Groups | Blog | Home
all groups > iis ftp > july 2006 >

iis ftp : 2 servers (1AD & 1 FTP) user isolation mode. users cannot log in.


Omar
7/4/2006 12:31:11 PM
I have Box1 with 2003 & AD on it and Box2 with 2003 & FTP on it. Box1 has
all the data and folders on it. The site is on Box2 and has been joined to
the domain. I tried setting up FTP site using the standard Windows wizard
and the user ftp home directory using the iisftp.vbs script tool. With no
success, I found Chris Crowe's tool and loved how simple it was. However I
am still having problems getting anyone of the users to login at all.

Box1 (AD) has a c:\download folder that is shared. Box2 (ftp) has the ftp
site running in user isolation mode. The user1 has ftp root of
"\\box1\download" and a ftp dir of "test". the structure on Box1 is
c:\Download\test\.

So what am I doing wrong?

Chris Crowe [MVP 1997 -> 2006]
7/5/2006 12:00:00 AM
I just simulated this configuration on a system at work and I did not have
any problems.

1) Have you setup the correct permissions on the folder for the users?
2) Have you setup the correct permissions on the share for the users?

The easiest way to test this is to log on as one of the failing user
accounts and try to access the share.
or
open cmd.exe
type in the following

runas /user:domain\username cmd.exe

This will then ask for a password and you should see another cmd.exe window
open but with (running as Domain\Username) in the title.
Then do a dir on the share to see if you have the correct read access.

Did you give the users read access via the IIS wizard? You don't appear to
be able to change this via the GUI after the wizard finishes.

Does the account you configured to talk to the AD have the correct password
set? I think if it does not or you used the wrong password it shows in the
status field from the FTP Sites node in the IIS manager as "The Parameter is
incorrect"

Are the users logging in with the DOMAIN name as well as the username?

For example

CCROWE instead of DOMAIN\CCROWE

Is the default domain correctly set?

It should work - it is quite simple normally to setup - let us know how you
get on....
--


Chris Crowe [ IIS MVP - 1997 - 2006 ]
http://blog.crowe.co.nz


[quoted text, click to view]

Bernard Cheah [MVP]
7/5/2006 12:00:00 AM
and what exactly is the error msgs when you try to logon via ftp.exe ?

--
Regards,
Bernard Cheah
http://www.iis.net/
http://www.iis-resources.com/
http://msmvps.com/blogs/bernard/


"Chris Crowe [MVP 1997 -> 2006]" <iismvp2005@iisfaq.homeip.net> wrote in
message news:%23eqnED$nGHA.4864@TK2MSFTNGP04.phx.gbl...
[quoted text, click to view]

AddThis Social Bookmark Button