owncloud plugin now available in Plugins menu!

[Basil Hendroff]

I just installed Chrome on my laptop and when I go to my owncloud page it says:

The site's security certificate is not trusted!
You attempted to reach 192.168.2.121, but the server presented a certificate issued by an entity that is not trusted by your computer's operating system. This may mean that the server has generated its own security credentials, which Chrome cannot rely on for identity information, or an attacker may be trying to intercept your communications.
You should not proceed, especially if you have never seen this warning before for this site.

Not sure if you've changed your browser settings to reject self-signed certs?????

Problem solved! There were two issues.

The first was I needed to set up port forward for https WAN port 443 in my router to the owncloud jail ip at port 443.

The second was, in my case, because of some sort of port conflict on incoming WAN port 80, I had to use port 83 for incoming http requests to owncloud. When switching to https, I'd forgotten to remove port 83 from the address. That was just silly on my part, but easy to do for a noob.

You may like to consider adding something to your as yet unreleased owncloud guide on owncloud listening on port 80 (http) and port 443 (https) so router port forwarding is a prerequisite. Further, the text below is valid as long as port forwarding uses the same ports between the internal network and the internet (which wasn't possible for me for http for reasons still unclear to me).

Next I'm going to force https. To do this you simply change your browser webpage address from http to https. Next I click on my username in the upper right corner and choose "admin" from the dropdown. Then scroll down to Security and check the box "Enforce HTTPS". This prevents http connections. Now we have some security when transferring files. You will need to cycle the plugin off and then back on for this setting to be enforced. So go ahead and cycle the plugin of and then back on.

 

[cyberjock]

Well, I don't consider my guide to need to include considerations for port forwarding. If so where do I stop? Do I even include steps with how to properly setup the LAN setting on the FreeNAS machine? What about how to install FreeNAS? At some point I have to assume that the user does have the level of knowledge required to do things right and that they can troubleshoot any issues created from their own unique configuration. So I consider it beyond the scope of setting up Owncloud. It's also very dangerous to do that with Owncloud as there are well known security problems with Owncloud being availble on the internet. The last one I read about let someone get admin privledges on your Owncloud server without authenticating. Whoops! Now tell me its a good idea to keep Owncloud open to the world.

If you read around the forums we make it pretty clear that port forwarding to your FreeNAS server is very dangerous. Plenty of people here have had their FreeNAS server's pwned because of port forwarding. In short, setup VPN or don't be surprised if you get pwned. Nobody in their right mind that deals with security does port forwarding as a secure solution to sharing LAN services with the Internet. We award zero sympathy points for pwned systems since its discussed in the manual that you should be using a firewall to block incoming access.

 

[Basil Hendroff]

Well, I don't consider my guide to need to include considerations for port forwarding. If so where do I stop? Do I even include steps with how to properly setup the LAN setting on the FreeNAS machine? What about how to install FreeNAS? At some point I have to assume that the user does have the level of knowledge required to do things right and that they can troubleshoot any issues created from their own unique configuration. So I consider it beyond the scope of setting up Owncloud. It's also very dangerous to do that with Owncloud as there are well known security problems with Owncloud being availble on the internet. The last one I read about let someone get admin privledges on your Owncloud server without authenticating. Whoops! Now tell me its a good idea to keep Owncloud open to the world.

If you read around the forums we make it pretty clear that port forwarding to your FreeNAS server is very dangerous. Plenty of people here have had their FreeNAS server's pwned because of port forwarding. In short, setup VPN or don't be surprised if you get pwned. Nobody in their right mind that deals with security does port forwarding as a secure solution to sharing LAN services with the Internet. We award zero sympathy points for pwned systems since its discussed in the manual that you should be using a firewall to block incoming access.

Point taken. For my own understanding, does this mean that http + vpn is sufficient, or should a belt and braces approach be taken with https +vpn? I guess, the question from me is what the value of https for owncloud is if a vpn is used? Would it be correct to say that the addition of https provides owncloud confidentiality within the private network while VPN + https provides owncloud security and confidentiality on the public network?

 

[cyberjock]

Would it be correct to say that the addition of https provides owncloud confidentiality within the private network while VPN + https provides owncloud security and confidentiality on the public network?

That, exactly!

 

[sfl]

Hi there,

Apologies if this is obvious to most. I'm considering owncloud to avoid having my files sit on Mountain View/Cupertino servers and the above advice not to port forward to FreeNAS seems sound to me. That said, not having the files available outside home limits the usage to sync'ing when at home only; that sounds like it would limit owncloud's usefulness for mobile devices. I know I must be looking at this the wrong way. Is the only way to make this secure really to setup a VPN (not sure how that would work from mobile - would love some pointers to references on the topic)? How do providers like owndrive support iOS if it's not by opening up a port over SSL/TLS?

 

[mcolinp]

Jordan;
I am so thankful that you guys have included owncloud in the ready made plugins. As a lifelong Mac user since the Apple II; this is going to make my life so much easier: (keep reading for further explanation . . .). I did succeed in getting owncloud to work locally; and will further investigate opening up true "cloud" functionality when I am comfortable with my knowledge of the security measures used.

owncloud solves more than one delima I have had using two OS'es (Windows/Mac) for my product design needs. Unfortunately the world never quite fully embraced OS-X to the level that makes it truly a level playing field; and many programs I own for 3D CAD still only function in a Windows environment. Which is why I originally started using FreeNAS; to have both Read/Write access to my data from either OS. The issues (for lack of a better term) I encountered once setup; was that Windows search is notoriously horrible (when compared to OS-X's instant "Spotlight"), and Time Machine is not really setup to backup versions of a Network drive: (For good reasons I might add, as I did look into work-arounds).

