Topic: GlobalDownload/Upload does not work?

Hi,
I just started playing around with MySecureShell and I really like it so far.
However i cannot get a grip of the GlobalDownload and -Upload settings, they just won't work.

I have set them both to 500k in the <Default>-section, but still users can max out my bandwidth of 25Mbit.

"MySecureShell --configtest" gives me;
GlobalDownload        = 512000 bytes/s
GlobalUpload             = 512000 bytes/s

And i have not used any ByPassGlobal... parameters...


Also, the "sftp-who" does not seem to work. Speeds are mostly not recognized and users only show up for a couple of seconds most of the time (even though their downloads/uploads continue).
I suspect these problems are related..

Any ideas what can be causing this and where I can start to troubleshoot?

Re: GlobalDownload/Upload does not work?

Hi,

Could you give us more information of your version of MySecureShell and your OS please ?

Did you also try sftp-verif command ?

Thanks

3 (edited by pepto 2010-01-21 19:20:57)

Re: GlobalDownload/Upload does not work?

Of course, excuse me.

I am on a 32bit Ubuntu Server (2.6.27-14-server) and i installed the MSS 1.15 from the sourceforge page a couple of days ago.


xxx@xxx:~$ sudo sftp-verif
#################################################
#        MySecureShell Verification Tool        #
#################################################


** Verifing file existance **

Verifing file existance of /bin/MySecureShell                   [ OK ]
Verifing file existance of /usr/bin/sftp-who                    [ OK ]
Verifing file existance of /usr/bin/sftp-kill                   [ OK ]
Verifing file existance of /usr/bin/sftp-state                  [ OK ]
Verifing file existance of /usr/bin/sftp-admin                  [ OK ]
Verifing file existance of /usr/bin/sftp-verif                  [ OK ]
Verifing file existance of /usr/bin/sftp-user                   [ OK ]
Verifing file existance of /etc/ssh/sftp_config                 [ OK ]

** Verifing rights **

Verifing file rights of /etc/ssh/sftp_config                    [ OK ]
Verifing file rights of /usr/bin/sftp-who                       [ OK ]
Verifing file rights of /usr/bin/sftp-verif                     [ OK ]
Verifing file rights of /usr/bin/sftp-user                      [ OK ]
Verifing file rights of /usr/bin/sftp-kill                      [ OK ]
Verifing file rights of /usr/bin/sftp-state                     [ OK ]
Verifing file rights of /usr/bin/sftp-admin                     [ OK ]
Verifing file rights of /bin/MySecureShell                      [ OK ]


** Verifing rotation logs **

MySecureShell rotation logs                                     [ OK ]


** Verifing server status **

Verifing server status (ONLINE)                                 [ OK ]


** Verifing server dependencies **
Show only error(s):


** Verifing server configuration (just for user: root) **
Show only error(s):


** All tests dones **



Edit:
And this is my config:

<Default>
        MinimumRights                  0700 0700
        Home                           /home/chroot
        DefaultRights                  0756 0756
        GlobalDownload                 500k
        LimitConnectionByUser          2
        StayAtHome                     true
        ShowLinksAsLinks               false
        LimitConnection                10
        ResolveIP                      true
        IdleTimeOut                    300
        GlobalUpload                   500k
        LimitConnectionByIP            10
        VirtualChroot                  true
        Charset                        ISO-8859-15
</Default>

<Group admin>
        VirtualChroot                  false
        IsAdmin                        true
        IdleTimeOut                    0
        StayAtHome                     true
        Shell                          /bin/bash
</Group>

Re: GlobalDownload/Upload does not work?

Hi,


Users of MySecureShell have shell "/bin/MySecureShell" ?

If you have on sftp user connecter, can you check if /bin/MySecureShell is running (just copy "ps fauxwww").

Thanks smile

Re: GlobalDownload/Upload does not work?

Hello, thank you for your time.

This is a snippet from the output:

pepto@xxx:/$ ps fauxwww
...
root      5335  0.0  0.0   5400  1064 ?        Ss   Jan20   0:00 /usr/sbin/sshd
root     24152  0.0  0.2  12968  4528 ?        Ss   09:08   0:00  \_ sshd: pepto [priv]
pepto    24197  0.0  0.1  13100  2168 ?        S    09:09   0:01  |   \_ sshd: pepto@pts/1
pepto    24199  0.0  0.1   5708  3056 pts/1    Ss   09:09   0:00  |       \_ -bash
pepto    25711  0.0  0.0   2740  1032 pts/1    R+   12:26   0:00  |           \_ ps fauxwww
root     25681  0.1  0.2  13068  4608 ?        Ss   12:24   0:00  \_ sshd: user1 [priv]
user1    25689  0.0  0.0  13068  2052 ?        S    12:25   0:00  |   \_ sshd: user1@notty
user1    25691  0.0  0.0   3836  1584 ?        Ss   12:25   0:00  |       \_ MySecureShell -c /usr/lib/openssh/sftp-server
root     25694  0.5  0.2  13068  4608 ?        Ss   12:26   0:00  \_ sshd: user1 [priv]
user1    25704  1.8  0.2  15732  4840 ?        S    12:26   0:00      \_ sshd: user1@notty
user1    25706  0.1  0.1   5332  3060 ?        Ss   12:26   0:00          \_ MySecureShell -c /usr/lib/openssh/sftp-server
...


where I am logged in through putty ssh, and user1 is logged in (and uploading) to the sftp.


user1 line from /etc/passwd:

user1:x:1003:1004::/home/chroot:/bin/MySecureShell

Re: GlobalDownload/Upload does not work?

Which version of Ubuntu server is installed ?


Have you changed the configuration of security ? Maybe appArmor or anything else...

Which sftp client is used ?

Re: GlobalDownload/Upload does not work?

I am pretty sure it is 9.04 server.

I have not fiddled with appArmor or anything similar.  Only security measures i have done is to only allow ssh from hosts within the hosts.allow file.

I am using FileZilla 3.3.0.1 from windows 7 and GFTP 2.019 from ubuntu 9.10 desktop.

Come to think of it, the GFTP is working at the moment (first time i tried), going steady at 500k/s.  The filezilla client however is not.  So can this be a client issue?  It seems the filezilla clients speed is not recognized using the sftp-who command. (speed is at 0 although i am clearly downloading)

8 (edited by teka 2010-01-22 18:27:11)

Re: GlobalDownload/Upload does not work?

I'll check if it's not a bug...

It's work perfectly for me... strange...

Re: GlobalDownload/Upload does not work?

Maybe FileZilla use multiple connections to download ?