Ipswitch Forums / Technical Preview Programs / WS_FTP Server 6.1 TPP

User synchronize button destroys data

FrankG — Wed, 21 Nov 2007 08:15:53 GMT

We have a 5.04 version of WS_FTP Server upgraded to version 6.1 with SSH.

Our old user database was formerly configured via an ODBC connection and is
running on MS SQL Server. After the installation was finished we migrated all
the user data with "dbconfig.exe" from PostgreSQL to MS SQL Server successfully.

All user home directories contain six special subfolders which are necessary
for our application.

After we have done the first user synchronization we lost the most of these
subdirectories and from originally 361 users only 194 was left in "ws_ftp_server"
database.

The effect is reproducable as follow:
1) create a new host with ODBC data source
2) create a new user "extern" , looked to it's home folder
3) create a new user "EXTERNAL" , looked to it's home folder
4) put a file into the homefolder of "extern"
5) press the synchonize button in the users administration

A second strange effect is that we lost all specific permission sets, inclusive
the one from System Administrator!

PASV firewall configuration only at host level now?

cycler — Mon, 05 Nov 2007 13:04:23 GMT

In 5, you could set the firewall options at the "host" level (host != machine here; more like a site), and in 6 that would be equivalent to the listener correct? I cannot seem to find how to set the firewall options for PASV at the listener level. There is a setting but it seems to be at the machine level.

[img]http://forums.ipswitch.com/Attachment1136.aspx[/img]

Here's an example:

Two listeners both servicing FTP over port 21. The first has an IP of 10.0.0.100 and the second has 10.0.0.200. Each is natted at the firewall to a different routable IP, say 193.0.0.100 and 193.0.0.200.

So for a PASV request, I'd need to send back the right external IP, and port range for the right listener.

The only work around I can think of would be to add more machines, and have one listener per machine.

Altering folders...

BladeRunner — Thu, 15 Nov 2007 15:56:27 GMT

Regular users can alter physical directory structures by moving one folder to another.

Example:

I have USER1 which is a regular user

I have 3 virtual directories:

Temp1 – R/W/D/C - Full

Temp2- R/O

Temp3- R/O

I *can’t* move TEMP1 into TEMP2 or TEMP3

But I *can* move TEMP2 or TEMP3 into TEMP1

When this is done, the physical folder layout gets moved around as well.

Our take on this is users (regular/admin) shouldn't be able to alter virtual folders.

Bug or feature?

Thanks!

Thomas

Quota feature does not work

BladeRunner — Wed, 14 Nov 2007 13:46:02 GMT

We found an issue with the “QUTOA” feature where we set the Quota to 1 meg and when we transfer a 3 meg file over, instead of aborting, it transfer the file over truncating to the 1 meg quota.

What we were expecting to see is that the file either gets aborted during transfer or it lays down the file with the file size as 0.

Is this a known bug? If so, when can we expect a fix?

Thanks!

Disappointed in 6.1 RTM Management Tools

bhively — Tue, 13 Nov 2007 11:27:05 GMT

I was disappointed to see that [b]none[/b] of the GUI changes we requested were put into the new release. That seems like a very minor update compared with the back end functionality that was being developed. The tools to manage permissions on folders are so inferior to the previous 5.x release that changes take 2-3 times longer because the search functionality is broken, there is no easy filter to only display groups or only display users, etc.

PLEASE address the GUI soon, we don't need backend changes but we [b]really[/b] need useability improvements in the tools to manage the system. Perhaps you could release a minor 6.1.1 update just to work on the web GUI and make it more user friendly. We have multiple suggestions for the GUI and would be more than happy to speak with your web developer who works on the management tools to discuss our biggest issues.

Thanks.

Host modification screen only works for local server

cycler — Mon, 05 Nov 2007 11:36:24 GMT

When using the web front end connected to host A, and modifying host B's properties, if the value of "Top Folder" does not exist on A, the form validation fails.

This is because when I installed A, it set it's top folder to something like C:\Program Files\Ipswitch\WS_FTP Server\hostA.foo.com\, and when I installed B, it's folder was set to C:\Program Files\Ipswitch\WS_FTP Server\hostB.foo.com\ . Since I'm using the web front end to manage A, when I switch to manage B, the second directory does not exist.

