Unable to authenticate directory users to FTP

Description

Migrated from Core, which was working in this setup. The appropriate ProFTPD settings were migrated over.

I use a Reolink DVR and have it mirroring event recordings over via FTP, which logged in using a specific AD user in a specific group, facilitated by the custom config section adding in an addition "limit LOGIN" section.

Unfortunately, it seems that in Scale I can't log in anymore. I've checked that the passwords are correct with password auth in SSH, but alas even though the service recognizes the user, the password is never accepted. I've validated this recognition by trying bogus usernames and restricted usernames such as "root"

Session ID: 0fd36661-4588-7e19-ed02-4bf39fdbcc9c

Problem/Justification

None

Impact

None

Attachments

2
  • 09 Apr 2025, 06:05 AM
  • 09 Apr 2025, 06:05 AM

Activity

Show:

Anthony Takata (Tsaukpaetra)3 hours ago

Without custom configuration using a local user with group ftp, I was able to navigate the home directory and create a file.

scameras isn’t a group, it’s the name of the AD user that nominally owns and creates the camera uploads

However, reinterpreting the idea, I have adjusted the DefaultRoot line to make the local ftp user’s root in accordance, and this does work as expected:

I suppose this is an acceptable workaround for this instance, as the ACLs on this folder still allow domain users to read and modify the folders/files created this way, but it’s still in no way actually addressing the underlying issue: authentication is not working.

Mark Grimes2 days ago

Make sure your datasets are healthy.

Start with a simple configuration with a local user.

Temporarily remove the optional configuration. Create a new local user with a home directory and include ftp as an auxiliary group. Add some data to the new users home directory.

From a Linux client or other FTP client, via FTP login to the server as that user. List the contents of the home directory.

If that works, then log out and add the scameras group to the local user and add the DefaultRoot /mnt/internal/DISK1/Security scameras to Auxiliary Parameters.

Login to FTP with the local FTP user. The user should be able to list the contents of /mnt/internal/DISK1/Security.

Bug Clerk4 days ago

Thank you for submitting this TrueNAS Bug Report! So that we can quickly investigate your issue, please attach a Debug file and any other information related to this issue through our secure and private upload service below. Debug files can be generated in the UI by navigating to System -> Advanced -> Save Debug.

https://ixsystems.atlassian.net/servicedesk/customer/portal/15/group/37/create/153

Details

Assignee

Reporter

Labels

Priority

More fields

Katalon Platform

Created 4 days ago
Updated 3 hours ago