Syncplify.me Server! v4.0.9 released

We have just released version 4.0.9 of our Syncplify.me Server! software. This version features the following improvements:

  • Added brand new “zero configuration” option to the HTTP/REST Configuration Wizard
  • Added auto-selection of an alternate port for the HTTP/REST service if 443 is busy (without overwriting your IIS certificate)
  • Fixed a bug in Active Directory Group support (also read this article)
  • Fixed a stability bug in the REST API service which was affecting only Windows 2012 R2

As usual you can download this new release from our website.

Syncplify.me Server! v4: new format to define groups

Syncplify.me Server! version: 4.0.0+

From Syncplify.me Server! v1 through v3 groups’ usernames used to start with a star/asterisk and then the group name enclosed within square brackets. For example the SFTP Users group would have the following username: *[SFTP Users]

In version 4 we have removed the star/asterisk, because we have introduced the concept of user type. Therefore in version 4 the SFTP Users group will be defined as follows.
Username: [sftp users]
User Type: Windows Group or Active Directory Group Continue reading

True impersonation and [USER_HOME] directory

One of the main new features that come with Syncplify.me Server! v3.0 is true impersonation of Windows and Active Directory users.

Unlike previous versions, the new v3.0 actually impersonates the authenticated Windows or AD user and therefore accesses the underlying file system with such user’s privileges, limitations, and ACL. Syncplify.me Server!’s native file and directory permissions still apply, but they are applied only *after* the operating system rules, therefore they can further restrict the OS configuration, but not expand it (for safety reasons). Continue reading

Syncplify.me Server!: more on Active Directory authentication

This article covers the interaction between the client and Syncplify.me Server! in case of Active Directory authentication, and explains how auth-data sent by the client is interpreted by the server.

For the sake of our example we have set up a Windows Server 2012 R2 virtual machine, and created the “syncplify.local” domain (totally made up, you can use your own domain name of course). We have then created an AD group called “SFTP Users” (again you can create your own groups) and a couple users: “testuser” and “groupuser”. The testuser profile is only member of the “Domain Users” group, while the groupuser profile is member of “Domain Users” as well as of “SFTP Users”.

Important: if you’re using Syncplify.me Server! v4.0 or greater, please make sure you also carefully read this article before you continue.

Then we have created the two virtual profiles in Syncplify.me Server! with the usernames exactly as you see them in the picture here below:

2012R2-AD-1

Continue reading

Syncplify.me Server! and Active Directory user authentication

Besides it own internal user database, Syncplify.me Server! can authenticate users against the Windows user database and/or the Active Directory.

This article explains how to authenticate users against the Active Directory. A different article explains how to use the Windows (local) user database.

Continue reading