SlrG

Community Developer
  • Posts

    584
  • Joined

  • Last visited

  • Days Won

    1

Everything posted by SlrG

  1. @Flemming Are there any error messages in the syslog when trying to connect?
  2. @Flemming The "Plugin file missing" under Information indicates a failed uninstallation. On why this happened, I have no idea. To get back to a clean state I would the recommend the manual removal and reinstallation described by @kricker. If you have the time to experiment, what happens if you click "update plugin"?
  3. @offroadguy56 Ah I see. I had only tested with root and as that worked I falsely assumed it would work with other users, too. Further testing shows that it would be possible to enable ssh for other users, but it is a complicated multi step process and it would also be reset each boot, so it would require scripting to restore its state and so all in all it is probably too much hassle. The synology in a vm idea sounds very cool. A quick search shows they seem to support FTPS and SFTP and access management for the users. Though such a solution will obviously not be endorsed by Synology without buying their hardware. If you want to continue with the ssh idea, there is the "openssh-server" docker in unraids community applications. If I understand it correctly, this will enable ssh for one user per container and this user will only be able to access what you mount into the container. So you should be able to configure a secure backup access for your friends. Looking at ftp again, that you can use it now is thanks to unraids internal ftp server, as you already noted. The drawback is, that it is unencrypted ftp and always gives access to the complete server. I wrote the proftpd plugin and use it myself for my home network only. Basically it provides unencrypted FTP (like the stock ftp service) but with the added benefit of being able to jail the users into home directories they cant leave and so only have access to what I want them to. While it is possible to open this up to the internet it is in no way recommended because of the default unencrypted connections. Proftpd can be configured to use FTPS or SFTP, but it is sadly complicated and while there are some tips in this thread how to do it, there are cases where it doesn't work and I sadly don't have the time to fully support other users in how to set it up.
  4. @offroadguy56 By the look of your log I doubt you are connecting to the proftpd service. The errors are thrown by unraids sshd service, so I guess you are trying to connect using SFTP which is an entirely different beast using SSH to connect to your server and then using the SFTP protocol to transfer data. (Even called SFTP it is not the same protocol as FTP.) If you want to use this, you have to: remove the ftpuser comment from your user (With this comment given, the user is blocked from logging in and getting a normal shell and will only be allowed to use ftp - this is a security precaution by the plugin.) restart the proftpd service so the user is removed from the jail make sure, you can login with this user using ssh, and get a normal shell setup your ftp client to connect using SFTP Now it should work in theory. Using this connection type you don't need the proftpd plugin and can remove it.
  5. @cinereus In your last post you mentioned, that and that the path repo suggested to use cpg and mvg as the command names.
  6. @KUMAR @kricker Thank you very much for noticing the problem and providing a solution. I had removed the configuration directive on my system (so the problem did not hit me), but forgot to remove it from the default config file provided with the plugin. 😢 I released a new version which fixes that and also removes the directive from existing configs (if found).
  7. @thymon My recommendation is to never connect your unRAID server directly to the internet. Always use a vpn (openvpn, wireguard) to connect to your home network from other sites and then you can directly access any device as if you were in the same network. In some cases this is not possible however. Then never use the ftp default port 21 facing the internet! Define port forwarding rules on your router/firewall, which will forward outside traffic from a private port between 49152 and 65535 to your internal port 21 on the unRAID server. This will stop the most crawlers from automatically recognizing and attacking your ftp server. Be aware however, that by default FTP is an unencrypted and unsecure protocol. You can try to enable encryption (search this thread on how to do this - its no easy process however) or find other means to securely backup your wordpress.
