|
|
You're in the
iis ftp
group:WE/IE FTP
iis ftp:
For FTP to my ISP (Verizon) provided web space I use Windows Explorer =
(used to be affectionately referred to as file mangler (file manager)). = It works fine except for one little quirk. When establishing a = connection it first attempts to login with my correct user name but a = blank password. Due to this the first login attempt obviously fails, = and there is about 15 to 30 second delay. Then on the second login = attempt it adds the password and successfully logs in. =20 It's annoying having to wait that extra 15 to 30 seconds to establish a = connection. =20 Why does Windows Explorer first attempt with a blank password, and how = can I get it to provide the correct password on the first attempt. =20
How do you know that IE is sending blank password?
If I remembered correctly, IE will login as anonymous first, then prompt if that's not successful. and this is client behavior...... -- Regards, Bernard Cheah http://www.iis.net/ http://www.iis-resources.com/ http://msmvps.com/blogs/bernard/ [quoted text, click to view] "Allen" <NOYB@NOYB.org> wrote in message For FTP to my ISP (Verizon) provided web space I use Windows Explorer (used news:OzKwe7KuGHA.4336@TK2MSFTNGP06.phx.gbl... to be affectionately referred to as file mangler (file manager)). It works fine except for one little quirk. When establishing a connection it first attempts to login with my correct user name but a blank password. Due to this the first login attempt obviously fails, and there is about 15 to 30 second delay. Then on the second login attempt it adds the password and successfully logs in. It's annoying having to wait that extra 15 to 30 seconds to establish a connection. Why does Windows Explorer first attempt with a blank password, and how can I get it to provide the correct password on the first attempt. TIA
Well first of all it's WE not IE, though WE does I believe use IE
engine/settings or such. The way I know blank password being sent on first attempt is I used snifffer to watch the traffic. Also there are no attempts to login as 'anonymous'. So that's not even in the picture. No. Time Source Destination Protocol Info Connect: 1 0.000000 <CLIENT> <SERVER> TCP 2894 > 21 [SYN] Seq=4089064229 Ack=0 Win=64240 Len=0 MSS=1460 2 0.116001 <SERVER> <CLIENT> TCP 21 > 2894 [SYN, ACK] Seq=2379666828 Ack=4089064230 Win=5840 Len=0 MSS=1460 3 0.116034 <CLIENT> <SERVER> TCP 2894 > 21 [ACK] Seq=4089064230 Ack=2379666829 Win=64240 Len=0 First Login Attempt 4 16.236439 <SERVER> <CLIENT> FTP Response: 220 <ftp.isp.net> 5 16.236573 <CLIENT> <SERVER> FTP Request: USER <USER ID> 6 16.352338 <SERVER> <CLIENT> TCP 21 > 2894 [ACK] Seq=2379666856 Ack=4089064245 Win=5840 Len=0 7 16.355448 <SERVER> <CLIENT> FTP Response: 331 Password required for <USER ID>. Blank Password Sent: 8 16.357648 <CLIENT> <SERVER> FTP Request: PASS 9 16.506272 <SERVER> <CLIENT> TCP 21 > 2894 [ACK] Seq=2379666893 Ack=4089064252 Win=5840 Len=0 10 16.517560 <SERVER> <CLIENT> FTP Response: 530 Login incorrect. 