FTP root folder seems wrong

TobiasReich · Dec 5th 2020

I installed OMV 5 fresh (with an old hard disk though) and I seem to have problems with the FTP server.

From what I understand the login works fine but it appears as if the default folder is the root one.

I therefore get an error message regarding the permissions:

Code

Status:    Connecting to 192.168.178.2:43210...
Status:    Connection established, waiting for welcome message...
Status:    Initializing TLS...
Status:    Verifying certificate...
Status:    TLS connection established.
Status:    Server does not support non-ASCII characters.
Status:    Logged in
Status:    Retrieving directory listing...
Command:    PWD
Response:    257 "/" is the current directory
Command:    TYPE I
Response:    200 Type set to I
Command:    PASV
Response:    227 Entering Passive Mode (192,168,178,2,166,41).
Command:    LIST
Response:    150 Opening BINARY mode data connection for file list
Response:    425 Unable to build data connection: operation not permitted
Error:    Failed to retrieve directory listing

Display More

I try to connect locally in my LAN, no firewall configuration yet and - as mentioned - a fresh install.

I also tried to set the default root folder in the advanced settings

Code

DefaultRoot /srv/dev-disk-by-label-Data/

But with no success.

The /etc/proftpd/proftpd.conf looks like this:

Code

Include /etc/proftpd/modules.conf

Include /etc/proftpd/tls.conf

UseIPv6 on
ServerName OMV
ServerType standalone
DeferWelcome on
MultilineRFC2228 on
DefaultServer on
ShowSymlinks on
DisplayChdir .message true
ListOptions "-l"
MaxInstances 30
DenyFilter \*.*/
User proftpd
Group nogroup
PersistentPasswd off
TimesGMT off
AllowOverwrite on
AuthOrder mod_auth_pam.c* mod_auth_unix.c
DefaultTransferMode ascii
Port 43210
TransferLog /var/log/proftpd/xferlog
IdentLookups on
UseReverseDNS off
TimeoutIdle 1200
TimeoutNoTransfer 600

TimeoutStalled 600

PassivePorts 43211 43220
AllowRetrieveRestart on
AllowStoreRestart on
DeleteAbortedStores off
MaxConnectionsPerHost 2
DisplayLogin /srv/ftp/welcome.msg
<Directory />
 HideFiles (welcome.msg)
</Directory>
<Directory /Files>
 Umask 000 000
 <Limit ALL>
   AllowUser OR tobi
   DenyAll
 </Limit>
 <Limit READ DIRS>
   AllowUser OR tobi
   AllowGroup OR family
   DenyAll
 </Limit>
</Directory>


<IfModule mod_auth.c>

 DefaultRoot /srv/ftp

 MaxClients 5
 MaxLoginAttempts 2
 RequireValidShell off
 # This option is useless because this is handled via the PAM

 # pam_listfile.so module, so set it to 'off' by default.

 UseFtpUsers off
</IfModule>
<IfModule mod_auth_pam.c>
 AuthPAM on
 AuthPAMConfig proftpd
</IfModule>
<IfModule mod_ban.c>
 BanEngine off
 BanControlsACLs all allow user root
 BanLog /var/log/proftpd/ban.log
 BanMessage Host %a has been banned
 BanTable /run/proftpd/ban.tab
</IfModule>
<IfModule mod_ctrls.c>
 ControlsEngine on
 ControlsMaxClients 2
 ControlsLog /var/log/proftpd/controls.log
 ControlsInterval 5
 ControlsSocket /run/proftpd/proftpd.sock
</IfModule>
<IfModule mod_ctrls_admin.c>
 AdminControlsEngine off
</IfModule>
<IfModule mod_delay.c>
 DelayEngine on
</IfModule>
<IfModule mod_facl.c>
 FACLEngine on
</IfModule>
<IfModule mod_quotatab.c>
 QuotaEngine off
</IfModule>
<IfModule mod_ratio.c>
 Ratios off
</IfModule>
LoadModule mod_vroot.c
<IfModule mod_vroot.c>
 VRootEngine on
 VRootLog /var/log/proftpd/vroot.log
 VRootAlias "/srv/dev-disk-by-label-Data/Files/" "Files"
</IfModule>
<IfModule mod_wrap.c>
 TCPAccessFiles /etc/hosts.allow /etc/hosts.deny
 TCPAccessSyslogLevels info warn
 TCPServiceName ftpd
</IfModule>

Display More

Looks all fine to me so what am I missing?

Thanks a lot!

Tobias

#### EDIT ####

Looks like it works when I switch to SFTP. However the users can now traverse throught the whole filesystem. Before they saw only the shared folders. If there would be a way of changing this, I would also be fine with SFTP instead.

cubemin · Dec 6th 2020

Are you logging into your FTP server with the OMV root account or with a separately created user?

In the latter case, in OMV's FTP settings you can define which shared folders that user is allowed to see and access.

TobiasReich · Dec 6th 2020

I tried with both.

SFTP requires the ssh group to be set for the user so maybe that enables something I missed.

However, if you mean the "Shares"-Option I set a shared folder there. This is the "Files" in the configuration. Still that doesn't change anything.

FTPS doesn't work and SFTP shows the whole range of the file system.

TobiasReich · Dec 6th 2020

Okay I found a part of a solution.

It seems the (Filezilla) client did not reuse SSL session and was rejecting the data connection.

Code

That was fixed by setting the parameter "No session reuse required (The requirement that the SSL session from the control connection is reused for data connections is not required.)"

In the control panel.

Now the folder is shown almost correctly since the "root" folder is "/srv/ftp" now. I understand this is the normal behaviour and if I enter then "/Files" in FileZilla I can actually reach the folder I want the users to be in.

But it is not shown nor is it the chosen root folder.

Any idea how this can be achieved?

I already tried setting

Code

DefaultRoot /srv/dev-disk-by-label-Data/Files
DefaultChdir /srv/dev-disk-by-label-Data/Files

in both "Settings" and "SSL/TLS" input fields and even other combinations like

Code

DefaultRoot /Files
DefaultChdir /Files

etc. but to no success!

klqn007 · Dec 29th 2020

the ftp service point to /srv/ftp which is root permission, it doesn't point to the sharefoler that I created: dev-disk-by-label-storage/public.

this is a bug!

Solution:

ln -sf /srv/ftp dev-disk-by-label-storage/public

and select /srv/ftp dev-disk-by-label-storage/public as ftp for sharefolder.

FTP root folder seems wrong

Participate now!

Tags