Security

Ask something
Discussion Locked

FTP Setup and Security

0 helpful
6 replies

by drmweaver

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Ok, I have this ftp site setup and it works. I've created specific accounts for access. One account for inside IT that has full access, an account for generic uploading and another for client specific access to certain folders.

I did not set up the original site, so bear with me.

The root folder has a share on it allowing those above access. It also has an Everbody account. The accounts above works through the login phase with the logins I've created, but the minute that I remove the Everybody account, no one can login.

Help!

Thanks for any suggestions.

6 replies

by zenak

Don't forget the basics of security. The most restrictive rule always wins. In the vast majority of applications you need the initial entry to grant access, and then you restrict this access with the more specific entries.

In this case, the security goes as follows:
1) Grant everyone access to the root of the FTP server
2) Only give FTP accounts to the people who need access
3) Don't store things in the root folder, and enforce file/folder level security rules on all child folders.

If you skip step one, visitors to the FTP don't have any rights to be there. A good way to test this is to give a user FTP access, but not give them any file or folder permissions on the child directories. They should be able to log in, but not change the path at all.

By removing everyone from accessing the main folder, you have now denied them access. The sub folders permissions won't matter, because the user can't get there.

by zenak

OK, you are confusing share permissions with file permissions. Share permissions have nothing to do with anything unless you are accessing from the network.

What you need to look at are both FTP and File/Folder permissions.

If you have the proper permissions set inside the file system then it has to be the FTP server that isn't allowing access.

What FTP server and OS are you running?

by drmweaver

Ok, here is what I have

D drive - SHare is enabled for Everyone
\\d Drive\inetpub - Share is enabled for everyone
\\d drive\inetpub\ftproot - share is enable for everyone

From here I have folder1 with only myself in the shared\security settings.

I should be able to ftp in to the server, then change to that folder. However, it won't let me. The error I get is requested action not taken file or directory not found, no access.

by drmweaver

I am using the IIS 5.0 with Windows 2000. No specific ftp software as we are using it directly from iis, the same as our web server.

Thanks

This discussion is closed to new replies.