Unable to authenticate directory users to FTP
Description
Problem/Justification
Impact
Attachments
- 09 Apr 2025, 06:05 AM
- 09 Apr 2025, 06:05 AM
Activity

Anthony Takata (Tsaukpaetra)3 hours ago
Without custom configuration using a local user with group ftp
, I was able to navigate the home directory and create a file.
scameras
isn’t a group, it’s the name of the AD user that nominally owns and creates the camera uploads
However, reinterpreting the idea, I have adjusted the DefaultRoot
line to make the local ftp user’s root in accordance, and this does work as expected:
I suppose this is an acceptable workaround for this instance, as the ACLs on this folder still allow domain users to read and modify the folders/files created this way, but it’s still in no way actually addressing the underlying issue: authentication is not working.

Mark Grimes2 days ago
Make sure your datasets are healthy.
Start with a simple configuration with a local user.
Temporarily remove the optional configuration. Create a new local user with a home directory and include ftp
as an auxiliary group. Add some data to the new users home directory.
From a Linux client or other FTP client, via FTP login to the server as that user. List the contents of the home directory.
If that works, then log out and add the scameras
group to the local user and add the DefaultRoot /mnt/internal/DISK1/Security scameras
to Auxiliary Parameters.
Login to FTP with the local FTP user. The user should be able to list the contents of /mnt/internal/DISK1/Security.

Bug Clerk4 days ago
Thank you for submitting this TrueNAS Bug Report! So that we can quickly investigate your issue, please attach a Debug file and any other information related to this issue through our secure and private upload service below. Debug files can be generated in the UI by navigating to System -> Advanced -> Save Debug.
https://ixsystems.atlassian.net/servicedesk/customer/portal/15/group/37/create/153
Details
Assignee
Triage TeamTriage TeamReporter
Anthony Takata (Tsaukpaetra)Anthony Takata (Tsaukpaetra)Labels
Affects versions
Priority
Undefined
Details
Details
Assignee

Reporter

Labels
Affects versions
Priority

Migrated from Core, which was working in this setup. The appropriate ProFTPD settings were migrated over.
I use a Reolink DVR and have it mirroring event recordings over via FTP, which logged in using a specific AD user in a specific group, facilitated by the custom config section adding in an addition "limit LOGIN" section.
Unfortunately, it seems that in Scale I can't log in anymore. I've checked that the passwords are correct with password auth in SSH, but alas even though the service recognizes the user, the password is never accepted. I've validated this recognition by trying bogus usernames and restricted usernames such as "root"
Session ID: 0fd36661-4588-7e19-ed02-4bf39fdbcc9c