So owncloud is the perfect fit to solve these issues; since itself creates "versions", and also includes a stellar search field which performs as I would expect; except it is targeting all the files within the own cloud share. The other cool thing about owncloud, is that it has desktop client apps that can sync documents back to the FreeNAS server. So no matter where I make changes (Windows/Mac); it is always up to date!

I am considering creating a basic tutorial with screenshots of how I went about getting it to work (locally). There are many things I tried that did not work; which has led me to a much simpler approach when it comes to sharing data. Mainly, that nested datasets tend to create more headaches and trouble than they are worth; which has lead to a more basic setup of multiple shares (none nested).

 

[SRH]

Hello all
Freenas/owncloud working great.
I have not however been able to work out how I get files out of owncloud into freenas storage so that I can then delete the files from owncloud.
Any ideas please ?

Regards to all

 

[Basil Hendroff]

Not sure this is possible in ownCloud. BtSync might be a better way to go.

Sent from my Nexus 4 using Tapatalk

 

[entyrion]

Having this plugin is a great option, thanks for the hard work! This is probably a silly question, but I notice that 6.0.1 has been superseded by 6.0.2, is there a way to manually update, or will I need to wait for the plugin maintainers to release a new update? I noticed one or two people asked this in the thread already, but I didn't see a clear answer. Thanks!

 

[warri]

Your best bet is to create a feature request on https://bugs.freenas.org and request the plugin to be updated.

 

[entyrion]

Where is the config.php file located so I can set up ownCloud email in the plugin? My /usr/local/www/owncloud/config directory only has the file "config.sample.php."

 

[AlexWhat]

After some research I found were is the httpd-ssl.conf file located so I was able to change listening port from 443 to some other port like 20443.
The port has to be changed in two places "Listen 443" and "<VirtualHost _default_:443>"
Now I can access the ownclaud with different port - socket.
The file is located "/usr/pbi/owncloud-amd64/etc/apache22/extra/"
If you have self sign certificate or other you can use them by replacing "server.crt" and "server.key" in apache22 directory.

 

[entyrion]

After asking on the IRC channel, the actual file location for the plugin is /usr/pbi/owncloud-amd64/www/owncloud/config/config.php. Modifying this file with the instructions found at http://forums.freenas.org/index.php...ing-nginx-php-fpm-and-mysql.17786/#post-95882 got gmail up and running with the ownCloud plugin.

 

[entyrion]

I'm running a home install of ownCloud for myself and a few other users. I just performed the plugin's automatic upgrade from 6.0.1 -> 6.0.3 and it basically overwrite my old install with a new one. I had backed up all my data, but I had to create all-new user accounts and reconfigure the plugin for things like email pw recovery and all that. Is this normal? While I can live with it for my own data, this makes upgrading highly troublesome when administering multiple user accounts. Did I do something wrong, or is this working as intended? Thanks!

 

[cyberjock]

I was able to upgrade the plugin in the past without a problem. I use my own jail and setup Owncloud on my own because I wanted higher performance than I was getting with the plugin.

 

[cucca]

excuse me, i'm not able to find sync-exclude.lst file... can someone help me to locate it o where create it...

thanx!

 

[Freesnofla]

@cyberjock; I wasn't yet able to find your tutorial concerning the owncloud installation inside a jail, without using the owncloud plugin. I have searched inside the tutorial area, but was without luck so far. Can you give me the direct link to that tutorial?

 

[jonnn]

@cyberjock; I wasn't yet able to find your tutorial concerning the owncloud installation inside a jail, without using the owncloud plugin. I have searched inside the tutorial area, but was without luck so far. Can you give me the direct link to that tutorial?

http://forums.freenas.org/index.php?threads/how-to-owncloud-using-nginx-php-fpm-and-mysql.17786/

be warned if you are newb, the guide is not exactly complete. read the thread and you might have to figure out a couple things.

 

[PatchDog]

Installed Owncloud without a hitch. Testing locally on network. Setup port forward to access from outside network.

You are accessing the server from an untrusted domain.
Please contact your administrator. If you are an administrator of this instance, configure the "trusted_domain" setting in config/config.php. An example configuration is provided in config/config.sample.php

OK no problem go to login with WinSCP to edit config.php and I cant.

What's username and password?

 

[ClassicGOD]

Installed Owncloud without a hitch. Testing locally on network. Setup port forward to access from outside network.


OK no problem go to login with WinSCP to edit config.php and I cant.

What's username and password?

Login to your FreeNAS (not the jail) and go to /mnt/pool/your_jail_dir/owncloud_1(or whatever is the name of your jail)/usr/pbi/owncloud-amd64/www/owncloud/config (if you are using a plugin if not - /mnt/pool/your_jail_dir/your_jail/ is basically the / of the jail. Go there and then go wherever your owncloud installation is.