Search results matching tag 'FTP Account'

FTP 7 best practices

270net — Mon, 08 Dec 2008 02:21:05 GMT

Hello all,

I'm having a bear of a time trying to set up the best way to administer an FTP site for multiple clients. I'm using IIS 7 with the out-of-band FTP 7 release with the updated .dll on Windows Server 2008. Has anyone used the built-in "Add FTP publishing" to a running web site with any success? Most of our clients will be using Expression/FrontPage/FileZilla for uploading. I'll cross using SSL in Expression or FrontPage when I get there, but right now I'm just trying to set this up the right way for this model.

I've used a FTP site called "ClientFTP" which points to a folder within the same directory as all the websites. I've created a virtual directory called "LocalUser" that points to the same place as "ClientFTP". Under that, I have created virtual directories with the same directory name as the username of the client who is logging in, and pointing it to a physical directory within their respective website. After creating local users on the host box, and adjusting permissions, I've gotten this to work.

I would like to do this with Domain users instead, but have yet to get it to work. Instead of the "LocalUser" folder, I made a virtual directory with the domain name instead without the TLD (so the folder is called "example" instead of "example.local") No dice with this config yet, and I'm not sure why.

I also tried using just IIS Manager Users, but haven't really seen a way to specify what directories an IIS User has access to, just the site as a whole, which is no good for my situation.

I would love to just click "Add FTP Publishing" to an existing site, specify a user their, and have it work. I'm fairly green when it comes to setting this up, so I may just be missing something fundamental to this process.

Any way I can get this to work soon will be nice, but my method would be authenticaion and functionality using these technologies in order of preference:

1.Add FTP Publishing to this Site with perms set there

2.IIS Manager Users (though I need them to be specific to the directories, not the Site as a whole)

3. Domain Users with "fast forwarding" - I guess that's what its called when the user name "MUST" match the name of the vdir or pdir

4. Local Users with "fast forwarding"

I literally feel like a stupid monkey after trying a million things with about 2 successes. Any help, advice, or solutions would be greatly appreciated. I've done plenty of walkthroughs, so some concrete usage would be most helpful, though I will reread articles if need be. Many thanks!

- Frustrated Monkey

Re: FTP Server Set-up

robmcm — Mon, 21 Apr 2008 23:13:18 GMT

Hi Gengar003,

I know that the following list of topics is a repost from one of my earlier blog entries, but the following list is fairly comprehensive in terms of scope where the new FTP7 service is concerned:

Installing FTP7:

Installing and Troubleshooting FTP7

Working with FTP Sites:

Configuring Security Features:

Advanced Administrative Features:

That being said, let me tackle each of your initial statements:

Q: Users were stored/handled by the FTP service - not by the windows user database or an Active Directory server.
- A: There are two built-in methods of using non-Windows user accounts with FTP7:
  - IIS Managers: These accounts are known only to IIS and are typically used for managing web sites, but they can be used for FTP access as well.
  - ASP.NET User Accounts: These accounts can be shared with IIS forms-based authentication or ASP.NET applications.
Q: Users could download files (but not upload) from several directories.
- A: This can be configured through FTP7's authorization settings.
Q: Users each had an (automatically created) home directory, where they could upload and download.
- A: FTP7 does not automatically create any directories for users, but users can be locked into different virtual roots based on their user accounts through "User Isolation", so each user cannot change directory outside of their home directory. While not the same as automatic creation of home directories, the creation of the home directories could be automated as part of an account creation script.
Q: Users could be placed in different "groups" with different read, write, and view permissions.
- A: Windows-based accounts can certainly be placed in groups, and those groups can be given different permissions to files in two ways:
  - FTP7 authorization settings can be configured to allow Read or Write access to users or groups.
  - NTFS ACLs can be configured for any level of deeper permissions configuration: Read, Write, List, Delete, Modify, etc.

In looking at your list of folders that you would like to make available under FTP, it should be possible to configure the folders as you intend once you get the hang of setting the per-folder authorization settings.

Using FTP accounts

starpg — Fri, 05 Oct 2007 21:21:12 GMT

Okay, so I've covered just about everything in the learning I've done here about IIS7, and I'm pleased with my success.

My next step, which is something I am completely illiterate about, is allowing people to "sign into" their site via an FTP client, now I know a little idea of what I can do, but what I have tried has failed miserably.

I've made my website, it's on the 'net, and php works great, https works great...now I am ready to do some ftp testing but I dont know how to allow someone to "log in" to their site via ftp?...I dont know how to delegate the permissions. I know they need a user account on the machine, my first tries were making regular user accounts, then adding them into the IIS_IUSRS group followed by adding the appropriate permissions on the folder their site lays in (for example...my test site is at D:\SPG\XMB\)...the site is running fine on the internet, but I've not been able to connect to it through a test User account like I described above.

I would much appreciate any help. :)