11 16.517738 <CLIENT> <SERVER> TCP 2894 > 21 [FIN, ACK] Seq=4089064252 Ack=2379666915 Win=64154 Len=0 12 16.533357 <CLIENT> <SERVER> TCP 2895 > 21 [SYN] Seq=2817114375 Ack=0 Win=64240 Len=0 MSS=1460 13 16.633661 <SERVER> <CLIENT> TCP 21 > 2894 [FIN, ACK] Seq=2379666915 Ack=4089064253 Win=5840 Len=0 14 16.633712 <CLIENT> <SERVER> TCP 2894 > 21 [ACK] Seq=4089064253 Ack=2379666916 Win=64154 Len=0 15 16.650102 <SERVER> <CLIENT> TCP 21 > 2895 [SYN, ACK] Seq=2298200853 Ack=2817114376 Win=5840 Len=0 MSS=1460 16 16.650134 <CLIENT> <SERVER> TCP 2895 > 21 [ACK] Seq=2817114376 Ack=2298200854 Win=64240 Len=0 Second Login Attempt: 17 30.106776 <SERVER> <CLIENT> FTP Response: 220 <ftp.isp.net> 18 30.106909 <CLIENT> <SERVER> FTP Request: USER <USER ID> 19 30.512334 <SERVER> <CLIENT> TCP 21 > 2895 [ACK] Seq=2298200881 Ack=2817114391 Win=5840 Len=0 20 30.512490 <SERVER> <CLIENT> FTP Response: 331 Password required for <USER ID>. Correct Password Sent: 21 30.512609 <CLIENT> <SERVER> FTP Request: PASS <PASSWORD> 22 30.663902 <SERVER> <CLIENT> TCP 21 > 2895 [ACK] Seq=2298200918 Ack=2817114405 Win=5840 Len=0 23 30.733681 <SERVER> <CLIENT> FTP [TCP Previous segment lost] Response: 230 Quota: avail(78.0%)=7360358.0 used(22.0%)=2076826.0 limit=9437184.0 bytes 24 30.733719 <CLIENT> <SERVER> TCP 2895 > 21 [ACK] Seq=2817114405 Ack=2298200918 Win=64176 Len=0 SLE=2298200948 SRE=2298201027 25 30.736733 <SERVER> <CLIENT> FTP [TCP Retransmission] Response: 230-User <USER ID> logged in. 26 30.736778 <CLIENT> <SERVER> TCP 2895 > 21 [ACK] Seq=2817114405 Ack=2298201027 Win=64067 Len=0 27 30.736958 <CLIENT> <SERVER> FTP Request: opts utf8 on 28 30.856052 <SERVER> <CLIENT> TCP 21 > 2895 [ACK] Seq=2298201027 Ack=2817114419 Win=5840 Len=0 29 30.859208 <SERVER> <CLIENT> FTP Response: 501 OPTS: utf8 not understood 30 30.859321 <CLIENT> <SERVER> FTP Request: syst 31 30.973514 <SERVER> <CLIENT> FTP Response: 215 UNIX Type: L8 32 30.973693 <CLIENT> <SERVER> FTP Request: site help 33 31.089610 <SERVER> <CLIENT> FTP [TCP Previous segment lost] Response: HELP 34 31.089656 <CLIENT> <SERVER> TCP 2895 > 21 [ACK] Seq=2817114436 Ack=2298201077 Win=64017 Len=0 SLE=2298201149 SRE=2298201156 35 31.094466 <SERVER> <CLIENT> FTP [TCP Retransmission] Response: 214-The following SITE commands are recognized (* =>'s unimplemented). 36 31.094500 <CLIENT> <SERVER> TCP 2895 > 21 [ACK] Seq=2817114436 Ack=2298201156 Win=63938 Len=0 37 31.205421 <SERVER> <CLIENT> FTP Response: CHGRP 38 31.205577 <CLIENT> <SERVER> FTP Request: PWD 39 31.319834 <SERVER> <CLIENT> FTP Response: 257 "/" is current directory. 40 31.419157 <CLIENT> <SERVER> TCP 2896 > 21 [SYN] Seq=3405431610 Ack=0 Win=64240 Len=0 MSS=1460 41 31.497332 <CLIENT> <SERVER> TCP 2895 > 21 [ACK] Seq=2817114441 Ack=2298201256 Win=63838 Len=0 42 31.533585 <SERVER> <CLIENT> TCP 21 > 2896 [SYN, ACK] Seq=2312840124 Ack=3405431611 Win=5840 Len=0 MSS=1460 43 31.533624 <CLIENT> <SERVER> TCP 2896 > 21 [ACK] Seq=3405431611 Ack=2312840125 Win=64240 Len=0 Login a Third Time: 44 39.644191 <SERVER> <CLIENT> FTP Response: 220 <ftp.isp.net> 45 39.644325 <CLIENT> <SERVER> FTP Request: USER <USER ID> 46 39.760158 <SERVER> <CLIENT> TCP 21 > 2896 [ACK] Seq=2312840152 Ack=3405431626 Win=5840 Len=0 Correct Password Sent: 47 39.763321 <SERVER> <CLIENT> FTP Response: 331 Password required for <USER ID>. 48 39.763410 <CLIENT> <SERVER> FTP Request: PASS <PASSWORD> 49 39.914153 <SERVER> <CLIENT> TCP 21 > 2896 [ACK] Seq=2312840189 Ack=3405431640 Win=5840 Len=0 50 39.917294 <SERVER> <CLIENT> FTP Response: 230-User <USER ID> logged in. 51 39.922254 <SERVER> <CLIENT> FTP Response: 230 Quota: avail(78.0%)=7360358.0 used(22.0%)=2076826.0 limit=9437184.0 bytes 52 39.922293 <CLIENT> <SERVER> TCP 2896 > 21 [ACK] Seq=3405431640 Ack=2312840298 Win=64067 Len=0 53 39.922468 <CLIENT> <SERVER> FTP Request: opts utf8 on 54 40.041446 <SERVER> <CLIENT> TCP 21 > 2896 [ACK] Seq=2312840298 Ack=3405431654 Win=5840 Len=0 55 40.044604 <SERVER> <CLIENT> FTP Response: 501 OPTS: utf8 not understood
I don't have access to the server, it's my ISP.