This can be circumvented by simply changing the location to be a directory that exists on both servers, for example D:\iFtpSvcRoot or something.

6.1 installer does not honor entries in the cliconfg tool

cycler — Fri, 19 Oct 2007 11:03:34 GMT

When using a MS SQL server back end in a ultra high availability enviroment, using an alias for your SQL server with the cliconfg tool is essential to having multiple back end clusters. If one cluster fails, changing the value of the IP address with a script quickly re-routes traffic to another cluster.

However, it wasn't until I added a matching entry in my host file that the installer was able to see the database. A test connection with the ODBC manager uses the value in cliconfg fine, but the installer does not seem to honor that.

It appears that the installer is trying to use DNS to resolve the name of the SQL server prior to using it. I haven't run an wireshark trace on the nic yet to confirm this, but it seems likely.

6.1 Installer does not permit Windows Auth to SQL server

cycler — Fri, 19 Oct 2007 10:57:47 GMT

The installer for 6.1 does not seem to honor windows accounts for authentication to a MS SQL database. I've not tried any post-install reconfiguration however.

Non-windows accounts appear to work fine.

WS_FTP Server 6.1 availability

FrankG — Thu, 11 Oct 2007 09:36:22 GMT

As I can assess it now, this version 6.1 is exactly what fits our requirements (no IIS webserver, + SQLServer database). We are running version 5.04 now in production. I don't want to upgrade to version 6.0 (with postgres and IIS), but on the other hand we should have sFTP/SSH as soon as possible. So the big question: when do you expect to have an official version of WS_FTP Server 6.1 .

SSH listener bug(?)

avilov — Fri, 26 Oct 2007 14:18:35 GMT

If "Disable default banner" is selected for the SSH listener, than it stops working. It only accepts a TCP connections and stops responding after that.

If "Disable default banner" is not selected everything is working just fine.

Upgrade from 5.04 to 6.1 with MS SQLServer database

FrankG — Thu, 11 Oct 2007 09:46:38 GMT

If we make an installation from scratch, we get the option to choose postgress or SQLServer database. If we have a 5.04 version installed, there is no option and postgress database is choosen automatically (but we should have SQLServer). Will this be changed for the official version?

Thanks and Regards

Frank

Addendum: Old behavior that is missing.

bhively — Wed, 03 Oct 2007 11:22:27 GMT

Also, the old behavior from WS_FTP Server 5.0 where all groups were sorted ahead of users when displayed in a combined users/groups list should be brought back for any lists where the two are displayed together as I think the majority of people using the product probably use mostly groups when adding folder permissions.

Compressed Drive and virtual folders

Schweinmesser — Thu, 23 Aug 2007 13:37:19 GMT

I'm currently running WS_FTP Server 6 with SSH. There seems to be a bug with WS_FTP Server with compressed drives. It's bug# 2429. Will this be fixed with the new version? If so, what is the time frame? Right now I'm stuck with an SFTP server that doesn't work like I need it to.

Thanks,

Ronnie

ssh key authentication errors

dlpreston — Fri, 05 Oct 2007 17:35:30 GMT

Does anyone have a possible solution to this problem?
I have imported the ppublickey in the server from the key that was created on the client and assigned it to the user.
The client has accepted and trusted the public key that was created and is used on the server.
If I only allow public key authentication I can not log in.
I have both Password and Public Key authentication checked.

WS_FTP Server 6.1
From server Log

- entry
log_time 20071005-14:09:50
- description
- [CDATA[ Public Key Authentication Not Allowed ]]
/description
service SSH /service
sessionid 64828693 /sessionid
type 2 /type
severity 3 /severity
user dlpreston /user
lstnconnaddr 198.204.114.110:22 /lstnconnaddr
cliconnaddr 198.204.114.112:3995 /cliconnaddr
sguid 18EC5282-C0ED-4ED8-1EA2-B917158030CC /sguid
/entry