  8. @Autchirion A future update probably will. It will not be the next one however. That will bring the current proftpd version and fix some underlying ownership and permission problems (not noticeable to the user). Sadly my time to work on this plugin is extremely limited. 😢 The only workaround at the moment is to switch to light mode, change the settings and return to dark mode. I know this sucks, but as it is not often necessary to change the config of the plugin it's not a critical problem.
  9. @Meller As Squid noticed, I have deprecated the glftpd docker. The last change I did on it, was 6 years ago. I sadly don't have much time to develop things any longer and have to pick carefully which projects I support. Being that old, it probably contains a lot of bugs and or security problems. Also I didn't want users looking for ftp in CA to install it and then be disappointed that it is that old and unsupported. The dockerfile and scripts are still on my github however, if someone wishes to pick it up and work on it, feel free to do so!
  10. @soder Sorry for the late reply. I hope you have not lost any data. I have a bit of trouble to understand, what you really want to do. If you want your ftp user to access your media share, you could indeed setup the user to be jailed into that directory. Or don't jail the user at all and give him access to the whole server like the default unraid ftp does. A third possibility is to mount your media share into the folder used for the ftp jail directory. Of course a proper rights management is key here, or the user will have the chance to delete all your media files or more. So I would only recommend it, if you are the only one using this ftp user. The third possibility and mounting read only is probably the safest way to handle this, if you want other users besides yourself to access the files. Where you create the FTP base folder is mostly a matter of taste. If you create it on the cache only, writing to it, but not to the mounted media files inside will be faster, as if you put it on the array directly. In most cases the speed will be about the same however, as through the mount, the array will be accessed anyway. Also please don't just create folders in the root of the cache directory from the shell. Always use unraids share management to do this. Set the FTP share to cache only and don't change this later on, as it will result in the situation you described. This is however an unraid "problem" and how it handles things between cache drive and the array and not related to the plugin itself. The only solutions to not run into it, would be to jail into the media share folder itself (be aware of the risk described above) or mount some drive outside the array and place the FTP folder on that.
  11. @DovahDovolom Are these three files all the same file for testing purposes, or are there differences? Above I asked you to change the order of the files you try to transfer. If the "third" file always stops, please try to transfer that as the first file and the other ones later. Does it work then or does it still fail? Is it possible to copy the file to another location in a shell without using proftpd without problems? To enable debug logging see here.
  12. @DovahDovolom Are there any error messages in the syslog when the transfer stops for the third file? What happens if you try to transfer only the third file? What happens if you transfer the files one by one? What happens if you run a linux vm or another machine, with proftpd installed and copy the files using that?
  13. @all Released a new version and renamed the commands from gcp and gmv to cpg and mvg. If you have shell aliases please update them accordingly! @bubbaQ If you still have those large testfiles and the freetime, could you give the new version a spin? I don't expect problems, but sometimes tests on one (my) system don't match others. Thank you very much!
  14. @SkinnySkelly I'm glad you got it working. Default location for config files is /etc/. So the "correct" way would be to edit /etc/proftpd. conf. This is a symlink to the file you mentioned on the flash however, so it doesn't really matter.
  15. @Obscuritas The error message indicates permission problems. What are the linux user and permissions for the folder where you want to upload the file? Default unRAID user and permissions are user:nobody group: users and u-x,go-rwx,go+u,ugo+X. You can achieve this by running the newperms script for that directory e. g. newperms /mnt/user/targetdir.
  16. @Gee1 Another idea is to create a virtual host with an IP address instead of a FQDN (see here). If this doesn't work, I'm sadly out of ideas, sorry. Maybe you could try to ask on the ProFTPd forum?
  17. Hmm... It was enabled by default in previous versions. It must have changed somewhere along the way. Thank you for the bug report. I'll try to fix it in a future version. It can take a while however as I have little to no time.