Using IE directly behaves in similar fashion. If I specify ftp://userid@ftpsite.isp.net IE tries to login with userid twice with blank password then with correct password the third attempt. If I specify ftp://ftpsite.isp.net IE tries to login twice as anonymous with what I assume is a default anonymous password. Then logins as userid with correct password on the third attempt. Specifying ftp://userid:password@ftpsite.isp.net logins in on the first attempt with userid and password. However creating a shortcut like this puts the password in plain text in the shortcut and registry. Since the system obviously has the password for userid, why doesn't it just send it on the first attempt? [quoted text, click to view] "Bernard Cheah [MVP]" <qbernard@hotmail.com.discuss> wrote in message
news:%23dC%23gmduGHA.5056@TK2MSFTNGP06.phx.gbl... > Lovely... what's the correspondent IIS FTP log file indicating? > if you direct use IE, do you got the same behavior in sniffer log? > > -- > Regards, > Bernard Cheah > http://www.iis.net/ > http://www.iis-resources.com/ > http://msmvps.com/blogs/bernard/ > > > "Allen" <NOYB@NOYB.org> wrote in message > news:ucg2qZSuGHA.2036@TK2MSFTNGP05.phx.gbl... >> Well first of all it's WE not IE, though WE does I believe use IE >> engine/settings or such. >> >> The way I know blank password being sent on first attempt is I used >> snifffer to watch the traffic. >> Also there are no attempts to login as 'anonymous'. So that's not even >> in the picture. >> >> No. Time Source Destination Protocol >> Info >> Connect: >> 1 0.000000 <CLIENT> <SERVER> TCP 2894 > 21 >> [SYN] Seq=4089064229 Ack=0 Win=64240 Len=0 MSS=1460 >> 2 0.116001 <SERVER> <CLIENT> TCP 21 > 2894 >> [SYN, ACK] Seq=2379666828 Ack=4089064230 Win=5840 Len=0 MSS=1460 >> 3 0.116034 <CLIENT> <SERVER> TCP 2894 > 21 >> [ACK] Seq=4089064230 Ack=2379666829 Win=64240 Len=0 >> >> First Login Attempt >> 4 16.236439 <SERVER> <CLIENT> FTP Response: >> 220 <ftp.isp.net> >> 5 16.236573 <CLIENT> <SERVER> FTP Request: >> USER <USER ID> >> 6 16.352338 <SERVER> <CLIENT> TCP 21 > 2894 >> [ACK] Seq=2379666856 Ack=4089064245 Win=5840 Len=0 >> 7 16.355448 <SERVER> <CLIENT> FTP Response: >> 331 Password required for <USER ID>. >> >> Blank Password Sent: >> 8 16.357648 <CLIENT> <SERVER> FTP Request: >> PASS >> 9 16.506272 <SERVER> <CLIENT> TCP 21 > 2894 >> [ACK] Seq=2379666893 Ack=4089064252 Win=5840 Len=0 >> 10 16.517560 <SERVER> <CLIENT> FTP Response: >> 530 Login incorrect. >> >> 11 16.517738 <CLIENT> <SERVER> TCP 2894 > 21 >> [FIN, ACK] Seq=4089064252 Ack=2379666915 Win=64154 Len=0 >> 12 16.533357 <CLIENT> <SERVER> TCP 2895 > 21 >> [SYN] Seq=2817114375 Ack=0 Win=64240 Len=0 MSS=1460 >> 13 16.633661 <SERVER> <CLIENT> TCP 21 > 2894 >> [FIN, ACK] Seq=2379666915 Ack=4089064253 Win=5840 Len=0 >> 14 16.633712 <CLIENT> <SERVER> TCP 2894 > 21 >> [ACK] Seq=4089064253 Ack=2379666916 Win=64154 Len=0 >> 15 16.650102 <SERVER> <CLIENT> TCP 21 > 2895 >> [SYN, ACK] Seq=2298200853 Ack=2817114376 Win=5840 Len=0 MSS=1460 >> 16 16.650134 <CLIENT> <SERVER> TCP 2895 > 21 >> [ACK] Seq=2817114376 Ack=2298200854 Win=64240 Len=0 >> >> Second Login Attempt: >> 17 30.106776 <SERVER> <CLIENT> FTP Response: >> 220 <ftp.isp.net> >> 18 30.106909 <CLIENT> <SERVER> FTP Request: >> USER <USER ID> >> 19 30.512334 <SERVER> <CLIENT> TCP 21 > 2895 >> [ACK] Seq=2298200881 Ack=2817114391 Win=5840 Len=0 >> 20 30.512490 <SERVER> <CLIENT> FTP Response: >> 331 Password required for <USER ID>. >> >> Correct Password