Client
WS_Ftp professional 2007

Finding Host scacinom01-d.lereta.com ...
[2007.10.08 07:46:14.637] Connecting to 198.204.114.110:22
[2007.10.08 07:46:14.637] Connected to 198.204.114.110:22 in 0.000000 seconds, Waiting for Server Response
[2007.10.08 07:46:14.637] Server Welcome: SSH-2.0-WS_FTP-SSH_1.1
[2007.10.08 07:46:14.637] Client Version: SSH-2.0-WS_FTP-9.01-2006.07.25
[2007.10.08 07:46:14.652] KexInitPacket (Server): no kex guess present
[2007.10.08 07:46:14.652] KexAlgorithms
[2007.10.08 07:46:14.652] diffie-hellman-group1-sha1,diffie-hellman-group14-sha1
[2007.10.08 07:46:14.652] 00: diffie-hellman-group1-sha1
[2007.10.08 07:46:14.652] 01: diffie-hellman-group14-sha1
[2007.10.08 07:46:14.652] ServerHostKeyAlgorithms
[2007.10.08 07:46:14.652] ssh-dss,ssh-rsa
[2007.10.08 07:46:14.652] 00: ssh-dss
[2007.10.08 07:46:14.652] 01: ssh-rsa
[2007.10.08 07:46:14.652] CsEncryptionAlgorithms
[2007.10.08 07:46:14.652] 3des-cbc,blowfish-cbc,aes256-cbc,aes128-cbc,cast128-cbc
[2007.10.08 07:46:14.652] 00: 3des-cbc
[2007.10.08 07:46:14.652] 01: blowfish-cbc
[2007.10.08 07:46:14.652] 02: aes256-cbc
[2007.10.08 07:46:14.652] 03: aes128-cbc
[2007.10.08 07:46:14.652] 04: cast128-cbc
[2007.10.08 07:46:14.652] ScEncryptionAlgorithms
[2007.10.08 07:46:14.652] 3des-cbc,blowfish-cbc,aes256-cbc,aes128-cbc,cast128-cbc
[2007.10.08 07:46:14.652] 00: 3des-cbc
[2007.10.08 07:46:14.652] 01: blowfish-cbc
[2007.10.08 07:46:14.652] 02: aes256-cbc
[2007.10.08 07:46:14.652] 03: aes128-cbc
[2007.10.08 07:46:14.652] 04: cast128-cbc
[2007.10.08 07:46:14.652] CsMACAlgorithms
[2007.10.08 07:46:14.652] hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96
[2007.10.08 07:46:14.652] 00: hmac-sha1
[2007.10.08 07:46:14.652] 01: hmac-sha1-96
[2007.10.08 07:46:14.652] 02: hmac-md5
[2007.10.08 07:46:14.652] 03: hmac-md5-96
[2007.10.08 07:46:14.652] ScMACAlgorithms
[2007.10.08 07:46:14.652] hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96
[2007.10.08 07:46:14.652] 00: hmac-sha1
[2007.10.08 07:46:14.652] 01: hmac-sha1-96
[2007.10.08 07:46:14.652] 02: hmac-md5
[2007.10.08 07:46:14.652] 03: hmac-md5-96
[2007.10.08 07:46:14.652] CsCompressionAlgorithms
[2007.10.08 07:46:14.652] zlib,none
[2007.10.08 07:46:14.652] 00: zlib
[2007.10.08 07:46:14.652] 01: none
[2007.10.08 07:46:14.652] ScCompressionAlgorithms
[2007.10.08 07:46:14.652] zlib,none
[2007.10.08 07:46:14.652] 00: zlib
[2007.10.08 07:46:14.652] 01: none
[2007.10.08 07:46:14.652] CsLanguages
[2007.10.08 07:46:14.652]
[2007.10.08 07:46:14.652] ScLanguages
[2007.10.08 07:46:14.652]
[2007.10.08 07:46:14.652] KexInitPacket (Client): no kex guess present
[2007.10.08 07:46:14.652] KexAlgorithms
[2007.10.08 07:46:14.652] diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1
[2007.10.08 07:46:14.652] 00: diffie-hellman-group-exchange-sha1
[2007.10.08 07:46:14.652] 01: diffie-hellman-group1-sha1
[2007.10.08 07:46:14.652] ServerHostKeyAlgorithms
[2007.10.08 07:46:14.652] ssh-dss,ssh-rsa
[2007.10.08 07:46:14.652] 00: ssh-dss
[2007.10.08 07:46:14.652] 01: ssh-rsa
[2007.10.08 07:46:14.652] CsEncryptionAlgorithms
[2007.10.08 07:46:14.652] 3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-cbc
[2007.10.08 07:46:14.652] 00: 3des-cbc
[2007.10.08 07:46:14.652] 01: blowfish-cbc
[2007.10.08 07:46:14.652] 02: aes192-cbc
[2007.10.08 07:46:14.652] 03: aes256-cbc
