sftpgo

New features:

• Keyboard interactive authentication. You can easily setup a customizable multi-factor authentication.
• Support for serving S3 Compatible Object Storage and Google Cloud Storage over SFTP/SCP.
• Integrated database schema migration.
• Per user authentication methods. You can, for example, deny one or more authentication methods (password, public key, keyboard interactive) to one or more users.
• Virtual folders: directories outside the user home directory can be exposed as virtual folders.
• Dynamic user modification just before the login via external programs.
• Per user and per directory file extensions filters: files can be allowed or denied based on their extensions.
• Support for HAProxy PROXY protocol: you can proxy and/or load balance the SFTP/SCP service without losing the information about the client's address.
• Several bug fixes for SSH command parsing.
• Documentation should be less confused now.

Upgrading

If you are upgrading from version 0.9.5 or before, you have to manually apply, for the last time, the appropriate SQL upgrade scripts for your database before starting the 0.9.6 version, from now on the database schema will be automatically checked and updated, if required, at startup.

Another way to update from version 0.9.5 is to backup your users using the dumpdata REST API, delete/rename your database and create a new one using the initprovider command, then start the service and restore your users using the loaddata REST API. For Windows users this is the recommended update path since we moved the configuration directory to C:\ProgramData\SFTPGo and so a new configuration file and an empty database will be installed after updating using the Windows installer, sorry for the annoyance.

New features:

• Support for Git repositories over SSH.
• Support for rsync over SSH.
• Backup and restore via REST API. You can now easily backup your users, in a database independent format, and switch between the supported data providers.
• Scripts to import Linux system users and Pure-FTPd/ProFTPD virtual users
• Per user IP filters: login can be restricted to specific ranges of IP addresses or to a specific IP address
• Custom authentication using external programs.
• Per directory permissions. You can now set permissions such as these ones:

{'/': ['*'], '/somedir': ['list', 'download']}

If you are upgrading from a previous version please apply the appropriate SQL upgrade script for your database before starting the 0.9.5 version.

If you are upgrading from a previous version please apply the appropriate SQL upgrade script for your database before starting the 0.9.4 version.

This release is built using Go 1.13.3 and so it fixes CVE-2019-17596.