Sent: >> 21 30.512609 <CLIENT> <SERVER> FTP Request: >> PASS <PASSWORD> >> 22 30.663902 <SERVER> <CLIENT> TCP 21 > 2895 >> [ACK] Seq=2298200918 Ack=2817114405 Win=5840 Len=0 >> 23 30.733681 <SERVER> <CLIENT> FTP [TCP >> Previous segment lost] Response: 230 Quota: avail(78.0%)=7360358.0 >> used(22.0%)=2076826.0 limit=9437184.0 bytes >> 24 30.733719 <CLIENT> <SERVER> TCP 2895 > 21 >> [ACK] Seq=2817114405 Ack=2298200918 Win=64176 Len=0 SLE=2298200948 >> SRE=2298201027 >> 25 30.736733 <SERVER> <CLIENT> FTP [TCP >> Retransmission] Response: 230-User <USER ID> logged in. >> >> 26 30.736778 <CLIENT> <SERVER> TCP 2895 > 21 >> [ACK] Seq=2817114405 Ack=2298201027 Win=64067 Len=0 >> 27 30.736958 <CLIENT> <SERVER> FTP Request: >> opts utf8 on >> 28 30.856052 <SERVER> <CLIENT> TCP 21 > 2895 >> [ACK] Seq=2298201027 Ack=2817114419 Win=5840 Len=0 >> 29 30.859208 <SERVER> <CLIENT> FTP Response: >> 501 OPTS: utf8 not understood >> 30 30.859321 <CLIENT> <SERVER> FTP Request: >> syst >> 31 30.973514 <SERVER> <CLIENT> FTP Response: >> 215 UNIX Type: L8 >> 32 30.973693 <CLIENT> <SERVER> FTP Request: >> site help >> 33 31.089610 <SERVER> <CLIENT> FTP [TCP >> Previous segment lost] Response: HELP >> 34 31.089656 <CLIENT> <SERVER> TCP 2895 > 21 >> [ACK] Seq=2817114436 Ack=2298201077 Win=64017 Len=0 SLE=2298201149 >> SRE=2298201156 >> 35 31.094466 <SERVER> <CLIENT> FTP [TCP >> Retransmission] Response: 214-The following SITE commands are recognized >> (* =>'s unimplemented). >> 36 31.094500 <CLIENT> <SERVER> TCP 2895 > 21 >> [ACK] Seq=2817114436 Ack=2298201156 Win=63938 Len=0 >> 37 31.205421 <SERVER> <CLIENT> FTP Response: >> CHGRP >> 38 31.205577 <CLIENT> <SERVER> FTP Request: >> PWD >> 39 31.319834 <SERVER> <CLIENT> FTP Response: >> 257 "/" is current directory. >> 40 31.419157 <CLIENT> <SERVER> TCP 2896 > 21 >> [SYN] Seq=3405431610 Ack=0 Win=64240 Len=0 MSS=1460 >> 41 31.497332 <CLIENT> <SERVER> TCP 2895 > 21 >> [ACK] Seq=2817114441 Ack=2298201256 Win=63838 Len=0 >> 42 31.533585 <SERVER> <CLIENT> TCP 21 > 2896
Well WE and IE also auto sends user credential + password. Just that it
doesn't send the password on the first attempt. I like using WE for ftp because it's a common Windows 'native' interface and no third party additional application to deal with. Just wish it would send correct password on first login attempt. Other that it works great for ftp and far as I'm concerned is a decent ftp client. [quoted text, click to view] "Bernard Cheah [MVP]" <qbernard@hotmail.com.discuss> wrote in message
news:%23wTJFheuGHA.2392@TK2MSFTNGP05.phx.gbl... > From your testing, what I can tell is client side app behavior. > If you have a decent ftp client, say wsftp pro or etc, it will auto send > user credential + pwd if you instruct it to send. > > -- > Regards, > Bernard Cheah > http://www.iis.net/ > http://www.iis-resources.com/ > http://msmvps.com/blogs/bernard/ > > > "Allen" <NOYB@NOYB.org> wrote in message > news:%23zHWxYeuGHA.2036@TK2MSFTNGP05.phx.gbl... >>I don't have access to the server, it's my ISP. >> >> >> >> Using IE directly behaves in similar fashion. >> >> >> >> If I specify ftp://userid@ftpsite.isp.net IE tries to login with userid >> twice with blank password then with correct password the third attempt. >> >> >> >> If I specify ftp://ftpsite.isp.net IE tries to login twice as anonymous >> with what I assume is a default anonymous password. Then logins as >> userid with correct password on the third attempt. >> >> >> >> Specifying