FrostByte 5024 Posted November 22, 2021 Share Posted November 22, 2021 (edited) WinSCP is a popular SFTP client and FTP client for Microsoft Windows which can be used as a GUI alternative to Putty or Terminal. The procedures below will allow you to perform tasks as Superuser just like you can with Putty or Terminal. Superuser privileges may be needed for the following: full read/write/ execute privileges creating or installing files or software modifying files and settings deleting users and data If you do not need superuser access with WinSCP and just want to access your NAS using Admin then skip the steps (2, 3, and 6) in blue. 1. Enable SSH on Synology NAS Open DSM Control Panel Click Terminal & SNMP Click Terminal tab Check "Enable SSH service" Click "Apply" 2. Create script to modify sudoers config file on Synology NAS This script modifies the sudoers file which is needed to prevent DSM from prompting administrators only for the Admin password again when switching to superuser during the login process as WinSCP can't handle this prompt. This script is saved to rerun again later because DSM updates tend to overwrite any changes to the sudoers file. Open DSM Control Panel Click Task Scheduler Create a Scheduled Task - User-defined script Click General Tab Set task name "Reset Sudoers" Set user as "root" Uncheck "Enabled" box Click Task Setting tab Copy/paste the following into the Run command box cat <<EOF > /etc/sudoers Defaults syslog=authpriv root ALL=(ALL) ALL %administrators ALL=NOPASSWD: ALL EOF chmod ug=r,o= /etc/sudoers Click OK 3. Run the "Reset Sudoers" script on Synology NAS This step will need to be rerun whenever a DSM update puts your sudoers file back to default Highlight the new script you just created Click Run Click Yes 4. Install WinSCP Download and install WinSCP on Windows machine https://winscp.net/eng/download.php Allow WinSCP to start when done 5. Configure WinSCP to auto logon Create a new session/site: Change Login window using the following File protocol: SCP Host name: enter the NAS host name or IP address Port number: enter the port number you used from step 3 Enter User name: "admin" and password 6. Add switching to super user Click the Advanced... button In the the Advanced Site Settings window do the following: Select SCP/Shell under Environment Shell box: "sudo -i" Click OK to return to the Login window Click Save Click "Login" 7. Create a saved workspace for WinSCP (this step is optional) This will create a Windows shortcut to start WinSCP and automatically login to your session without any prompts Log into your new session you created in Step 5 Click Sessions Click Save Workspace... type a name for your new workspace Click OK 8. Create a shortcut for WinSCP on taskbar (this step is optional) While WinSCP is running Right Click the icon on the taskbar and choose "Pin to taskbar" Right Click on the WinSCP icon on the taskbar again Now Right Click on the WinSCP workspace you used in Step 7 and choose properties Your shortcut should look something like the one below with the exception of the workspace you used above Example Windows shortcut used on target line above "C:\Program Files (x86)\WinSCP\WinSCP.exe" "Media-Server" /Desktop Click OK Click WinSCP icon on taskbar start WinSCP and be logged into your NAS as Superuser without any prompts 9. Disable SSH in DSM (this step is optional) After you're all done using WinSCP it may be a good idea to close this port for security reasons. Additionally, you can also disable your Admin account now if you enabled it to do this. When you need to use WinSCP again just reenable SSH and you're ready. Open DSM Control Panel Click Terminal & SNMP Click Terminal tab Uncheck "Enable SSH service" Click "Apply" Edited October 5, 2023 by FrostByte Added benefits of being SU and Disabling SSH when done 2 5 Link to comment Share on other sites More sharing options...
FrostByte 5024 Posted May 12, 2022 Author Share Posted May 12, 2022 Modified so people know what steps they can skip if they just want to use WinSCP with Admin and don't need to switch to superuser when accessing their NAS. 1 1 Link to comment Share on other sites More sharing options...
FrostByte 5024 Posted May 18, 2022 Author Share Posted May 18, 2022 If you ran the script and ever want to set DSM back so that it prompts administrators for the Admin password again when entering sudo commands then just use a text editor to modify the sudoers file and change the parameter from 'NOPASSWD' to 'PASSWD'. Link to comment Share on other sites More sharing options...
FrostByte 5024 Posted August 11, 2022 Author Share Posted August 11, 2022 (edited) Expanded the instructions on how to pin a Windows shortcut for WinSCP on the taskbar that automatically opens your workspace. Edited August 11, 2022 by FrostByte 1 2 Link to comment Share on other sites More sharing options...
Recommended Posts