Groups | Blog | Home
all groups > iis ftp > june 2006 >

iis ftp : FTP Setup in WIndows 2000 help


2hawks
6/29/2006 7:02:57 AM
Hello,

I am ... trying... to set up a basic login FTP service on a Windows
2000 Server box. I have repeated the steps from scratch several
times...

create the ftp folder
assign the ip
uncheck anon account
assign home directory...

create a user account with password

It will not connect via windows from another machine

It will not connect as localhost in command window
[quoted text, click to view]
Instantaneously..

21 is open, etc.

So I ponder...
Do I need to set permissions on specific folders?
Do I need to do something with log on locally?
Do I need to do something with NTFS?
Do I need to share the folder?
Do I need to do the above in a certain order?
and on and on and on....

Likely it is because I didn't place the chicken bones in the right
sequence after the last 1/4 moon...

Anyhow, frustrated, any suggestions... ? Thanks...
2hawks
6/29/2006 7:40:01 AM

[quoted text, click to view]


I wanted to add this text pasted from a remote system command window:

C:\>ftp xxx.xxx.xxx.xxx
Connected to xxx.xxx.xxx.xxx.
220 webserver Microsoft FTP Service (Version 5.0).
User (xxx.xxx.xxx.xxx:(none)): testuser
331 Password required for testuser.
Password:
530 User testuser cannot log in.
Login failed.
ftp> ls
Connection closed by remote host.
ftp> status
Not connected.
Type: ascii; Verbose: On ; Bell: Off ; Prompting: On ; Globbing: On
Debugging: Off ; Hash mark printing: Off .
ftp>
Bernard Cheah [MVP]
6/30/2006 12:00:00 AM
530 error. so ls and the rest of the command will not work.
try
Error message in IIS: "530 User <Username> cannot log in. Login failed."
http://support.microsoft.com/?id=200475

--
Regards,
Bernard Cheah
http://www.iis.net/
http://www.iis-resources.com/
http://msmvps.com/blogs/bernard/


[quoted text, click to view]

2hawks
7/10/2006 1:02:18 PM
Thank you for responding Bernard. I did the following with no success.
**********************
Windows 2000 servers
To configure the Log on locally right on a stand-alone server, follow
these steps: 1. In the Microsoft Management Console (MMC), open the
Local Computer Policy snap-in. To do this, follow these steps:a. Click
Start, type MMC, and then click OK.
b. Click Console, click Add/Remove Snap-in, and then click Add.
c. Select Group Policy, and then click Add.
d. Make sure that the Group Policy object says Local Computer, and
then click Finish.
e. Click Close, and then click OK.

2. Grant users or groups the Log on locally right. To do this, follow
these steps:a. Expand the following path in the MMC:
Local Computer Policy\Computer Configuration\Windows Settings\Security
Settings\Local Policies\User Rights Assignment
b. Double-click Log on Locally.
c. Add any users or groups that will use Basic/Clear Text
authentication.
**********************
The more I use Win2k Server the more I realize I am no IT guy...
coding... ok... setting up this web server... ouch...

So FTP is still not working and now I seem to have broken forms on the
website as well. At first, clicking submit on a form would bring up a
login box (which it should not). So I changed NTFS permissions on the
C drive and got it to skip the login but then it just times out.

I am using a perl script and blat... all was working before I started
messing around with groups, users, ntfs permissions, mmc plug in
policies, etc. in an effort to get ftp to work. I don't know how to
get back to where I started either. I must be doing something very
stupid. I readily admit I am rather bewildered by the relationships
between users, groups, permissions, authenticaion, ntfs security,
local policies, etc. and how they effect each other and in which order
I should do things. I can think about it logically and it seems it
should be simple but is not.

All I am attempting to do here is have a basic web server (hosting five
fixed IPs). I need semi-secure ftp and form functionality for the main
site.

Any suggestions or links that might help would be greatly, and I do
mean Greatly, appreciated.






[quoted text, click to view]
Bernard Cheah [MVP]
7/13/2006 12:00:00 AM
Wow, let's focus on ftp first. the web app issue - you can post it to .iis
general group.
Can you post the output when you are connecting via ftp.exe ?

c:\>ftp yourftpserverip



--
Regards,
Bernard Cheah
http://www.iis.net/
http://www.iis-resources.com/
http://msmvps.com/blogs/bernard/


[quoted text, click to view]

2hawks
7/14/2006 10:48:00 AM
Hi Bernard,
Thanks a lot for taking the time to even consider this stuff... I
appreciate it very much.

Here follows basic ftp attmept from a dos box:
********************
C:\>ftp mysite.com
Connected to mysite.com.
220 webserver Microsoft FTP Service (Version 5.0).
User (mysite.com:(none)): username
331 Password required for username.
Password:
530 User ftpdisc cannot log in.
Login failed.
ftp>

ftp> status
Connected to mysite.com.
Type: ascii; Verbose: On ; Bell: Off ; Prompting: On ; Globbing: On
Debugging: Off ; Hash mark printing: Off .
ftp>
********************

I created "username" and assigned it a password.
I have double checked the accuracy of these.

I set up ftp to the correct IP.
I have disabled anonymous login.
I have the correct home directory path.

It all seems to be related to permissions and authentication.
Do I have to have certain NTFS permissions set on certain folders?
Do I have to set log on locally for the ftp account?
etc. etc.

Thanks for lending your expertise.

(I had this all working before on an NT 4.0 Server, ftp, forms -
everything - and I have tried repeating all those steps as well - to no
avail)

[quoted text, click to view]
Bernard Cheah [MVP]
7/15/2006 12:00:00 AM
Well, it is still 530 error msgs. so have you read the KB I posted
previously?
http://support.microsoft.com/?id=200475

check all these ?
CAUSE
This problem occurs when one of the following scenarios is true:
. The Allow only anonymous connections security setting has been
turned on in the Microsoft Management Console (MMC).
. The username does not have the Log on locally permission in User
Manager.
. The username does not have the Access this computer from the network
permission in User Manager.
. The Domain Name was not specified together with the username (in the
form of DOMAIN\username).



--
Regards,
Bernard Cheah
http://www.iis.net/
http://www.iis-resources.com/
http://msmvps.com/blogs/bernard/


[quoted text, click to view]
AddThis Social Bookmark Button