you like the plugin. This is a great idea. At the moment the option is broken, but I hope to bring it back/replace it based on stock unraid functionality in the future. I'm still in the research phase however and have so little time besides job and family. Cool idea. I'll put it on my research list, too. While not accessible through the plugins settings page (and you might already know this), but it's possible to check if there are users connected and what they are doing by calling /usr/local/SlrG-Common/usr/local/bin/ftptop from a shell.
  16. @master00 Not within the scope of this plugin. If you setup a vm and install gadmin-proftpd as gui this will come with gprostats as statistics generator. Also there might be other ftp servers more capable but not necessarily free. @kricker The easiest way would be to restore a backup, if you have. Otherwise as there is no recycle bin you can only search and try some linux ways to restore your data. First make sure nothing is written to your array anymore or you will risk the deleted data being overwritten! I had successes using testdisk and photorec on standalone machines, but never had to try on an unraid machine yet. (see this article for other tools: Make sure however, you mount another disk outside of your array as target for all write operations or again you will risk the deleted data being overwritten. Also you will probably need to know on which exact disk the data you want to recover was and then let the tools work on that disk. I hope this ideas are useful, but I fear the chance to recover the data is very slim. 😟
  17. @SvbZ3r0 Yes, sadly the last change by me to solve the problems with quotes and double quotes in filenames is not perfect either and shows the shown symptoms under certain conditions. In all my test there was never data lost, but from time to time these "cosmetic" problems show up. If I have the time, I'll have a look at it again and will try to solve it. Sadly my times is very limited, so please don't expect fast results.
  18. @Berto90vi In unraids user creation screen open your user "x" and put "ftpuser /mnt/user/Download" (without the double quotes) into the Description field. Then apply and restart the proftpd plugin. This will jail the user x into the given directory. It will still have read and write access, however. If you want to restrict that, you will need to configure limits in your proftpd.conf.
  19. Hi, While I really like Font Awesome as an icon provider, I would prefer for it to be switched to a more open source alternative, like Fork Awesome. Or maybe it would be an even better idea to create an own unraid icon font based on Fork Awesome. Developers could then create their own icon for their plugin and it could be added by merging their pull request on the new unraid fonts repository. Please let me know your opinions. Background Story: I'm the developer of the ProFTPD plugin and obviously I would like to use an icon of the official logo for the plugin. In March 2019 I requested the logo to be incorporated in font awesome. But as it was classified as a "brand icon" it would cost 3.000$ to get it included. Even the non brand 300$ would be to much for me. As it is now 2021 I doubt it has a chance to be included for free in the future. Getting it included into fork awesome was much easier. cheers, SlrG
  20. @Flemming See here for the difference between active and passive ftp. For both types normally data ports >1024 are randomly opened. You can restrict the used ports using the PassivePorts directive.
  21. @Flemming Are there any error messages in the syslog when trying to connect?
  22. @Flemming The "Plugin file missing" under Information indicates a failed uninstallation. On why this happened, I have no idea. To get back to a clean state I would the recommend the manual removal and reinstallation described by @kricker. If you have the time to experiment, what happens if you click "update plugin"?
  23. @offroadguy56 Ah I see. I had only tested with root and as that worked I falsely assumed it would work with other users, too. Further testing shows that it would be possible to enable ssh for other users, but it is a complicated multi step process and it would also be reset each boot, so it would require scripting to restore its state and so all in all it is probably too much hassle. The synology in a vm idea sounds very cool. A quick search shows they seem to support FTPS and SFTP and access management for the users. Though such a solution will obviously not be endorsed by Synology without buying their hardware. If you want to continue with the ssh idea, there is the "openssh-server" docker in unraids community applications. If I understand it correctly, this will enable ssh for one user per container and this user will only be able to access what you mount into the container. So you should be able to configure a secure backup access for your friends. Looking at ftp again, that you can use it now is thanks to unraids internal ftp server, as you already noted. The drawback is, that it is unencrypted ftp and always gives access to the complete server. I wrote the proftpd plugin and use it myself for my home network only. Basically it provides unencrypted FTP (like the stock ftp service) but with the added benefit of being able to jail the users into home directories they cant leave and so only have access to what I want them to. While it is possible to open this up to the internet it is in no way recommended because of the default unencrypted connections. Proftpd can be configured to use FTPS or SFTP, but it is sadly complicated and while there are some tips in this thread how to do it, there are cases where it doesn't work and I sadly don't have the time to fully support other users in how to set it up.
  24. @offroadguy56 By the look of your log I doubt you are connecting to the proftpd service. The errors are thrown by unraids sshd service, so I guess you are trying to connect using SFTP which is an entirely different beast using SSH to connect to your server and then using the SFTP protocol to transfer data. (Even called SFTP it is not the same protocol as FTP.) If you want to use this, you have to: remove the ftpuser comment from your user (With this comment given, the user is blocked from logging in and getting a normal shell and will only be allowed to use ftp - this is a security precaution by the plugin.) restart the proftpd service so the user is removed from the jail make sure, you can login with this user using ssh, and get a normal shell setup your ftp client to connect using SFTP Now it should work in theory. Using this connection type you don't need the proftpd plugin and can remove it.
  25. @cinereus In your last post you mentioned, that and that the path repo suggested to use cpg and mvg as the command names.