  18. @Retrogamer137 This is the support thread, but I'm not reading it regularly and depend on the notifications mostly. Sometimes they sadly fail. I got no info on your first post, but for the second one it worked. To answer your questions, stopping and restarting the array will stop and restart the plugin, too. So is it really crashing or are you "killing" it manually? Under normal circumstances however, the plugin should start automatically, when the array is started again. So if you have to manually restart it, something is indeed going wrong. (A bit of explanation: In stopped array mode, only the flash and no user or disk shares are accessible. No shares means, no sources available to read or write and so it wouldn't make sense to keep the plugin running.) As there are no shares available when stopped, it makes me wonder if your symlink will really work, if you start and stop the array manually? If you have still trouble, I'll need your diagnostics file, to try and find the reason.
  19. @Gee1: It did not try, but maybe this is what you want: http://www.proftpd.org/docs/directives/linked/config_ref_DefaultAddress.html
  20. @Gee1 Maybe you could try to "mount --bind /mnt/user0/Filme /mnt/cache/FTP/Gee/Filme" instead. Does it move the files faster then? The drawback will be, that your FTP users will not be able to access the new files until the mover has moved them from the cache to the array. Or you could try to place the homedir of the user on the array and not on the cache: "mount --bind /mnt/user/Filme /mnt/FTP/Gee/Filme". Also you could try to setup the user without jailing them into a home directory, then you won't need the bind mound. To limit what the user can access use directory and limit directives instead.
  21. @cjm187 I'm personally not using sftp and I don't have the time at the moment to try the whole process again. I remember ssh-keygen was broken on some unRAID version, which number, I don't remember anymore. I also don't know if it still might be. The certificates it generated required a password, even if no passphrase was given, which broke what was described above. The solution was, to generate the certificates on another linux machine. Maybe that is the reason it fails for you. Also try to syntax check the config file and look for error messages, when trying to start the service from the command line. Test config: /usr/local/SlrG-Common/usr/local/sbin/proftpd -c /etc/proftpd.conf -t Test config with debug level 10: /usr/local/SlrG-Common/usr/local/sbin/proftpd -c /etc/proftpd.conf -td10 Run normally outputting messages to console: /usr/local/SlrG-Common/usr/local/sbin/proftpd -c /etc/proftpd.conf @Robot Porcupine The default ftp setup doesn't use sftp. Did you try to connect without encryption? The first step should be to get it working unencrypted and then one can start trying to make it work encrypted. If that is not the problem, please search the thread for info on how to debug problems. Encryption is not easy to setup however, so I recommend to setup a vpn or wireguard instead and use that to connect to the server. Afterwards it is no Problem to use unencrypted ftp over the encrypted vpn connection. Or setup a vm, where you are much more flexible in setting up a FTP server.
  22. It should work using the directory directive, with limit section and allow user rule. Put them into your /etc/proftpd.conf file, make sure the files exist and reboot the proftpd service in the plugins settings. <Directory /path/to/user1file> <Limit ALL> AllowUser user1 DenyAll </Limit> </Directory> <Directory /path/to/user2file> <Limit ALL> AllowUser user2 DenyAll </Limit> </Directory> <Directory /path/to/sharedfile> <Limit ALL> AllowUser user1 AllowUser user2 DenyAll </Limit> </Directory>
  23. @fabrizzium Sadly the web editing functionality for the proftpd.conf file is broken. Please leave the webserver usage disabled and edit it manually using the shell. (nano /etc/proftpd.conf) @Pducharme Technically it is implemented. First it worked using the default unraid webserver, until security measures made the plugin unable to use it. Afterwards it required the apache webserver plugin (docker did not work). Development on that one stopped however and I was not able to find another way to get it working again. So it is implemented but broken.
  24. @Kevin who Yes it is, if you don't define a directory to jail your user into. Please check the readme.
  25. Well if the download fails, it is often because of dns or firewall issues. Can you download things from github to the server manually from the command line with wget? Are there any error messages if you try? The current download paths are: https://github.com/SlrG/unRAID/raw/master/Plugins/ProFTPd.plg https://github.com/SlrG/unRAID/raw/master/AppSupport/ProFTPd/ProFTPd-SlrG-Control-1.7.tar.gz https://github.com/SlrG/unRAID/raw/master/AppSupport/ProFTPd/ProFTPd-SlrG-Dependency-1.7_x64.tar.gz If you download the last two into /boot/config/plugins/ProFTPd, it should start working, too.