jonathan_at_solarwinds

Gotta jump on here after having installed dozens of Serv-Us for my own use and for customers. Whether you run on Windows or Linux should be determined by the level of integration you want with Active Directory (AD), NTFS, event logs and/or custom scripts. * If you are going to authenticate ANY of your users through AD, use…

Could you: * Perform a backup/restore to a test installation on a VM * BUT, before you do the restore, crack into each user's *.Archive file and find/replace the attribute that disables/un-expires the user * Finish the restore, then perform a dump ?

This has been a known issue in Serv-U since before I starting working for Rhinosoft (who originally wrote Serv-U). From the original KB: User Collections in Serv-U "Collections in Serv-U are a way of logically organizing users and groups to reduce load times when managing users in the Serv-U Management Console. Unlike…

The related Serv-U Database Integration Guide contains many details about this: http://www.serv-u.com/integration_guide Related integration features are briefly summarized here: Serv-U Integration and Customization

In Serv-U v14 (actually a v15 beta), I can reproduce this error by trying to create an SFTP server cert in a folder where SYSTEM doesn't have any write or modify permissions. So...I'd make sure that the SYSTEM user (if you're running as a system service) or whatever other user Serv-U might be running as has write/modify…

>> Disabled SSLv3 and SSLv2 by default. >> Added the ability to view the fingerprint for the server or domain SSH private key. The CISSP/security side of me is cheering today. Buh-bye SSLv3 - we won't miss you. And thanks for adding the fingerprint where people can easily grab it: it's a security best practice to be…

A 30-day evaluation copy of the SolarWinds Log Forwarder is also available when you do a Kiwi Syslog Server evaluation. (As Yann noted, the full version is available from your SolarWinds Customer Portal after you have purchased a commercial product.) You can find the Log Forwarder trial executable in the Kiwi Syslog…

I think you're crossing a couple of streams there. Here's the story on the elements you mentioned. * FTP Voyager is SolarWinds free FTP client. Windows users can use this to manually transfer files, synchronize folders or schedule transfers using any FTP, FTPS (SSL/TLS) or SFTP (SSH) server, including our own Serv-U FTP…

The domain should have an SSH SERVER key set up on (Domain) | Limits & Settings | Encryption Settings under "SSH Private Key (for SFTP)". That's used to accept incoming SSH/SFTP connections on your SFTP listeners, and you will keep both your password-protected private key file and your public key file on the Serv-U server.…

I don't think I entirely follow. Are you trying to copy/paste users like CSRManager into each domain? Or, are you saying that user imports into the DB breaks authentication for existing users in the DB?

Long story short you'll be using two features built in to Serv-U. * User impersonation: Whenever your end users sign on with their AD credentials, Serv-U will used those credentials (by default) to access Windows folder resources. (You can override this behavior with explicit folder permissions, but I don't think you want…

Remember you're looking at the transfer from two different points of view: 1) The messages from the SERVER start with 3-digit codes, so the server thinks that the transfer happened really fast. 2) The messages in blue are the CLIENT's perspective, so the client think that things took longer than the server did. You'll see…

I'm missing something here. Do you have a web proxy or other web content filter feeding messages to Kiwi Syslog Server? Are you watching these messages from the Kiwi Syslog Server web interface?

When you are testing out macros/variables in Serv-U for the first time, I always recommending a "rainbow" message that uses ALL available macros so you can which ones are really filled in by each event. To get a complete list of macros for your rainbow message, go to this KB: System Variables In Serv-U ...and cut/paste the…

Yes, there's an easier way. Hopefully you're using a home folder naming convention that uses usernames as the names of home folders. (e.g., "D:\Home\jsmith") * Build yourself a new batch file that looks like this: SET TEMPHOME=%1 MKDIR %TEMPHOME%\Incoming MKDIR %TEMPHOME%\Outgoing * Go to Domain | Domain Events * Create a…

>> will this affect any of our current SFTP connections that are NOT using keys? No. Every user has independent authentication settings. >> Once I have Serv-U generate a private key, what do I give the client, exactly? You need to give your end user BOTH of the files Serv-U creates. (Try it yourself; creating keys in…

#1) Make sure you're running Serv-U MFT edition. #2) Read Configuring Serv-U With An SSL Certificate Note that Serv-U also supports "wildcard" certs - I've used a couple of these in my deployments too. 

Back in the day I wrote the articles (and the Serv-U backup script) josh.d referenced for exactly this purpose. However, I'd also like to encourage you to check out Serv-U's features that allow you to tie Serv-U into external authentication sources and external file shares. Those features allow you to move between boxes…

That's correct - Serv-U uses OU membership to map Windows users to Serv-U groups. KB article: Windows Groups and Organizational Units in Serv-U

This is a VERY common situation with new FTPS configurations, Serv-U or otherwise. In fact, we spend a while on it in the official Certified File Transfer Professional program. (See https://youtu.be/qyY1rDCpGuM?t=16m15s​ for a quick video segment on this.) As josh.p mentioned, there is an explicit feature in Serv-U to tell…

Click here to find a couple of answers Or, skip directly to the KB about Backing Up or Moving Serv-U Settings

Also, be sure to "upvote" this feature request: http://thwack.solarwinds.com/ideas/2213

We will be offering another webinar to talk about Serv-U's new file sharing capabilities in late July - stay tuned!

If you missed it... The full recording can be seen here: Introduction to Serv-U Webinar (32:18) <object id="flashObj" width="650" height="479" classid="clsid:D27CDB6E-AE6D-11cf-96B8-444553540000" codebase="http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=9,0,47,0"><param name="movie"…

You can also watch a guided tour in this short (2:24) video. Secure File Sharing with SolarWinds Serv-U MFT Server - YouTube

I've deployed Serv-U like this for a number of customers. 1) The AWS (Amazon Web Service) you'll be using is EC2 (Elastic Compute Cloud), which essentially spins up on-demand Windows or Linux VMs of your choice. 2) I like to run Serv-U MFT Server on a 2-core, 4GB-mem Windows 2008 R2 instance (your storage will vary) with…

Here's a quick KB article that covers the basics: Public Key Authentication in Serv-U If you're generating keys on Serv-U, you may also find Converting OpenSSH and PuTTY Style Keys useful. 

Looks like you might have two requirements: #1) Access a Windows share using alternate credentials. Serv-U supports this by combining settings on the Virtual Paths and Directory Access tabs in the right way. First, you need to have your share defined as a Virtual Path, such as "\\server\share\folder" mapped to…

Are you hoping to tell your end users about the correct fingerprint for your server (a security best practice) or really just give them the server's public key (a.k.a. the "host key")? To distribute Serv-U's SSH (Server Key) Fingerprint: * Connect to the server with a command-line SFTP client on a fresh machine *…

Yes, the latest version of Log Forwarder does support Windows Server 2008. If you want to grab a 30-day trial* of Log Forwarder, download the latest Kiwi Syslog Trial and look for the "LogForwarder" executables in the downloaded Zip file. * = Log Forwarder is not a separate SolarWinds product; the full version is available…