root FTP user, how?

  • Fredrik-s
  • 06/01/10
  • Offline
Posted: Sat, 2011-07-02 08:18

Hello,

I've been googling lots of virtualmin.com forum threads still can't find a simple answer to my question.

How do I create a root a user that can read/write/change ALL files through FTP, including files in the folder /etc/?

Greetings Fredrik-s


Howdy, The only user that

  • andreychek
  • 01/05/09
  • Offline
  • Sat, 2011-07-02 09:30

Howdy,

The only user that could do that is the root user. However, that's considered a huge security risk to allow root to login via FTP, since FTP is a plaintext protocol. The bad guys could sniff your password, and then login as your root user.

Because of that, all the FTP services come with root login disabled.

However, you could always login as root via SFTP, using a tool such as WinSCP. That would be a bit more secure, and allow you to edit all the files on your system.

-Eric


Thanks for answer Eric, I

  • Fredrik-s
  • 06/01/10
  • Offline
  • Sat, 2011-07-02 09:56

Thanks for answer Eric,

I just need to edit one thing and then no more. So it is just for a temporary change. How do I enable the root to login through FTP?


Why not editing that one

  • Locutus
  • 10/10/10
  • Offline
  • Sat, 2011-07-02 10:34

Why not editing that one thing via SSH login? :) Or through the Webmin file manager/editor module, for that matter. That's much faster and safer done than fiddling with ProFTPD's settings.


Why not provide answers to the question?

  • TheChemic
  • 05/23/10
  • Offline
  • Mon, 2012-02-13 02:31

I have also been searching for this answer for months. Google searches repeatedly bring this page up in top results for granting root FTP access on Virtualmin/Webmin boxes. If you know how to accomplish, please share your knowledge. In the time you spent beating around the bush with the other user, you could have provided more meaningful information.

I need to know how to enable FTP for the root user. I run several development servers behind a firewall. They are hosted on a LAN and accessed via the same LAN. They are completely inaccessible from the internet. Please do not respond by trying to save me from myself. Inadvertent self destruction, painful hours researching, and hours of reworking things that you broke are AMAZING learning tools. Do NOT deprive me of my opportunity to break something.

Again, if you know how to grant the root user with FTP access, please share your knowledge. Many thanks.


Being unfriendly is indeed

  • Locutus
  • 10/10/10
  • Offline
  • Mon, 2012-02-13 07:41

Being unfriendly is indeed the recommended way to get help here.

During all those hours of experimenting and breaking stuff, you didn't arrive at the idea to look through the ProFTPD module in Webmin? You'll find the necessary options there to enable FTP root access. And if you ask nicely, I might even tell you which those are.


Sorry, I also have to ask.

  • helpmin
  • 11/26/10
  • Offline
  • Tue, 2012-02-14 00:47

Sorry, I also have to ask. Why not use sftp (which is different from ftps) instead ftp? All "ftp" apps can handle it, configuration is basically identical (just a different port). I am just asking out of curiosity (and not to convince you not to use ftp).


@helpmin: Mmh, I think you're

  • Locutus
  • 10/10/10
  • Offline
  • Tue, 2012-02-14 05:37

@helpmin: Mmh, I think you're both mixing things up there, and are not 100% correct. :)

For one, what you probably mean to be "identical" to FTP is FTPS. That's FTP over SSL. SFTP on the other hand is file transfer over SSH, which is considerably different.

Also, FTPS is not completely identical to FTP. On the client end maybe, but on server side you need to set up certificates and stuff. So it is somewhat more complicated.

Aside from that: Well if you have a server in your LAN which is not accessible from the outside, I guess it's okay to use FTP, also for root. Not a lot can go wrong then. :) Although I personally use Samba for file management, especially in the LAN. It's much more comfortable than FTP.


I only talked about ftp

  • helpmin
  • 11/26/10
  • Offline
  • Tue, 2012-02-14 05:53

I only talked about ftp clients like winscp. Instead host and port 21 in Winscp you just use host port 22 and you have a secure connection (without configuring TLS etc). But my wording could have been better, I agree :-)

And to answer my own question, there is one reason. FTP is much fast than SCP.

PS

I like sshfs


WinSCP can do all of that,

  • Locutus
  • 10/10/10
  • Offline
  • Tue, 2012-02-14 10:49

WinSCP can do all of that, that's right. But not "all FTP apps", like you said, support SFTP. :) On the contrary. Usually, an FTP app does FTP(S), and that's it. WinSCP on the other hand is primarily an SFTP app, which happens to also support plain old FTP.