ProFTPD Plugin for unRAID v6.8.x

[SlrG]

It should be no problem I think. It's only a check for a working internet connection as this is needed to pull down all the packages necessary to run the plugin. The question is now, if the plugin installed correctly because of the dns problems. Can you please post a screenshot of the plugins settings page and the full system log?

[dahou]

Sorry, but which log would you exactly mean?

Where does the plugin try to download packages? Maybe those sites are blocked as well - it wouldn't surprise me.

 

Thanks

 

[SlrG]

The config page looks fine so far. So I guess most things of the plugin install properly. Please post the log from Tool / System Log. It might be large and will need to be zipped in order to be attached.

[JaY_III]

Quick question.

 

So i was up north recently and lost access to my FTP.

Wife said we had a blackout.

Server shutdown cleanly, thank you UPS.

However when it came back up, the FTP was off by default.

Had to manually start it again via the web gui.

 

Is this by design or do i possibly have a configuration error some place?

[SlrG]

Please check the proftpd plugins settings page. On the right side in the configuration section, there is a setting "Enable ProFTPd". If you have set this to enable, the proftpd service will be restarted when the server restarts. If you already have this option enabled please try to manually restart the server and check if it proftpd gets enabled now. If it does not, please report again.

[JaY_III]

I had to power cycle my box again today and the FTP did not come back up on its own.

 

I Have always had  "EnableProFTP:Yes" set

[SlrG]

Okay. Then obviously something doesn't work. Can you send me your diagnostics file (from Tools / Diagnostics?).

[JaY_III]

Here it is

unraid-diagnostics-20160703-1329.zip

[SlrG]

Hmm... Nothing unusual in the logs. How do you "powercycle"? When you go to the plugins settings page after restarting the server, what is reported as status of the proftpd process? Does it show Running or Stopped? Please go to the command line (before starting the service manually) and tell me the result of

/etc/rc.d/rc.ProFTPd start

Did you try to set the service to disabled, applied it and then set it back to enabled?

[JaY_III]

Hmm... Nothing unusual in the logs. How do you "powercycle"? When you go to the plugins settings page after restarting the server, what is reported as status of the proftpd process? Does it show Running or Stopped? Please go to the command line (before starting the service manually) and tell me the result of

/etc/rc.d/rc.ProFTPd start

Did you try to set the service to disabled, applied it and then set it back to enabled?

 

Power Cycle like this:

Main -> Dashboard-> Array Operation-> Check Stop (click stop) -> Reboot/Power Down

 

After reboot

 

Settings-> ProFTPd->  Status: STOPPED

 

JaY_III@unRAID:~# /etc/rc.d/rc.ProFTPd start
Renewing userjail...
...OK
Starting ProFTPd...

...OK
JaY_III@unRAID:~#

 

Settings-> ProFTPd-> Status: RUNNING with version: 1.3.6rc1

 

Yes at one time I did set the service to disabled when I was testing VM's.

I have since re-enabled the service. That was all done here:

Settings-> ProFTPd-> Configuration-> Enable ProFTPd : Yes/No

[SlrG]

Can you try to uninstall my plugin, reboot and reinstall it? If it doesn't start working then, would you be willing to do a TeamViewer session where I can have a look at your server and try to figure out what is going wrong?

[JaY_III]

Can you try to uninstall my plugin, reboot and reinstall it? If it doesn't start working then, would you be willing to do a TeamViewer session where I can have a look at your server and try to figure out what is going wrong?

 

Plugin uninstalled

System Rebooted

Plugin Reinstalled

Settings-> ProFTPd-> Status: STOPPED

Configuration: Enable ProFTPd: Yes -> Apply

Status: RUNNING with version: 1.3.6rc1

System Rebooted

Status: RUNNING with version: 1.3.6rc1

restored my settings

System Rebooted

Settings-> ProFTPd-> Status: STOPPED

 

mountscripts.sh or ProFTPd.conf must be the issue

 

uninstall /reinstall

restored only mountscript.sh

reboot

Status: RUNNING with version: 1.3.6rc1

 

restored ProFTPd.conf (with restored mountscript.sh)

reboot

Status: STOPPED

Suspect issue with ProFTP.conf is preventing the FTP from auto starting

 

reboot with only ProFTP.conf restored

Status: STOPPED

 

 

So it is 100% something to do with my ProFTP.conf file.

If I make any changes to it I can not get the server to auto start

 

proftpd.conf

[SlrG]

Please give the newest version of the plugin a try. It works on my system using your proftpd.conf. If not please report again.

[JaY_III]

Please give the newest version of the plugin a try. It works on my system using your proftpd.conf. If not please report again.

 

Works perfect.

Thank you, and love the change log

[cookiemole]

Sorry if this is a basic question. How do I set the FTP server to be read-only?

[SlrG]

I never tried it myself, but I think you can do this using the <limit> directive.

