FileZilla Forums

Welcome to the official discussion forums for FileZilla
Donate to project
It is currently 2015-03-02 03:28

All times are UTC




Post new topic  Reply to topic  [ 9 posts ] 
Author Message
PostPosted: 2010-04-06 05:18 
Offline
500 Command not understood

Joined: 2010-04-06 05:14
Posts: 4
First name: Alexey
Last name: Sluchanko
Hi
I'm using FileZilla FTP Server to allow terminal server's clients to contol applications' interactions with FTP server via FileZilla's interface. It solves all our tasks - however, there is a problem with clients' ability to change FTP server's settings. Is it possible to restrict settings modifications to users, allowing it only to server's administrators?


Top
   
PostPosted: 2010-04-06 05:52 
Offline
Site Admin
User avatar

Joined: 2004-02-23 20:49
Posts: 24691
First name: Tim
Last name: Kosse
Set an administration password and make sure the settings files are only readable by the account that runs the server service.


Top
   
PostPosted: 2010-04-06 06:58 
Offline
500 Command not understood

Joined: 2010-04-06 05:14
Posts: 4
First name: Alexey
Last name: Sluchanko
The method suggested didn't work out.
If administrator's password was set and terminal user's read-access rights to configuration files are deleted then on terminal session start FTP-connection window is opened up. If the password was entered then user able to edit setting. Otherwise it's impossible to connect to the serverand users can't control/manage application-to-FTP interaction.
I use MS Terminal Server


Top
   
PostPosted: 2010-04-06 18:24 
Offline
Site Admin
User avatar

Joined: 2004-02-23 20:49
Posts: 24691
First name: Tim
Last name: Kosse
What do you mean by "FTP-connection window"?


Top
   
PostPosted: 2010-04-07 02:50 
Offline
500 Command not understood

Joined: 2010-04-06 05:14
Posts: 4
First name: Alexey
Last name: Sluchanko
All terminal users can see this window (see attach) and can change setting


Attachments:
FileZilla_window.JPG
FileZilla_window.JPG [ 187.4 KiB | Viewed 2111 times ]
Top
   
PostPosted: 2010-04-07 03:16 
Online
Contributor
User avatar

Joined: 2006-05-01 03:28
Posts: 21101
Location: Germany
So they essentially RDP into the machine? Once they are in, they have control over the whole remote PC, at least as much as the terminal server allows.

So if I'm guessing right you want to have the admin interface read-only for clients and lock the settings with another (admin-)password? That is currently not possible. Additionally, depending on your configuration, clients may have direct access to the XML file of FZ Server, allowing for direct manipulation.

Ugh, that forum software handles large attachments really badly. :P

_________________
### BEGIN SIGNATURE BLOCK ###
FTP connection problems? Do yourself a favor and read Network Configuration.
All FileZilla products fully support IPv6. http://worldipv6launch.org
All support requests per PM will be ignored!
### END SIGNATURE BLOCK ###


Top
   
PostPosted: 2010-04-07 03:35 
Offline
500 Command not understood

Joined: 2010-04-06 05:14
Posts: 4
First name: Alexey
Last name: Sluchanko
Yes, you right, i want to have the admin interface read-only for clients and lock the settings with admin password. May be in next version FileZila server?
Sorry for my big attachment :-(((
Now a set read-only attribute to xml files for terminal users. Change setting don't save in xml files, but apply to server up to restart service (((
Thank You


Top
   
PostPosted: 2010-04-07 06:00 
Offline
Site Admin
User avatar

Joined: 2004-02-23 20:49
Posts: 24691
First name: Tim
Last name: Kosse
Windows makes a bad multi-user system. You should upgrade to Linux. I am serious.


If you disallow access to FileZilla Server Interface.xml, no saved password can be used and users would only be able to administrate the server if they know the administration password.


Top
   
PostPosted: 2012-11-26 17:22 
Offline
500 Command not understood

Joined: 2012-11-26 16:58
Posts: 1
First name: Faithful
Last name: John
botg wrote:
Windows makes a bad multi-user system. You should upgrade to Linux. I am serious.


If you disallow access to FileZilla Server Interface.xml, no saved password can be used and users would only be able to administrate the server if they know the administration password.


I am a newbie, but I am trying to help the IT where we're at to solve some issues, so forgive my question. Obviously there's some issues with FileZilla, restricting access & Windows environment.

However, where we're at, switching to Linux is not an option. Primarily because the software we have is very specialized, and currently only works on Windows. So, the above suggestion seems to be the only option.

Are you saying that if you disallow access to FileZilla Server Interface.xml, only the Adminstrator will be able to use FileZilla? If this is the case, this works well for us.


Top
   
Display posts from previous:  Sort by  
Post new topic  Reply to topic  [ 9 posts ] 

All times are UTC


Who is online

Users browsing this forum: No registered users and 5 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Limited