« Previous Next »

Thread: Using FTP accounts

Last post 11-06-2007 1:01 AM by qbernard. 34 replies.

Average Rating Rate It (5)

RSS

Page 1 of 3 (35 items) 1 2 3 Next >

Sort Posts:

  • 10-05-2007, 5:21 PM

    • starpg
    • Top 75 Contributor
    • Joined on 05-02-2007, 5:38 AM
    • Vancouver
    • Posts 77

    Using FTP accounts

     Okay, so I've covered just about everything in the learning I've done here about IIS7, and I'm pleased with my success.

    My next step, which is something I am completely illiterate about, is allowing people to "sign into" their site via an FTP client, now I know a little idea of what I can do, but what I have tried has failed miserably.

     I've made my website, it's on the 'net, and php works great, https works great...now I am ready to do some ftp testing but I dont know how to allow someone to "log in" to their site via ftp?...I dont know how to delegate the permissions. I know they need a user account on the machine, my first tries were making regular user accounts, then adding them into the IIS_IUSRS group followed by adding the appropriate permissions on the folder their site lays in (for example...my test site is at D:\SPG\XMB\)...the site is running fine on the internet, but I've not been able to connect to it through a test User account like I described above.

     

    I would much appreciate any help. :) 

    - Nick Dodd
    Executive Producer, Project Coordinator Tensioncore
    http://www.tensioncore.com
  • 10-06-2007, 1:03 AM In reply to

    Re: Using FTP accounts

    which ftp component you installed ? the IIS 6 FTP which come default with W2k8 or Vista ? or the new separate download from iis.net?  If this is the new component from iis.net, you can either use a local windows account or IIS Manager user.
    http://www.iis.net/articles/view.aspx/IIS7/Managing-IIS7/Using-FTP-Server-in-IIS7/Configure-IIS-Manager-Authentication

     

    Cheers,
    Bernard Cheah
  • 10-06-2007, 6:15 AM In reply to

    • starpg
    • Top 75 Contributor
    • Joined on 05-02-2007, 5:38 AM
    • Vancouver
    • Posts 77

    Re: Using FTP accounts

    I installed the FTP RC0 right off this site 

    - Nick Dodd
    Executive Producer, Project Coordinator Tensioncore
    http://www.tensioncore.com
  • 10-07-2007, 8:56 AM In reply to

    Re: Using FTP accounts

    You need to enable the BASIC authentication, allow the particular user or 'All Users' permission then make sure the folder security is setup.  There is some options in the FTP settings to set where the user gets dropped, their home directory, here is the link to the Program managers blog who is in charge of FTP 7.0, it has some good tips / tricks.

    http://blogs.msdn.com/robert_mcmurray/archive/2007/04/26/ftp-7-beta-is-released.aspx

    Steve Schofield
    Windows Server MVP - IIS
    http://weblogs.asp.net/steveschofield


    http://www.IISLogs.com
    Log archival solution
    Install, Configure, Forget
  • 10-07-2007, 12:12 PM In reply to

    • starpg
    • Top 75 Contributor
    • Joined on 05-02-2007, 5:38 AM
    • Vancouver
    • Posts 77

    Re: Using FTP accounts

    I'll step by step what I have done.

    It doesn't work.

     

    Run lusrmgr.msc

    Open "Users" folder.

    Created new user named "TCH-Beta"

    Assigned password

    Assigned "Home Folder, Local Path" to D:\SPG\XMB

    Assigned the user TCH-Beta to the "Hosting Accounts" User Group.

    Insured "Basic Authentication" was chosen in FTP Authentication
    Opened IIS7 Manager, added FTP Publishing to the "XMB-Test" site, and created an "Allow" Authorization Rule for "TCH-Beta"

     Added the user "TCH-Beta" privileges to the Folder "D:\SPG\XMB"

     

    this sounds as though the proper method to accomplish  FTP  access for a given user, but when I attempt a logon I get the error:

     

    530-user TCH-Beta cannot log in: Home directory inaccessible.

    win32 error: Access Denied

    Error Details: Authorization Rules Denied the access

    530 end 

    - Nick Dodd
    Executive Producer, Project Coordinator Tensioncore
    http://www.tensioncore.com
  • 10-08-2007, 12:22 AM In reply to

    Re: Using FTP accounts

    Ok. it is saying authroization rules denied the access. you sure you set the correct authorization rules for the user?

    I would try filemon to trace and see where does IIS FTP sending the user to and whether user has permission to access it.