[2007.10.08 07:46:14.652] 04: aes128-cbc
[2007.10.08 07:46:14.652] ScEncryptionAlgorithms
[2007.10.08 07:46:14.652] 3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-cbc
[2007.10.08 07:46:14.652] 00: 3des-cbc
[2007.10.08 07:46:14.652] 01: blowfish-cbc
[2007.10.08 07:46:14.652] 02: aes192-cbc
[2007.10.08 07:46:14.652] 03: aes256-cbc
[2007.10.08 07:46:14.652] 04: aes128-cbc
[2007.10.08 07:46:14.652] CsMACAlgorithms
[2007.10.08 07:46:14.652] hmac-md5,hmac-sha1,hmac-ripemd160
[2007.10.08 07:46:14.652] 00: hmac-md5
[2007.10.08 07:46:14.652] 01: hmac-sha1
[2007.10.08 07:46:14.652] 02: hmac-ripemd160
[2007.10.08 07:46:14.652] ScMACAlgorithms
[2007.10.08 07:46:14.652] hmac-md5,hmac-sha1,hmac-ripemd160
[2007.10.08 07:46:14.652] 00: hmac-md5
[2007.10.08 07:46:14.652] 01: hmac-sha1
[2007.10.08 07:46:14.652] 02: hmac-ripemd160
[2007.10.08 07:46:14.652] CsCompressionAlgorithms
[2007.10.08 07:46:14.652] zlib,none
[2007.10.08 07:46:14.652] 00: zlib
[2007.10.08 07:46:14.652] 01: none
[2007.10.08 07:46:14.652] ScCompressionAlgorithms
[2007.10.08 07:46:14.652] zlib,none
[2007.10.08 07:46:14.652] 00: zlib
[2007.10.08 07:46:14.652] 01: none
[2007.10.08 07:46:14.652] CsLanguages
[2007.10.08 07:46:14.652]
[2007.10.08 07:46:14.652] ScLanguages
[2007.10.08 07:46:14.652]
[2007.10.08 07:46:14.652] SSH Transport agreed algorithms
[2007.10.08 07:46:14.652] Purpose: key agreement Algo: diffie-hellman-group1-sha1
[2007.10.08 07:46:14.652] Purpose: server host keyAlgo: ssh-dss
[2007.10.08 07:46:14.652] Purpose: encryption cs Algo: 3des-cbc
[2007.10.08 07:46:14.652] Purpose: encryption sc Algo: 3des-cbc
[2007.10.08 07:46:14.652] Purpose: MAC cs Algo: hmac-md5
[2007.10.08 07:46:14.652] Purpose: MAC sc Algo: hmac-md5
[2007.10.08 07:46:14.652] Purpose: compression cs Algo: zlib
[2007.10.08 07:46:14.652] Purpose: compression sc Algo: zlib
[2007.10.08 07:46:14.699] SSH Server Host Key Size 817 bytes
[2007.10.08 07:46:14.699] SSH Signature Size 40 bytes
[2007.10.08 07:46:14.715] DSS Signature Verified
[2007.10.08 07:46:14.730] Session Keys Created
[2007.10.08 07:46:14.730] Ciphers Created
[2007.10.08 07:46:14.730] New Client->Server ciphers in place.
[2007.10.08 07:46:14.730] New Server->Client ciphers in place.
[2007.10.08 07:46:14.730] Completed SSH Key Exchange. New Keys in place.
[2007.10.08 07:46:15.760] Loaded key Pair "nom01 dlpreston RSA", types(public,private): "RSA","RSA"
[2007.10.08 07:46:15.760] Key pair algorithm type: "ssh-rsa"
[2007.10.08 07:46:15.900] Server rejected public key
[2007.10.08 07:46:15.900] Authentication Method publickey(2) resulted in Failure
[2007.10.08 07:46:15.900] Server Supported Authentication Methods: (* = client also supports)
[2007.10.08 07:46:15.900] publickey *
[2007.10.08 07:46:15.900] password *
[2007.10.08 07:46:15.931] User Authenticated OK!
[2007.10.08 07:46:15.931] Completed SSH User Authentication.
[2007.10.08 07:46:15.931] SSH Channel confirmed open: LocalID:(0760a2ce) ServerID(00000030) ServerMaxPacket(30000) ServerWindow(300000)
[2007.10.08 07:46:15.963] Started subsystem "sftp" on channel 0760a2ce
[2007.10.08 07:46:15.963] SFTP Protocol Version 4 OK
[2007.10.08 07:46:16.041] sftp protocol initialized
Auto detecting server clock offset
Server clock offset is 2 minutes
/ loaded from [Directory Listing Cache]DIR4566.tmp

