Search results matching tag 'FTP Authorization'

How to publish with FTP7.5 and hide other folders

Bydia — Tue, 07 Apr 2009 02:17:48 GMT

I set up FTP publishing on my default web site using the newer FTP 7.5 on IIS7 on Win2008 Server. I secured it with Require SSL. I can lock down who can read and write to which subfolders(virtual webs).... however, I would like to hide the folders that one does not have access to like I saw in one of the videos. How do I do that?

Thanks in advance,

FTP Over SSL Issue

frettfreak — Fri, 26 Dec 2008 08:22:07 GMT

I am attempting to use SSL to secure my FTP site. i can access my FTP site and everything works great without SSL. When I try to use SSL, i get the following on my ftp client (filezilla) after the "User Logged in" message:
Command: SYST
Response: 215 Windows_NT
Command: FEAT
Response: 211-Extended features supported:
Response: LANG EN*
Response: UTF8
Response: AUTH TLS;TLS-C;SSL;TLS-P;
Response: PBSZ
Response: PROT C;P;
Response: CCC
Response: HOST
Response: SIZE
Response: MDTM
Response: 211 END
Command: OPTS UTF8 ON
Response: 200 OPTS UTF8 command successful - UTF8 encoding now ON.
Command: PBSZ 0
Response: 200 PBSZ command successful.
Command: PROT P
Response: 200 PROT command successful.
Status: Connected
Status: Retrieving directory listing...
Command: PWD
Response: 257 "/" is current directory.
Command: TYPE I
Response: 200 Type set to I.
Command: PASV
Response: 227 Entering Passive Mode (74,208,78,155,192,16).
Command: LIST
Response: 150 Opening BINARY mode data connection.
Error: Connection timed out
Error: Failed to retrieve directory listing

What am I doing wrong and how do i fix it?

FTP 7 best practices

270net — Mon, 08 Dec 2008 02:21:05 GMT

Hello all,

I'm having a bear of a time trying to set up the best way to administer an FTP site for multiple clients. I'm using IIS 7 with the out-of-band FTP 7 release with the updated .dll on Windows Server 2008. Has anyone used the built-in "Add FTP publishing" to a running web site with any success? Most of our clients will be using Expression/FrontPage/FileZilla for uploading. I'll cross using SSL in Expression or FrontPage when I get there, but right now I'm just trying to set this up the right way for this model.

I've used a FTP site called "ClientFTP" which points to a folder within the same directory as all the websites. I've created a virtual directory called "LocalUser" that points to the same place as "ClientFTP". Under that, I have created virtual directories with the same directory name as the username of the client who is logging in, and pointing it to a physical directory within their respective website. After creating local users on the host box, and adjusting permissions, I've gotten this to work.

I would like to do this with Domain users instead, but have yet to get it to work. Instead of the "LocalUser" folder, I made a virtual directory with the domain name instead without the TLD (so the folder is called "example" instead of "example.local") No dice with this config yet, and I'm not sure why.

I also tried using just IIS Manager Users, but haven't really seen a way to specify what directories an IIS User has access to, just the site as a whole, which is no good for my situation.

I would love to just click "Add FTP Publishing" to an existing site, specify a user their, and have it work. I'm fairly green when it comes to setting this up, so I may just be missing something fundamental to this process.

Any way I can get this to work soon will be nice, but my method would be authenticaion and functionality using these technologies in order of preference:

1.Add FTP Publishing to this Site with perms set there

2.IIS Manager Users (though I need them to be specific to the directories, not the Site as a whole)

3. Domain Users with "fast forwarding" - I guess that's what its called when the user name "MUST" match the name of the vdir or pdir

4. Local Users with "fast forwarding"

I literally feel like a stupid monkey after trying a million things with about 2 successes. Any help, advice, or solutions would be greatly appreciated. I've done plenty of walkthroughs, so some concrete usage would be most helpful, though I will reread articles if need be. Many thanks!

