IIS7 - General

Re: Expressions Web Design Software and FTP

jeff@zina.com — Wed, 19 Dec 2007 18:00:33 GMT

steve schofield:
The only thing I can't figure out is mapping external authentication modules that aren't necessarily an windows account.

If I remember, the only two accounts you can use are Windows or an IIS account. AFAIK FTP doesn't accept other accounts, such as ASP.NET membership accounts.

Jeff

Re: Expressions Web Design Software and FTP

steve schofield — Wed, 19 Dec 2007 17:29:02 GMT

Hi John,

I've wanted to learn more about the FTP 7.0 publishing product, your post made me dig a bit, but it has been worthwhile. Makes sense you are setting the domain property, that is a good way to cutdown on user questions. :) Regarding mapping a UNC path. Are you mapping the root folder or a virtual directory? I've not done a root folder, but it should be similar to the process of doing an vdir.

1) create a virtual directory mapped to a unc source
a) either use a static domain user to authenticate as
b) use pass through authentication
2) Set in the FTP Directory Browsing so 'virtual directories showup
3) Test from a remote machine with an FTP account, the vdir (mapped to a unc path) should show-up.

I tested this with a ftp host-headered site and it worked as designed, just make sure the pass through authentication user has permissions on the remote share / resource.

The only thing I can't figure out is mapping external authentication modules that aren't necessarily an windows account. I'm hoping Robert M (program manager for FTP) pops in and checks out the post. He'll have lots of good info to share. I think he wrote the article you pointed out.

Good luck.

Re: Expressions Web Design Software and FTP

John Kisha — Wed, 19 Dec 2007 16:11:03 GMT

Glad you got it working. I haven't had to enter a domain name prefix in front of the user name with any ftp sites I have setup. I have added the domain here: FTP AUTHENTICATION | Basic Authentication | Edit, so maybe that is why I don't need to enter it to logon. All of may accounts are domain accounts.

Frankly, I haven't played around with SSL and FTP yet. The problem I'm trying to work through now is getting an FTP site with a UNC file path to work. :(

John

Re: Expressions Web Design Software and FTP

steve schofield — Wed, 19 Dec 2007 07:18:02 GMT

Ha! I got SSL working with FTP host-headered site. The one thing that solved the 534 TLS error was I had to define an SSL certificate on the 'root' settings. I had 'All Assigned' defined on the HTTP and FTP bindings. This is way cool stuff MS!

Re: Expressions Web Design Software and FTP

steve schofield — Wed, 19 Dec 2007 07:10:24 GMT

Yea, I seen that article. I apologize for my statement, I had't messed with FTP host headers, so I'm learning, that is where you would use the Pipe symbol. :) I made some progress since my last post. I'm able to use a domain admin user with an FTP host-header and connect using plain FTP.

I use hostname|domain\username, password in an FTP client (CoreFTP and FileZilla). Your problem might be specific with Expression, which I can't test since I don't have it loaded on my system. The only thing I haven't gotten yet is an FTP host headered site, with SSL enabled. I get this error, if I use straight FTP, it works like a champ.

With SSL enabled, no go. I'm not sure why this is happening. But I'll sure try. Stay tuned....
534 Local policy on server does not allow TLS secure connections.
Error: Critical error
Error: Could not connect to server

Without SSL enabled and using a host-headered FTP site.
Status: Resolving IP-Address for ftptest.aspdot.net
Status: Connecting to 192.168.0.63:21...
Status: Connection established, waiting for welcome message...
Response: 220 Microsoft FTP Service
Command: USER ftptest.aspdot.net|aspdot\testuser
Response: 331 Password required for ftptest.aspdot.net|aspdot\testuser
Command: PASS **************
Response: 230 User aspdot\testuser logged in.
Command: OPTS UTF8 ON
Response: 200 OPTS UTF8 command successful - UTF8 encoding now ON.
Status: Connected
Status: Retrieving directory listing...
Command: PWD
Response: 257 "/" is current directory.
Status: Directory listing successful

You might want to try a plain FTP client at first then isolate it to Expression.

Re: Expressions Web Design Software and FTP

John Kisha — Wed, 19 Dec 2007 06:59:47 GMT

Check out the bottom of this page: http://www.iis.net/articles/view.aspx/IIS7/Managing-IIS7/Using-FTP-Server-in-IIS7/Using-virtual-host-names?Page=2

You need to use the format of sitename|username

John

Re: Expressions Web Design Software and FTP

steve schofield — Wed, 19 Dec 2007 06:37:56 GMT

I don't quite agree with your statement. :) The Pipe symbol is not a delimiter for logins or I've never seen them used in AD. I setup an IIS 7.0 and FTP site (using the IIS 7.0 Publishing service). Both had All Unassigned configured in the bindings, and I was able to use a domain\username account. I'm using CoreFTP and FileZilla to connection and not Expression, but FTP is well, FTP. I was able to use FTP over SSL and plain FTP.

When I try a 'ftp' host header, I'm getting 550 Host not found. I tried using an FTP client right on the server, no go. I even got the 534 TLS error others have posted, which is cool, I don't know the answer yet, but I know how to reproduce the error. I'm not quite sure how FTP host-headers work under the covers, I even tried putting the entry in the hosts to do a resolution lookup. I can ping the A record, do an NSLOOKUP to the 'ftptest' host name I'm using. DNS is clean, the AD account is good, the account I'm using is a 'domain admin'.

Here is the error I get from my FTP client.

Mem -- 523,752 KB, Virt -- 2,097,024 KB
Started on Tuesday December 18, 2007 at 22:31:PM
Resolving ftptest.aspdot.net...
Connect socket #644 to 192.168.0.63, port 21...
220 Microsoft FTP Service
USER aspdot\testuser
550-No such host is known.
Win32 error: No such host is known.
Error details: Hostname didn't match any configured ftp site.
550 End

I'm going to see what I can find. I'd be curious if others have been able to use FTP host headers?! Stay tuned...

Re: Expressions Web Design Software and FTP

John Kisha — Wed, 19 Dec 2007 04:49:01 GMT

Thanks for your input Steve, usually that would be the case, and certainly in IIS 6.0 it is; but not in IIS 7.0, which uses what I would call 'host headers' for ftp as well as http if you use 'all unassigned' when setting up the site and adding ftp to the web site.

Setting up a unique ftp site with its own IP address would function pretty much the same as IIS 6.0, i.e. domain\username, but IIS 7.0 requires the format I indicated above when adding the FTP site to an HTTP site and using 'all unassigned'.

John

Re: Expressions Web Design Software and FTP

steve schofield — Wed, 19 Dec 2007 03:55:32 GMT

Usually you login as Domain\Username (backslash). The pipe is not the separator for domain logins.

Expressions Web Design Software and FTP

John Kisha — Tue, 18 Dec 2007 22:28:23 GMT

If I am missing something here, someone please correct me, but I think there might be an issue with logging on to FTP on IIS 7 using Expressions.

Logging on to FTP in IIS 7 requires the user name to be expressed as "domain|username".

However Expressions Web will not accept the "|" character in the user name field.

Is there another way to logon to FTP using Expressions that I am not aware of?

Thanks,

John