WS_FTP Server 6.1 on Vista

Andrew_S — Sun, 07 Oct 2007 11:56:42 GMT

I've read the basic requirements for installing WS FTP SERVER and there is no mention of using it on Vista installation. The reason I'm inquiring is for basic internal testing without interrupting a production environment. Is there any plans to permit it to run on a Vista/Longhorn system in the near future? What are current caveats/limitations that are known which would not permit it to run (if any)?

I assume Administrative functions from a Vista workstation against an existing WinServer/XP WS_FTP host via a IE browser would still function normally.

Thanks.

Enhancement Request: Add folder permissions filter.

bhively — Wed, 03 Oct 2007 11:16:09 GMT

Please add the following enhancements to the page where you add permissions to a folder:

1.) Add a toggle so the list box can be made to show the following:
a.) All groups and users
b.) Only groups
c.) Only users

2.) When doing a search on this page with a Windows NT user database (old style, not new Active Directory version), when I try and search in the Users/Groups list it will only search for users, groups are dropped when it does the search making it useless in our situation where we do all permissions strictly on a group basis.

These two changes would be extremely helpful and on the surface look like they would be easy enough to add to the system.

Thanks,
Brian

Where do I get it

Andy Schmidt — Fri, 28 Sep 2007 18:17:33 GMT

Hi,

okay, I'll bite! I see that there apparently is a forum for the 6.1 TPP - but I don't see any announcement in the regular 6.0 forum or on the support page?

By the way, http://www.ipswitch.com/support/ws_ftp-server/index.asp has a bad link to the FTP Server forum: http://www.ipswitch.com/forums/messages.aspx?ForumID=8 results in an error message.

Welcome to the WS_FTP Server 6.1 with SSH Technical Product Preview!

Nikosk70 — Thu, 23 Aug 2007 11:27:32 GMT

Welcome to the WS_FTP Server 6.1 with SSH Technical Preview Program.

On the strength of the WS_FTP Server 6.0 TPP (the most active and successful in the history of Ipswitch with hundreds of participants), we are kicking off the TPP for WS_FTP Server 6.1. This program allows users to gain access to, use and provide feedback on upcoming releases of WS_FTP Server.

What's New? A few key new features are Microsoft SQL Server support, new WS_FTP Web Server (an alternative to IIS), force clients to change passwords when logging in, Silent Install, a few other features as well as technical white papers on configuring a high availability solution using Microsoft Network Load Balancer (NLB) and MS Clustering Service (MSCS).

Prizes: And as an extra incentive, the top contributor will receive a free copy of WS_FTP Server 6.1 with SSH (with 1 year's Service Agreement) and the 2nd top contributor will receive a free license of WS_FTP Server 6.1 (with 1 year's Service Agreement) when we launch the product. The winners will be determined by the Product Team at the end of the Technical Preview Program and will be based on the interactions and input received from participants.

Here are some examples of active participation:

1. Installing WS_FTP Server 6.1 with SSH
2. Using the product - i.e. Using the SQL db and the new embedded web server, using notifications
3. Participate in the forum discussions
4. Provide input on features: Likes/Dislikes and alert to any found defects or usability issues
5. Attend Technical Preview demos to see what else is coming and submit feature requests

To sign up and download the WS_FTP Server 6.1 with SSH TPP release, please go here: http://preview.ipswitch.com/Server61/

bye for now,

Kevin R. Gillis
Ipswitch, Inc.