ldap – Syncplify Developers Blog

Syncplify Devs
February 13, 2024

Syncplify Server! v6.2.25 released

Importance of this update: [HIGH]

What’s changed?

Upgraded the compiler to the latest version, which comes with many fixes in the compiler’s standard library
Greatly improved performance when joining a new node to create a new HA (high-availability) deployment or to add a node to an existing one
When using LDAP Groups, the JWT is now correctly created for the individual username that actually logged in, instead of the group name
VFS (Virtual File System) soft and hard quotas are now expressed in SI units, just like every other {X}byte value everywhere else in the software
Fixed FTPD (all FTP protocols) login/logout configurable messages functionality
Fixed internal DNS resolver which could not resolve certain FQDNs
Tiny minor/cosmetic bug-fixes here and there in the WebClient! UI

IMPORTANT NOTE: those who are running the “worker” system service under a different account (not System or LocalSystem) will need to re-configure the service to run under such account after upgrading from any version number <= 6.1.12)

Upgrading from v6.x.y is a simple and fairly automatic process: simply download the latest version from the official download page, and install it over the existing version, all of your settings and license will be kept.

If, instead, you’re upgrading from an older (v4/v5) version, you find the upgrade instructions in our knowledge base.

Thank you all for trusting our software with your secure file transfers!

Leave a comment InRelease Notes Syncplify Server! WebClient!

Syncplify Devs
June 9, 2023

Syncplify Server! v6.1.10 released 🔥

Importance of this update: HIGH

Fixed

The Zip function in our scripting engine now can correctly create encrypted zip archives that are compatible with both Windows and Linux OSs
Editing of bindings for HA (high-availability) deployments now works as expected
An occasional false-positive in closing idle sessions has been eliminated

New

Added more debug and trace logging for quota management
JWT (auth token) management in WebClient! has been completely redesigned for better security and broader client support
Multiple WebClient! shared objects (files/directories) can now be accessed concurrently in different tabs/windows in the same browser process
Added support for “subject alternative names” in our SNI implementation
Added a ton of trace-level logging for LDAP queries

Upgrading from v6.x.y is a simple and fairly automatic process: simply download the latest version from the official download page, and install it over the existing version, all of your settings and license will be kept.

If, instead, you’re upgrading from an older (v4/v5) version, you find the upgrade instructions in our knowledge base.

Thank you all for trusting our software with your secure file transfers!

Leave a comment InRelease Notes Syncplify Server! WebClient!

Syncplify Devs
March 25, 2023

Syncplify Server! v6.0.26 released

Importance of this update: MINOR

Fixed

Little cosmetic (Admin UI) bug introduced in v6.0.25 that prevented editing of LDAP users/group after importing them from an old V4/V5 backup
Cloud VFSs (S3, Azure, GCP) now correctly delete empty directories even when the client software sends the request without a trailing slash

Improved

Figured out a way to rename/move non-empty directories in cloud VFSs (S3, Azure, GCP) – it’s not fast (there’s no way to make this fast, as the only way is to iterate over all contained objects) but it works

Upgrading from v6.0.x is a simple and fairly automatic process: simply download the latest version from the official download page, and install it over the existing version, all of your settings and license will be kept.

If, instead, you’re upgrading from an older (v4/v5) version, you find the upgrade instructions in our knowledge base.

Thank you all for trusting our software with your secure file transfers!

Leave a comment InRelease Notes Syncplify Server! WebClient!

Syncplify Devs
March 6, 2023

Syncplify Server! v6.0.21 released

Today we released Syncplify Server! v6.0.21; here’s what’s new and improved in this version.

Importance of this update: VERY IMPORTANT

Fixed

Permission-check for specific FTP types (FTP, FTPS, FTPES) is now carried out correctly
Importing of LDAP users from old V4/V5 backup files now works correctly, as long as at least one verifiable LDAP server profile is found in the old V4/V5 backup file
Blocklist now correctly checks and updates CIDR items
FTP(E/S) sessions are now decremented correctly when they terminate (no more dashboard poisoning)

Improved

Installer now automatically runs DB maintenance tasks if/when needed
Integrated most up-to-date Go crypto library (various fixes and improvements)
Importing of supported SSH host keys from V4/V5 backups has been improved
Improved blocklist performance (speed) by 80% on average
Upgraded SyngoDB to v4.5.2 (latest)

Added

Added --update, --norollback and --trace command-line options to CLI installer
Use of SIMD-accelerated SHA256 (if CPU supports it)
Added support for custom hash sub-commands to the SSH2 protocol handler’s exec command
Added wildcard directory listing option to all VFS types

Upgrading from v6.0.x is a simple and fairly automatic process: simply download the latest version from the official download page, and install it over the existing version, all of your settings and license will be kept.