ftp://userid:password@ftpsite.isp.net logins in on the first >> attempt with userid and password. However creating a shortcut like this >> puts the password in plain text in the shortcut and registry. >> >> >> >> Since the system obviously has the password for userid, why doesn't it >> just send it on the first attempt? >> >> >> >> >> >> "Bernard Cheah [MVP]" <qbernard@hotmail.com.discuss> wrote in message >> news:%23dC%23gmduGHA.5056@TK2MSFTNGP06.phx.gbl... >>> Lovely... what's the correspondent IIS FTP log file indicating? >>> if you direct use IE, do you got the same behavior in sniffer log? >>> >>> -- >>> Regards, >>> Bernard Cheah >>> http://www.iis.net/ >>> http://www.iis-resources.com/ >>> http://msmvps.com/blogs/bernard/ >>> >>> >>> "Allen" <NOYB@NOYB.org> wrote in message >>> news:ucg2qZSuGHA.2036@TK2MSFTNGP05.phx.gbl... >>>> Well first of all it's WE not IE, though WE does I believe use IE >>>> engine/settings or such. >>>> >>>> The way I know blank password being sent on first attempt is I used >>>> snifffer to watch the traffic. >>>> Also there are no attempts to login as 'anonymous'. So that's not even >>>> in the picture. >>>> >>>> No. Time Source Destination >>>> Protocol Info >>>> Connect: >>>> 1 0.000000 <CLIENT> <SERVER> TCP 2894 > 21 >>>> [SYN] Seq=4089064229 Ack=0 Win=64240 Len=0 MSS=1460 >>>> 2 0.116001 <SERVER> <CLIENT> TCP 21 > 2894 >>>> [SYN, ACK] Seq=2379666828 Ack=4089064230 Win=5840 Len=0 MSS=1460 >>>> 3 0.116034 <CLIENT> <SERVER> TCP 2894 > 21 >>>> [ACK] Seq=4089064230 Ack=2379666829 Win=64240 Len=0 >>>> >>>> First Login Attempt >>>> 4 16.236439 <SERVER> <CLIENT> FTP Response: >>>> 220 <ftp.isp.net> >>>> 5 16.236573 <CLIENT> <SERVER> FTP Request: >>>> USER <USER ID> >>>> 6 16.352338 <SERVER> <CLIENT> TCP 21 > 2894 >>>> [ACK] Seq=2379666856 Ack=4089064245 Win=5840 Len=0 >>>> 7 16.355448 <SERVER> <CLIENT> FTP Response: >>>> 331 Password required for <USER ID>. >>>> >>>> Blank Password Sent: >>>> 8 16.357648 <CLIENT> <SERVER> FTP Request: >>>> PASS >>>> 9 16.506272 <SERVER> <CLIENT> TCP 21 > 2894 >>>> [ACK] Seq=2379666893 Ack=4089064252 Win=5840 Len=0 >>>> 10 16.517560 <SERVER> <CLIENT> FTP Response: >>>> 530 Login incorrect. >>>> >>>> 11 16.517738 <CLIENT> <SERVER> TCP 2894 > 21 >>>> [FIN, ACK] Seq=4089064252 Ack=2379666915 Win=64154 Len=0 >>>> 12 16.533357 <CLIENT> <SERVER> TCP 2895 > 21 >>>> [SYN] Seq=2817114375 Ack=0 Win=64240 Len=0 MSS=1460 >>>> 13 16.633661 <SERVER> <CLIENT> TCP 21 > 2894 >>>> [FIN, ACK] Seq=2379666915 Ack=4089064253 Win=5840 Len=0 >>>> 14 16.633712 <CLIENT> <SERVER> TCP 2894 > 21 >>>> [ACK] Seq=4089064253 Ack=2379666916 Win=64154 Len=0 >>>> 15 16.650102 <SERVER> <CLIENT> TCP 21 > 2895 >>>> [SYN, ACK] Seq=2298200853 Ack=2817114376 Win=5840 Len=0 MSS=1460 >>>> 16 16.650134 <CLIENT> <SERVER> TCP 2895 > 21 >>>> [ACK] Seq=2817114376 Ack=2298200854 Win=64240 Len=0 >>>> >>>> Second Login Attempt: >>>> 17 30.106776 <SERVER> <CLIENT> FTP Response: >>>> 220 <ftp.isp.net> >>>> 18 30.106909 <CLIENT> <SERVER> FTP Request: >>>> USER <USER ID> >>>> 19 30.512334 <SERVER> <CLIENT> TCP 21 > 2895 >>>> [ACK] Seq=2298200881 Ack=2817114391 Win=5840 Len=0 >>>> 20 30.512490 <SERVER> <CLIENT> FTP Response: >>>> 331 Password required for <USER ID>. >>>> >>>> Correct Password Sent: >>>> 21 30.512609 <CLIENT> <SERVER> FTP Request: >>>> PASS <PASSWORD> >>>> 22 30.663902 <SERVER> <CLIENT> TCP 21 > 2895 >>>> [ACK] Seq=2298200918 Ack=2817114405 Win=5840 Len=0 >>>> 23 30.733681 <SERVER> <CLIENT> FTP [TCP >>>> Previous