[quoted text, click to view] "Jeff Cochran" <jeff.nospam@zina.com> wrote in message
news:41496159.1114439038@msnews.microsoft.com...
> It is behaving exactly as you set it up. "Allow Anonymous" means
> exactly that -- Allow anonymous users to have access, don't ask for a
> username or password.
Almost, but not quite.
The FTP server always asks for a username and password. Or rather, it won't
let you do anything of any interest until you've entered them. However, the
standard document defining what an FTP URL means, RFC 1738, states that if
no username is provided to the browser in the URL, the username "anonymous"
is to be provided by the browser to the FTP server.
Log on to your server using the command-line FTP client, and you'll see it
offering you a prompt to enter the username, and then one for the password.
Log on using a browser, and it won't, because "anonymous" got accepted.
If you monitor the traffic between the browser and the server, you'll see an
exchange that contains the "USER" and "PASS" commands.
One trick I use is to create URLs such as "ftp://???@site.example.com" -
since the "???" user isn't on your system (you can't use that character in a
user name), it'll try it, receive a failure, and then prompt the browser
user for a working user name and password.
Alun.
~~~~