    Cheers,
    Bernard Cheah
  • 10-08-2007, 5:10 PM In reply to

    • starpg
    • Top 75 Contributor
    • Joined on 05-02-2007, 5:38 AM
    • Vancouver
    • Posts 77

    Re: Using FTP accounts

    okay, so how do I do this? 

    - Nick Dodd
    Executive Producer, Project Coordinator Tensioncore
    http://www.tensioncore.com
  • 10-08-2007, 5:33 PM In reply to

    • starpg
    • Top 75 Contributor
    • Joined on 05-02-2007, 5:38 AM
    • Vancouver
    • Posts 77

    Re: Using FTP accounts

    I've given complete control for the user %SYSTEMNAME%/TCH-Beta on the folder D:\SPG\XMB

    and well this image shows the FTP Authorization in IIS7 set:

    FTP Authorization 

    - Nick Dodd
    Executive Producer, Project Coordinator Tensioncore
    http://www.tensioncore.com
  • 10-08-2007, 11:46 PM In reply to

    Re: Using FTP accounts

    1) Search filemon or procmon at microsoft website

    2) Run it on the ftp server

    3) From another machine or local server, try connect via ftp.exe

    4) Upon getting the logon error. stop the filemon

    5) Review the log, look for access denied error.

    Cheers,
    Bernard Cheah
  • 10-09-2007, 6:37 PM In reply to

    • starpg
    • Top 75 Contributor
    • Joined on 05-02-2007, 5:38 AM
    • Vancouver
    • Posts 77

    Re: Using FTP accounts

     yeah holy crap

    that didn't work

     

    WAAY too many processes to look through

    nothing showed an access denied either
     

    - Nick Dodd
    Executive Producer, Project Coordinator Tensioncore
    http://www.tensioncore.com
  • 10-09-2007, 7:15 PM In reply to

    • starpg
    • Top 75 Contributor
    • Joined on 05-02-2007, 5:38 AM
    • Vancouver
    • Posts 77

    Re: Using FTP accounts

    I have no idea why it wont let me logon via cmd/ftp.exe, but It will let me logon via an FTP Client that I use.

     

    is that normal? See I'm trying to logon using another user account (not Administrator)...and this is when it's not letting me....but see I try it out using my FTP client and it all works perfectly 

    .... I found a problem... It's not letting me logon when the ftp port is 21...my main website (the not-so- test) site is on port 21, but when I changed the test site's ftp port to 27 then it worked fine...? shouldn't ftp server be on port 21? as like default for all sites to logon? 

    - Nick Dodd
    Executive Producer, Project Coordinator Tensioncore
    http://www.tensioncore.com
  • 10-09-2007, 10:32 PM In reply to

    • robmcm
    • Top 50 Contributor
    • Joined on 05-27-2006, 1:05 AM
    • Redmond, WA
    • Posts 125

    Re: Using FTP accounts

    That's curious behavior - do you have Windows Firewall enabled? 

    Robert McMurray (MSFT, IIS)
  • 10-10-2007, 12:07 AM In reply to

    Re: Using FTP accounts

    LOL... for filemon log you can try the filtering feature... the new ftp service is under svchost.exe I believe. or just do a search on the ftp user account?

    Next, I would suggest you ftp locally at the machine first. and if you can't even ftp locally, check and ensure windows firewall make sure ftp inbound rules is enabled or temporary disable windows firewall to test it.

    Cheers,
    Bernard Cheah
  • 10-10-2007, 4:09 AM In reply to

    • starpg
    • Top 75 Contributor
    • Joined on 05-02-2007, 5:38 AM
    • Vancouver
    • Posts 77

    Re: Using FTP accounts

    tried this as well - logging in locally after altering the Firewall exceptions for port 21, on the machine via cmd:

    C:\Users\Administrator>ftp localhost
    Connected to TensioncoreS01.
    220 Microsoft FTP Service
    User (TensioncoreS01:(none)): tch-beta

    .....entered password....

    got same error as showed above. 

    - Nick Dodd
    Executive Producer, Project Coordinator Tensioncore
    http://www.tensioncore.com
  • 10-10-2007, 11:42 PM In reply to

    Re: Using FTP accounts

    Ok. the next step I would do now is analyze the filemon log. can you zip it up and post it somewhere? I like to look at the trace.

    Cheers,
    Bernard Cheah
Page 1 of 3 (35 items) 1 2 3 Next >
Microsoft Communities