segment lost] Response: 230 Quota: avail(78.0%)=7360358.0 >>>> used(22.0%)=2076826.0 limit=9437184.0 bytes >>>> 24 30.733719 <CLIENT> <SERVER> TCP 2895 > 21 >>>> [ACK] Seq=2817114405 Ack=2298200918 Win=64176 Len=0 SLE=2298200948 >>>> SRE=2298201027 >>>> 25 30.736733 <SERVER> <CLIENT> FTP [TCP >>>> Retransmission] Response: 230-User <USER ID> logged in. >>>> >>>> 26 30.736778 <CLIENT> <SERVER> TCP 2895 > 21 >>>> [ACK] Seq=2817114405 Ack=2298201027 Win=64067 Len=0 >>>> 27 30.736958 <CLIENT> <SERVER> FTP Request: >>>> opts utf8 on >>>> 28 30.856052 <SERVER> <CLIENT> TCP 21 > 2895 >>>> [ACK] Seq=2298201027 Ack=2817114419 Win=5840 Len=0 >>>> 29 30.859208 <SERVER> <CLIENT> FTP Response: >>>> 501 OPTS: utf8 not understood >>>> 30 30.859321 <CLIENT> <SERVER> FTP Request: >>>> syst >>>> 31 30.973514 <SERVER> <CLIENT> FTP Response: >>>> 215 UNIX Type: L8 >>>> 32 30.973693 <CLIENT> <SERVER> FTP Request: >>>> site help
Understood. but I'm not aware of any setting that you tweak for WE to
authenticate the first time with password. -- Regards, Bernard Cheah http://www.iis.net/ http://www.iis-resources.com/ http://msmvps.com/blogs/bernard/ [quoted text, click to view] "Allen" <NOYB@NOYB.org> wrote in message
news:%23P06FteuGHA.5056@TK2MSFTNGP06.phx.gbl... > Well WE and IE also auto sends user credential + password. Just that it > doesn't send the password on the first attempt. > > I like using WE for ftp because it's a common Windows 'native' interface > and no third party additional application to deal with. Just wish it > would send correct password on first login attempt. Other that it works > great for ftp and far as I'm concerned is a decent ftp client. > > "Bernard Cheah [MVP]" <qbernard@hotmail.com.discuss> wrote in message > news:%23wTJFheuGHA.2392@TK2MSFTNGP05.phx.gbl... >> From your testing, what I can tell is client side app behavior. >> If you have a decent ftp client, say wsftp pro or etc, it will auto send >> user credential + pwd if you instruct it to send. >> >> -- >> Regards, >> Bernard Cheah >> http://www.iis.net/ >> http://www.iis-resources.com/ >> http://msmvps.com/blogs/bernard/ >> >> >> "Allen" <NOYB@NOYB.org> wrote in message >> news:%23zHWxYeuGHA.2036@TK2MSFTNGP05.phx.gbl... >>>I don't have access to the server, it's my ISP. >>> >>> >>> >>> Using IE directly behaves in similar fashion. >>> >>> >>> >>> If I specify ftp://userid@ftpsite.isp.net IE tries to login with userid >>> twice with blank password then with correct password the third attempt. >>> >>> >>> >>> If I specify ftp://ftpsite.isp.net IE tries to login twice as anonymous >>> with what I assume is a default anonymous password. Then logins as >>> userid with correct password on the third attempt. >>> >>> >>> >>> Specifying ftp://userid:password@ftpsite.isp.net logins in on the first >>> attempt with userid and password. However creating a shortcut like this >>> puts the password in plain text in the shortcut and registry. >>> >>> >>> >>> Since the system obviously has the password for userid, why doesn't it >>> just send it on the first attempt? >>> >>> >>> >>> >>> >>> "Bernard Cheah [MVP]" <qbernard@hotmail.com.discuss> wrote in message >>> news:%23dC%23gmduGHA.5056@TK2MSFTNGP06.phx.gbl... >>>> Lovely... what's the correspondent IIS FTP log file indicating? >>>> if you direct use IE, do you got the same behavior in sniffer log? >>>> >>>> -- >>>> Regards, >>>> Bernard Cheah >>>> http://www.iis.net/ >>>> http://www.iis-resources.com/ >>>> http://msmvps.com/blogs/bernard/ >>>> >>>> >>>> "Allen" <NOYB@NOYB.org> wrote in message >>>> news:ucg2qZSuGHA.2036@TK2MSFTNGP05.phx.gbl... >>>>> Well first of all it's WE not IE, though WE does I believe use IE >>>>> engine/settings or such. >>>>> >>>>> The way I know blank password being sent on first attempt is I used >>>>> snifffer to watch the traffic. >>>>> Also there are no attempts to login as 'anonymous'. So that's not >>>>> even in the picture. >>>>> >>>>> No. Time Source Destination Protocol Info >>>>> Connect: >>>>> 1 0.000000 <CLIENT> <SERVER> TCP 2894 > >>>>> 21 [SYN] Seq=4089064229 Ack=0 Win=64240 Len=0 MSS=1460 >>>>> 2 0.116001 <SERVER> <CLIENT> TCP 21 > >>>>> 2894 [SYN, ACK] Seq=2379666828 Ack=4089064230 Win=5840 Len=0 MSS=1460 >>>>> 3 0.116034 <CLIENT> <SERVER> TCP 2894 > >>>>> 21 [ACK] Seq=4089064230 Ack=2379666829 Win=64240 Len=0 >>>>> >>>>> First Login Attempt >>>>> 4 16.236439 <SERVER> <CLIENT> FTP >>>>> Response: 220 <ftp.isp.net> >>>>> 5 16.236573 <CLIENT> <SERVER> FTP Request: >>>>> USER <USER ID> >>>>> 6 16.352338 <SERVER> <CLIENT> TCP 21 > >>>>> 2894 [ACK] Seq=2379666856 Ack=4089064245 Win=5840 Len=0 >>>>> 7 16.355448 <SERVER> <CLIENT> FTP >>>>> Response: 331 Password required for <USER ID>. >>>>> >>>>> Blank Password Sent: >>>>> 8 16.357648 <CLIENT> <SERVER> FTP Request: >>>>> PASS >>>>> 9 16.506272 <SERVER> <CLIENT> TCP 21 > >>>>> 2894 [ACK] Seq=2379666893 Ack=4089064252 Win=5840 Len=0 >>>>> 10 16.517560 <SERVER> <CLIENT> FTP >>>>> Response: 530 Login incorrect. >>>>> >>>>> 11 16.517738 <CLIENT> <SERVER> TCP 2894 > >>>>> 21 [FIN, ACK] Seq=4089064252 Ack=2379666915 Win=64154 Len=0 >>>>> 12 16.533357 <CLIENT> <SERVER> TCP 2895 > >>>>> 21 [SYN] Seq=2817114375 Ack=0 Win=64240 Len=0 MSS=1460 >>>>> 13 16.633661 <SERVER> <CLIENT> TCP 21 > >>>>> 2894 [FIN, ACK] Seq=2379666915 Ack=4089064253 Win=5840 Len=0 >>>>> 14 16.633712 <CLIENT> <SERVER> TCP 2894 > >>>>> 21 [ACK] Seq=4089064253 Ack=2379666916 Win=64154 Len=0 >>>>> 15 16.650102 <SERVER> <CLIENT> TCP 21 > >>>>> 2895 [SYN, ACK] Seq=2298200853 Ack=2817114376 Win=5840 Len=0 MSS=1460 >>>>> 16 16.650134 <CLIENT> <SERVER> TCP 2895 > >>>>> 21 [ACK] Seq=2817114376 Ack=2298200854 Win=64240 Len=0 >>>>> >>>>> Second Login Attempt: >>>>> 17 30.106776 <SERVER> <CLIENT> FTP >>>>> Response: 220 <ftp.isp.net> >>>>> 18 30.106909 <CLIENT> <SERVER> FTP Request: >>>>> USER <USER ID> >>>>> 19 30.512334 <SERVER> <CLIENT> TCP 21 > >>>>> 2895 [ACK] Seq=2298200881 Ack=2817114391 Win=5840 Len=0 >>>>> 20 30.512490 <SERVER> <CLIENT> FTP >>>>> Response: 331 Password required for <USER ID>. >>>>> >>>>> Correct Password Sent: >>>>> 21 30.512609 <CLIENT> <SERVER> FTP Request: >>>>> PASS <PASSWORD> >>>>> 22 30.663902 <SERVER> <CLIENT> TCP 21 > >>>>> 2895 [ACK] Seq=2298200918 Ack=2817114405 Win=5840 Len=0 >>>>> 23 30.733681 <SERVER> <CLIENT> FTP [TCP >>>>> Previous segment lost] Response: 230 Quota: avail(78.0%)=7360358.0 >>>>> used(22.0%)=2076826.0 limit=9437184.0 bytes >>>>> 24 30.733719 <CLIENT> <SERVER> TCP 2895 > >>>>> 21 [ACK] Seq=2817114405 Ack=2298200918 Win=64176 Len=0 SLE=2298200948 >>>>> SRE=2298201027 >>>>> 25 30.736733 <SERVER> <CLIENT> FTP [TCP >>>>> Retransmission] Response: 230-User <USER ID> logged in. >>>>> >>>>> 26 30.736778 <CLIENT> <SERVER> TCP 2895 > >>>>> 21 [ACK] Seq=2817114405 Ack=2298201027 Win=64067 Len=0 >>>>> 27 30.736958 <CLIENT> <SERVER> FTP Request: >>>>> opts utf8 on >>>>> 28 30.856052 <SERVER> <CLIENT> TCP 21 >
From your testing, what I can tell is client side app behavior.