- Frustrated Monkey

Re: FTP Server Set-up

robmcm — Fri, 15 Aug 2008 21:16:34 GMT

The following syntax should work:

appcmd.exe set config "Default Ftp Site/LocalUser/TestSite" -section:system.ftpServer/security/authorization /+"[accessType='Allow',users='',roles='SiteAuthors',permissions='Read, Write']" /commit:apphost

A great way to create scripts is to use the Generate Script feature of the Config Editor that's available as part of the Administration Pack for IIS 7.0.

connection closed by remote host - IIS7

mashedpotatohead — Tue, 06 May 2008 01:22:50 GMT

I installed the updated version of IIS7 on Server2008 and set up a website. While logging in via ftp localhost, it prompts for credentials and I get in just fine. I am then able to use other commands (dir). However, when I log in from any other computer, it logs in fine, but when I use the dir command, it says "connection closed by remote host".

Basic and anonymous is enabled.

Ive looked around on the net, and have seen people having issues with NAT but I dont think that is my issue? Anyone have some advice?

Re: FTP Server Set-up

robmcm — Mon, 21 Apr 2008 23:13:18 GMT

Hi Gengar003,

I know that the following list of topics is a repost from one of my earlier blog entries, but the following list is fairly comprehensive in terms of scope where the new FTP7 service is concerned:

Installing FTP7:

Installing and Troubleshooting FTP7

Working with FTP Sites:

Configuring Security Features:

Advanced Administrative Features:

That being said, let me tackle each of your initial statements:

Q: Users were stored/handled by the FTP service - not by the windows user database or an Active Directory server.
- A: There are two built-in methods of using non-Windows user accounts with FTP7:
  - IIS Managers: These accounts are known only to IIS and are typically used for managing web sites, but they can be used for FTP access as well.
  - ASP.NET User Accounts: These accounts can be shared with IIS forms-based authentication or ASP.NET applications.
Q: Users could download files (but not upload) from several directories.
- A: This can be configured through FTP7's authorization settings.
Q: Users each had an (automatically created) home directory, where they could upload and download.
- A: FTP7 does not automatically create any directories for users, but users can be locked into different virtual roots based on their user accounts through "User Isolation", so each user cannot change directory outside of their home directory. While not the same as automatic creation of home directories, the creation of the home directories could be automated as part of an account creation script.
Q: Users could be placed in different "groups" with different read, write, and view permissions.
- A: Windows-based accounts can certainly be placed in groups, and those groups can be given different permissions to files in two ways:
  - FTP7 authorization settings can be configured to allow Read or Write access to users or groups.
  - NTFS ACLs can be configured for any level of deeper permissions configuration: Read, Write, List, Delete, Modify, etc.

In looking at your list of folders that you would like to make available under FTP, it should be possible to configure the folders as you intend once you get the hang of setting the per-folder authorization settings.

FTP Virtual Hosting

oav — Wed, 26 Mar 2008 11:15:08 GMT

Hi,

I just installet IIS 7 and want to set up virtual hosting for my FTP-sites.

My goal is to direct users from whatever dns-name they ask to connect on. I use one IP and different dns-adresses.

eg.

Scenario 1: if I connect to ftp-dev.company.com, direct the dedicated user to this site.

Scenario 2: if I connect to ftp-prod.company.com, direct the dedicated user to this site.

Scenario 3: if I connect to the ip-adress, I want the users not to be able to connect at all.

I have dedicated users to both my sites, locally configured since this is on my DMZ-zone, on a 2008 Web Server Edition.

the direction of the users to correct sites works, but only for the user logon, NOT because of the DNS-name. The username I have to use is the "ftp-dev.company.com|devuser" and I get logged on to the desired site. BUT, when I try to log on to ftp-prod.company.com or the IP-adress with "ftp-dev.company.com|devuser" I get connected to ftp-dev.company.com.

This is not virtual hosting, but user redirecting.

Has anyone made virtual hosting work as wanted?

I also want the username to be just "username" not "hostname|username".

regards

Ole

Weird error

starpg — Thu, 24 Jan 2008 11:58:48 GMT

ever since I restarted my domain controller/File server for the webserver, no one can login via FTP, the error is: No mapping between account names and Security ID's has was done.

now I tried restarting both servers, as well as even removing and re-joining the DC domain, and still the error persists.

I really need some help here, this is completely baaaad. :(

Re: Using FTP accounts

starpg — Mon, 08 Oct 2007 21:33:13 GMT

I've given complete control for the user %SYSTEMNAME%/TCH-Beta on the folder D:\SPG\XMB

and well this image shows the FTP Authorization in IIS7 set: