FTP server in 6.9.2 allows write access to shares it shouldn't.

[dlandon]

On 1/20/2022 at 7:11 AM, IMTheNachoMan said:

 

Can you elaborate on what adaption? I can make changes if there is a different way I need to do something? I just started using Unraid and don't fully understand the code architecture. Happy to make changes as needed.

I think it's more related to incorporation into the WebUI.  We'll get back once we are ready.

 

Please don't view this response as we are not interested in your issue.  I think it's a good idea.  The problem right now is Limetech is undergoing some serious growth and we are working behind the scenes to get more organized and responsive to requests like yours.

[IMTheNachoMan]

9 hours ago, dlandon said:

Please don't view this response as we are not interested in your issue. 

 

I don't. I know y'all are busy. And, if I am being honest, I think y'all way undercharge for Unraid so I am sure you have more work than you have resources/developers to do. So I understand it takes time to incorporate user changes. I've been working on another enhancement to the rclone plugin with a webUI for creating/configuring jobs. I'll hold on developing that until y'all release the new update. Thanks!

[dlandon]

2 hours ago, IMTheNachoMan said:

And, if I am being honest, I think y'all way undercharge for Unraid

Don't hear that very often.

[JonathanM]

2 hours ago, IMTheNachoMan said:

I think y'all way undercharge for Unraid

Nothing stopping you from purchasing another pro license if it makes you feel better. 🤣

[IMTheNachoMan]

On 1/23/2022 at 7:57 PM, dlandon said:

Don't hear that very often.

 

I'm on the inside of software development so I know what it takes to develop, launch, and maintain a product. 

 

On 1/23/2022 at 8:06 PM, JonathanM said:

Nothing stopping you from purchasing another pro license if it makes you feel better. 🤣

 

Ha. I could. But -- and I am assuming that Limetech doesn't have enough $ to operate at peak efficiency -- me paying more doesn't help the bigger problem. I do have a yearly process to donate to various tools I use so maybe I'll add Unraid to the list.

[Dr4g3r]

Hello!

 

Sorry for bring this topic again, but i need one information.

Actually i need a ftp or a secure ftp, because is the fastest way to share files online with people that don't understand nothing about computers. I just send the link, and people can download whatever they want like ftp://domain_name/shared_folder

 

I enable the build in ftp server and on ftp user(s) i insert the user name that i have (without any password) just for read two folders like the image below:

 

 

On shares i have this user with this permissions:

 

 

when i tried to use ftp server, i can't. Ask me for a password, that i don't have, and when i insert anonymous login, just appear one windows that said "i don't have permission to access folder".

 

I need access to these two folders that i have only with read-only permission and without any password. Just login anonymously

 

Thanks in advanced

[Kilrah]

The built-in FTP server can't do that for you, from the help text on the ftp settings page:

 

Quote

Unraid OS includes the popular vsftpd FTP server. The configuration of vsftp is currently very simple: All user names entered above are permitted to access the server via FTP and will have full read/write/delete access to the entire server, so use with caution.

 

[Dr4g3r]

Any advice with some app that can do what i want?

 

Thanks in advanced;

[Kilrah]

There are ftp server containers you can configure however you want.

ftp's pretty unfriendly though, if you send someone an ftp:// link most of the times these days they won't be able to download them without installing an ftp client and manually browsing to the location as most browsers have removed ftp support.

[Dr4g3r]

I always use this protocol without any problems. 

I'm not use with browsers, but with explorer.exe and work very fine.

 

Btw.... if you need to give access to someone without any password to two shared folder, what's protocol is the "easiest" to use?

[Kilrah]

Depends, are they folders with existing stuff on your sever or some you'd put in new stuff as required?

[Dr4g3r]

Just now, Kilrah said:

Depends, are they folders with existing stuff on your sever or some you'd put in new stuff as required?

 

I have both scenarios. Right now, i'm using folders with files, but in the future i want to add some files to shared folders without any passwords or logins. Just a dns that redirect to my shared folder.

[Kilrah]

To share stuff as a one-off in Wetransfer fashion I like Pingvin Share.

To share existing folders miniserve seems perfect. Gonna make a template for it

[Dr4g3r]

7 minutes ago, Kilrah said:

To share stuff as a one-off in Wetransfer fashion I like Pingvin Share.

To share existing folders miniserve seems perfect. Gonna make a template for it

 

Can you make a tutorial, or something like that.

 

I can tell you what i need and i think for most of people that use unraid it's a must (i use qnap, but change to unraid, but the change is dificult).

 

I have some VM's with 100GB that i need to share with two or three persons. That people don't want any logins or password to download it, because we already have our private secure thing. Is just to make "click" on a link like a protocol, or something and choose in two folders, what they need to download.

 

That's it

 

Thanks a lot for this help

[MrGrey]

On 7/21/2024 at 2:12 AM, Dr4g3r said:

people that don't understand nothing about computers

Be careful. The people that don't understand nothing about computers are wearing computers that know and search everything about every network that they are near to and might exploit every vulnerability in those networks hoping to be an admin and control everything on that network... sorry, just a phone, it can't do nothin'

 

MrGrey.

 

[Dr4g3r]

5 hours ago, MrGrey said:

Be careful. The people that don't understand nothing about computers are wearing computers that know and search everything about every network that they are near to and might exploit every vulnerability in those networks hoping to be an admin and control everything on that network... sorry, just a phone, it can't do nothin'

 

MrGrey.

 

The people that will "click" on link, are old, and don't have any knowledge of exploit vulnerability. Is for work, not for fun. If people do something during the day and don't have too much free time, i think this will be better world.
Btw, thanks for advice. I already have all stuff work properly.

Cheers!