If, instead, you’re upgrading from an older (v4/v5) version, you find the upgrade instructions in our knowledge base.

Thank you all for trusting our software with your secure file transfers!

Leave a comment InRelease Notes Syncplify Server! WebClient!

Syncplify Devs
January 24, 2023

Syncplify Server! v6.0.11 released

Today we released Syncplify Server! v6.0.11; here’s what’s new and improved in this version.

Importance of this update: IMPORTANT

Fixed

The Windows version of the installer is now compatible with Windows 11 and Windows Server 2022 (we had to give up the “dark theme” of the installer because Win11 and Win2022 don’t support it, so don’t be surprised if this installer looks “light-colored”)
Some clients may cause an “unexpected EOF” false-positive during long file transfers, our software no longer falls for it now
Authentication of LDAP (Active Directory) user profiles now works as expected in WebClient!

Upgrading from v6.0.x is a simple and fairly automatic process: simply download the latest version from the official download page, and install it over the existing version, all of your settings and license will be kept.

If, instead, you’re upgrading from an older (v4/v5) version, you find the upgrade instructions in our knowledge base.

Thank you all for trusting our software with your secure file transfers!

Leave a comment InRelease Notes Syncplify Server! WebClient!

Syncplify Devs
June 30, 2021

Dropping Windows User/Group support

Syncplify.me Server! v1.0 was released back in Q1-2014. Since then, and all the way up to now, nobody (not a single one of our customers) has ever used profiles of type “Windows User” or “Windows Group”.

We have plenty of customers who rely on “Active Directory User” and/or “Active Directory Group” profiles, that’s obvious and expected, and the most common user profile is the so-called “Normal” user, which is a basic user profile saved in the software’s own internal database. But nobody has ever used the local operating system user profiles.

Therefore, given the security implications involved, the fact that with v6 we’re going fully cross-platform, and the fact that no one seems to even want to use this kind of profiles, we decided to drop them.

Syncplify Server! v6.0 will then feature the following user profile types:

Normal (local to the server, saved in Syncplify Server!’s own internal database)
LDAP User (which includes Active Directory)
LDAP Group (which includes Active Directory)

Later, probably with the release of v6.1, we will also add support for SAML2.0 user profiles.

Greatly simplified Active Directory (LDAP) integration

More good news regarding Syncplify Server! version 6.0: we have greatly simplified the management of users (and even groups) profiles.

In all previous versions the Admin had to specify the type of LDAP query (UPN/sAMAccountName) and the desired order in case of multiple query types, but groups would only allow the use of UPNs; this, occasionally, led to some confusion.

As of version 6.0, Syncplify Server! is capable of gracefully handling both UPN and sAMAccountName logins, for both LDAP user and group profiles, no questions asked, no special configuration needed.

What you see in the picture here above is the same user, logging in twice, the first time using their UPN, and then using their sAMAccountName.

But wait… there’s more!

In the example above, what you see is not a user profile in Syncplify Server!… it’s an LDAP Group profile! The “sftptest” (or “sftptest@ad9.local”) user was able to log in simply because it’s part of the “sftpusers” LDAP group in the underlying Active Directory. And the session logs make it very clear:

nodeId="peaceful-booth"
sender="ssh2_sftp-handler"
sessionId="e6G8PrHp2KRjQrqCS3SDSn"
clientIp="127.0.0.1"
serverIp="127.0.0.1"
serverPort=22 
protocol="ssh2_sftp"
username="sftptest@ad9.local |&gt; sftpusers"
method="SESSION-START"
uriStem=""
uriQuery=""
status=200
cliToSrvBytes=0
srvToCliBytes=0
latencyMillisec=0
latencyHuman="4.197µs"
userAgent="SSH-2.0-OpenSSH_8.4p1 Ubuntu-5ubuntu1"

This user profile simultaneously represents the user itself, as well as the group profile it belongs to, and from which it inherits its configuration, permissions, virtual folders, etc…

Tag ldap

Importance of this update: [HIGH]

What’s changed?

Importance of this update: HIGH

Fixed

New

Importance of this update: MINOR

Fixed

Improved

Importance of this update: VERY IMPORTANT

Fixed

Improved

Added

Importance of this update: IMPORTANT

Fixed