Hi Dolbyman,
now I took some time and tested what you proposed. I enabled the admin account
again and logged me in via the browser interface.
As you assumed I was able to start Download Station then and configure some
Torrents to download them. So this was a temporary workaround for me to get
some files downloaded.
But the QNAP recommendation to disable the admin account and use another
account with administrator rights (i. e. from the administrators group GID=0) for
security reasons is still there.
The normal administration tasks work well with my local lcladmin account. But
being not able to administer the Download Station service with that account makes
Download station unusable for me. I hope that some QNAP staff people will have
a look at this issue and may come up with a solution.
For further investigation I checked user IDs and group IDs of the lcladmin and
other accounts from the ssh console. Interestingly the output of “/usr/bin/id” and
“/bin/busybox id” for the lcladmin account differs. The “/usr/bin/id” tool does not
“see” the administrators group membership of lcladmin. Please see the output
of these tools and the content of /etc/passwd and /etc/group below
(user names changed):
[lcladmin@nas-ts431 ~]$
[lcladmin@nas-ts431 ~]$ /usr/bin/id
uid=1000(lcladmin) gid=100(everyone)
[lcladmin@nas-ts431 ~]$ /bin/busybox id
uid=1000(lcladmin) gid=100(everyone) groups=0(administrators),100(everyone),1000(lcladmin)
[lcladmin@nas-ts431 ~]$ sudo -i
:
:
[admin@nas-ts431 ~]# /usr/bin/id lcladmin
uid=1000(lcladmin) gid=100(everyone)
[admin@nas-ts431 ~]# /bin/busybox id lcladmin
uid=1000(lcladmin) gid=100(everyone) groups=100(everyone),0(administrators),1000(lcladmin)
[admin@nas-ts431 ~]# /bin/busybox id usr1
uid=1001(usr1) gid=100(everyone) groups=100(everyone),1001(usr1),1005(cmnusers)
[admin@nas-ts431 ~]# cat /etc/passwd
admin:x:0:0:administrator,,administrator,:/share/homes/admin:/bin/sh
guest:x:65534:65534:guest:/tmp:/bin/sh
httpdusr:x:99:0:Apache httpd user:/tmp:/bin/sh
[sshd]:x:110:65534:SSHD Privilege Separation:/var/empty:/bin/sh
lcladmin:x:1000:100:Linux User,,administrator,:/share/homes/lcladmin:/bin/sh
usr4:x:1004:100:Linux User,,,:/share/homes/usr4:/bin/sh
usr1:x:1001:100:Linux User,,,:/share/homes/usr1:/bin/sh
mmuser:x:503:100:Linux User,,,:/share/homes/mmuser:/bin/sh
usr2:x:1002:100:Linux User,,,:/share/homes/usr2:/bin/sh
usr3:x:1003:100:Linux User,,,:/share/homes/usr3:/bin/sh
[admin@nas-ts431 ~]# cat /etc/group
administrators:x:0:admin,lcladmin
everyone:x:100:admin
guest:x:65534:guest
lcladmin:x:1000:lcladmin
usr1:x:1001:usr1
usr2:x:1002:usr2
usr3:x:1003:usr3
usr4:x:1004:usr4
cmnusers:x:1005:usr1,usr2,usr3,usr4
It seems that lcladmin being in the administrators group (gid=0) does not suffice to configure
“Download Station”.