<Directory ~/site/backups>
   <Limit WRITE>
      DenyAll
   </Limit>
</Directory>

Adding this to your proftpd.conf will protect the given dir against all writes. If you want to protect your whole server your could add only the limit without the directory directive. It will block write access for all users however. It is possible to allow it for certain users and block it for others. Please check out the proftpd docs.

[RobJ]

I understand this is a tool for more advanced users, but in the current ransomware climate, wouldn't it be better to reverse the model here to be basically read-only, then only allow write access in limited windows (selected users, selected folders)?  Seems like that would be safer, especially in any proftpd.conf files provided for new users.  Might be a better model for all of us, to always think that way now (read only unless absolutely necessary, then limited)!

[SlrG]

I agree this would propably be a good idea to secure the user data. But I fear it would generate a lot of  support requests from users who don't know how to enable write support. I'll give it some thought however.

[JaY_III]

The documentation is pretty clear on how to setup file permissions.

And as the user is already forced to edit all the config files, I don't think that is required to default to read only.

 

Here is an example of how I like to setup the FTP.

 

Step 1: Edit mountscript.sh

 

# Mounts just media for read only
# Directory Structure
mkdir /tmp/FTP/
mkdir /tmp/FTP/Media
mkdir /tmp/FTP/Media/Video
mkdir /tmp/FTP/Media/Audio
mkdir /tmp/FTP/Media/E-Book

mount --bind /mnt/user/Media/Videos /tmp/FTP/Media/Video
mount --bind /mnt/user/Media/Music /tmp/FTP/Media/Audio
mount --bind /mnt/user/Media/e-book /tmp/FTP/Media/E-Book

# Mounts for Apps/Tools/ISO ect
# Apps and Tools are Read only 
# Uploads are Read/Write
mkdir /tmp/FTP/Apps
mkdir /tmp/FTP/Uploads

mount --bind /mnt/user/Backup/apps /tmp/FTP/Apps
mount --bind /mnt/user/Uploads /tmp/FTP/Uploads

 

What I have done in Step 1 is create the file structure that will be presented to my FTP users.

I am using the /tmp directory so i do not need to use the unmount script.

If you do not create your site in the /tmp directory, you must unmount all your shares.

I find this simpler as an improper unmount will hang the shutdown.

 

Also note file permisions are not actually set yet.

 

I will do that in step 2:

 

edit proftpd.conf

#File Permissions
<Directory /tmp/FTP/Media>
<Limit WRITE>
DenyAll
</Limit>
</Directory>

<Directory /tmp/FTP/Apps>
<Limit WRITE>
DenyAll
</Limit>
</Directory>

 

Next you will want to Jail your FTP users into the /tmp/FTP/ directory you have created

 

In unRAID under Users -> Add User

Create your user and add this in the discription:

ftpuser /tmp/FTP/

 

Now when the user logs in they will be presented with 3 directories that look like this:

 

Apps (read only)
Media (read only)
Uploads (read / write)

 

Final Step

Login as the user you have created and ensure they have access to what you want to allow.

If you find the JAIL is not working and they have access to / on your system, you will need to restart the daemon as I believe the jails are actually setup for the users when the deamon is first started and can not be changed while running.  So new users will not be properly jailed.

 

 

[SlrG]

Cool. Thank you very much for sharing. I think this will be helpful for a lot of users of the plugin.

[JaY_III]

Happy to help.

Just trying to give a little back as this plugin solved all my FTP needs when I am away from home.

So Thank you

[s.Oliver]

hey guys!

 

i'm in a need soon to have a SFTP server running and ideally that would be on unRAID (because of data storage). i heard of ProFTP (by name) quite often for some time and it seems to be a perfect fit. but, as a quick read brought up,  enabling the secure protocol seems to be a little bit of a challenge.

 

maybe someone here did that already and could give a little bit of feedback?

 

i've no problem with fiddling through .config files and adjusting values, etc. but because of not having used ProFTP myself, for sure there are some tipps around (or maybe someone documented that journey) 

 

thx.

[RobJ]

hey guys!

 

i'm in a need soon to have a SFTP server running and ideally that would be on unRAID (because of data storage). i heard of ProFTP (by name) quite often for some time and it seems to be a perfect fit. but, as a quick read brought up,  enabling the secure protocol seems to be a little bit of a challenge.

 

maybe someone here did that already and could give a little bit of feedback?

 

i've no problem with fiddling through .config files and adjusting values, etc. but because of not having used ProFTP myself, for sure there are some tipps around (or maybe someone documented that journey) 

 

Did you read the post just 3 back of yours?  It seemed very clear and comprehensive to me.

[JaY_III]

Did you read the post just 3 back of yours?  It seemed very clear and comprehensive to me.

 

No he is asking how to enable SFTP not setup the FTP for use.

If i have time ill tackle that this weekend and post some instructions.

[s.Oliver]

Did you read the post just 3 back of yours?  It seemed very clear and comprehensive to me.

 

yes sir, RobJ i did that.

but have you read my bold SFTP tag, hihi 

 

-> Jay_III: that would be absolutely fantastic! :-)