I have no idea why it wont let me logon via cmd/ftp.exe, but It will let me logon via an FTP Client that I use.
is that normal? See I'm trying to logon using another user account (not Administrator)...and this is when it's not letting me....but see I try it out using my FTP client and it all works perfectly
.... I found a problem... It's not letting me logon when the ftp port is 21...my main website (the not-so- test) site is on port 21, but when I changed the test site's ftp port to 27 then it worked fine...? shouldn't ftp server be on port 21? as like default
for all sites to logon?
LOL... for filemon log you can try the filtering feature... the new ftp service is under svchost.exe I believe. or just do a search on the ftp user account?
Next, I would suggest you ftp locally at the machine first. and if you can't even ftp locally, check and ensure windows firewall make sure ftp inbound rules is enabled or temporary disable windows firewall to test it.
Filemon will not be of much help. I only return the "Authorization Rules Denied the access
" detailed error when the problem has to do only with the authorization settings of the FTP site.
If it was because of file system ACLs then the detailed error would report "File system denied the access".
What is the literal text for authorization in the applicationhost.config?
Arggh! got you. Coz in the past when sometime like this happen, like home directory inaccessible, etc. Filemon is able to tell at least where FTP is sending the user to, and why user being unable to access the folder.
But in this case - error is at config level. so thanks for the clarification.
You are correct, those lines will not be in your web.config file. All FTP settings are kept in applicationHost.config and cannot be delegated to web.config. The logic behind this decision is that a corrupt web.config file can break the HTTP experience, (e.g.
you get an error page over HTTP until you fix the problem), and we didn’t want to have this problem with FTP. Essentially it comes down to this - since we want FTP publishing to always work, FTP settings cannot be delegated to web.config files.
starpg
77 Posts
Re: Using FTP accounts
Oct 09, 2007 11:15 PM|LINK
I have no idea why it wont let me logon via cmd/ftp.exe, but It will let me logon via an FTP Client that I use.
is that normal? See I'm trying to logon using another user account (not Administrator)...and this is when it's not letting me....but see I try it out using my FTP client and it all works perfectly
.... I found a problem... It's not letting me logon when the ftp port is 21...my main website (the not-so- test) site is on port 21, but when I changed the test site's ftp port to 27 then it worked fine...? shouldn't ftp server be on port 21? as like default for all sites to logon?
robmcm
308 Posts
MVP
Microsoft
Moderator
Re: Using FTP accounts
Oct 10, 2007 02:32 AM|LINK
That's curious behavior - do you have Windows Firewall enabled?
qbernard
5016 Posts
MVP
Moderator
Re: Using FTP accounts
Oct 10, 2007 04:07 AM|LINK
LOL... for filemon log you can try the filtering feature... the new ftp service is under svchost.exe I believe. or just do a search on the ftp user account?
Next, I would suggest you ftp locally at the machine first. and if you can't even ftp locally, check and ensure windows firewall make sure ftp inbound rules is enabled or temporary disable windows firewall to test it.
Bernard Cheah
starpg
77 Posts
Re: Using FTP accounts
Oct 10, 2007 08:09 AM|LINK
tried this as well - logging in locally after altering the Firewall exceptions for port 21, on the machine via cmd:
C:\Users\Administrator>ftp localhost
Connected to TensioncoreS01.
220 Microsoft FTP Service
User (TensioncoreS01:(none)): tch-beta
.....entered password....
got same error as showed above.
qbernard
5016 Posts
MVP
Moderator
Re: Using FTP accounts
Oct 11, 2007 03:42 AM|LINK
Ok. the next step I would do now is analyze the filemon log. can you zip it up and post it somewhere? I like to look at the trace.
Bernard Cheah
JaroDunajsky
194 Posts
Microsoft
Re: Using FTP accounts
Oct 11, 2007 05:53 PM|LINK
Filemon will not be of much help. I only return the "Authorization Rules Denied the access " detailed error when the problem has to do only with the authorization settings of the FTP site.
If it was because of file system ACLs then the detailed error would report "File system denied the access".
What is the literal text for authorization in the applicationhost.config?
<location path="XMB-Test">
<system.ftpServer>
<security>
<authorization>
<add accessType="Allow" users="TCH-Beta" permissions="Read, Write" />
</authorization>
</security>
</system.ftpServer>
</location>
(assuming "XMB-Text" is the name of your site)
Regarding the secondary issue that was discussed regarding the firewall. A week ago I wrote a blog on how to configure new FTP RC0 server with Windows firewall: http://blogs.iis.net/jaroslad/archive/2007/09/29/windows-firewall-setup-for-microsoft-ftp-publishing-service-for-iis-7-0.aspx
Thanks
Jaro Dunajsky
qbernard
5016 Posts
MVP
Moderator
Re: Using FTP accounts
Oct 12, 2007 04:26 AM|LINK
Arggh! got you. Coz in the past when sometime like this happen, like home directory inaccessible, etc. Filemon is able to tell at least where FTP is sending the user to, and why user being unable to access the folder.
But in this case - error is at config level. so thanks for the clarification.
Bernard Cheah
starpg
77 Posts
Re: Using FTP accounts
Oct 12, 2007 09:28 AM|LINK
Those lines aren't in my web.config??
but they are not in the web.config of my website either? and I can access it fine via ftp, and ftp clients
robmcm
308 Posts
MVP
Microsoft
Moderator
Re: Using FTP accounts
Oct 12, 2007 04:40 PM|LINK
You are correct, those lines will not be in your web.config file. All FTP settings are kept in applicationHost.config and cannot be delegated to web.config. The logic behind this decision is that a corrupt web.config file can break the HTTP experience, (e.g. you get an error page over HTTP until you fix the problem), and we didn’t want to have this problem with FTP. Essentially it comes down to this - since we want FTP publishing to always work, FTP settings cannot be delegated to web.config files.
starpg
77 Posts
Re: Using FTP accounts
Oct 13, 2007 12:52 AM|LINK
so is the applicationHost.config accessible and changeable, for the manner outlined in that previous post?
and if so where is the config located (I'd look for it right now but I'm struck for time)