If you have a decent ftp client, say wsftp pro or etc, it will auto send user credential + pwd if you instruct it to send. -- Regards, Bernard Cheah http://www.iis.net/ http://www.iis-resources.com/ http://msmvps.com/blogs/bernard/ [quoted text, click to view] "Allen" <NOYB@NOYB.org> wrote in message
news:%23zHWxYeuGHA.2036@TK2MSFTNGP05.phx.gbl... >I don't have access to the server, it's my ISP. > > > > Using IE directly behaves in similar fashion. > > > > If I specify ftp://userid@ftpsite.isp.net IE tries to login with userid > twice with blank password then with correct password the third attempt. > > > > If I specify ftp://ftpsite.isp.net IE tries to login twice as anonymous > with what I assume is a default anonymous password. Then logins as userid > with correct password on the third attempt. > > > > Specifying ftp://userid:password@ftpsite.isp.net logins in on the first > attempt with userid and password. However creating a shortcut like this > puts the password in plain text in the shortcut and registry. > > > > Since the system obviously has the password for userid, why doesn't it > just send it on the first attempt? > > > > > > "Bernard Cheah [MVP]" <qbernard@hotmail.com.discuss> wrote in message > news:%23dC%23gmduGHA.5056@TK2MSFTNGP06.phx.gbl... >> Lovely... what's the correspondent IIS FTP log file indicating? >> if you direct use IE, do you got the same behavior in sniffer log? >> >> -- >> Regards, >> Bernard Cheah >> http://www.iis.net/ >> http://www.iis-resources.com/ >> http://msmvps.com/blogs/bernard/ >> >> >> "Allen" <NOYB@NOYB.org> wrote in message >> news:ucg2qZSuGHA.2036@TK2MSFTNGP05.phx.gbl... >>> Well first of all it's WE not IE, though WE does I believe use IE >>> engine/settings or such. >>> >>> The way I know blank password being sent on first attempt is I used >>> snifffer to watch the traffic. >>> Also there are no attempts to login as 'anonymous'. So that's not even >>> in the picture. >>> >>> No. Time Source Destination Protocol >>> Info >>> Connect: >>> 1 0.000000 <CLIENT> <SERVER> TCP 2894 > 21 >>> [SYN] Seq=4089064229 Ack=0 Win=64240 Len=0 MSS=1460 >>> 2 0.116001 <SERVER> <CLIENT> TCP 21 > 2894 >>> [SYN, ACK] Seq=2379666828 Ack=4089064230 Win=5840 Len=0 MSS=1460 >>> 3 0.116034 <CLIENT> <SERVER> TCP 2894 > 21 >>> [ACK] Seq=4089064230 Ack=2379666829 Win=64240 Len=0 >>> >>> First Login Attempt >>> 4 16.236439 <SERVER> <CLIENT> FTP Response: >>> 220 <ftp.isp.net> >>> 5 16.236573 <CLIENT> <SERVER> FTP Request: >>> USER <USER ID> >>> 6 16.352338 <SERVER> <CLIENT> TCP 21 > 2894 >>> [ACK] Seq=2379666856 Ack=4089064245 Win=5840 Len=0 >>> 7 16.355448 <SERVER> <CLIENT> FTP Response: >>> 331 Password required for <USER ID>. >>> >>> Blank Password Sent: >>> 8 16.357648 <CLIENT> <SERVER> FTP Request: >>> PASS >>> 9 16.506272 <SERVER> <CLIENT> TCP 21 > 2894 >>> [ACK] Seq=2379666893 Ack=4089064252 Win=5840 Len=0 >>> 10 16.517560 <SERVER> <CLIENT> FTP Response: >>> 530 Login incorrect. >>> >>> 11 16.517738 <CLIENT> <SERVER> TCP 2894 > 21 >>> [FIN, ACK] Seq=4089064252 Ack=2379666915 Win=64154 Len=0 >>> 12 16.533357 <CLIENT> <SERVER> TCP 2895 > 21 >>> [SYN] Seq=2817114375 Ack=0 Win=64240 Len=0 MSS=1460 >>> 13 16.633661 <SERVER> <CLIENT> TCP 21 > 2894 >>> [FIN, ACK] Seq=2379666915 Ack=4089064253 Win=5840 Len=0 >>> 14 16.633712 <CLIENT> <SERVER> TCP 2894 > 21 >>> [ACK] Seq=4089064253 Ack=2379666916 Win=64154 Len=0 >>> 15 16.650102 <SERVER> <CLIENT> TCP 21 > 2895 >>> [SYN, ACK] Seq=2298200853 Ack=2817114376 Win=5840 Len=0 MSS=1460 >>> 16 16.650134 <CLIENT> <SERVER> TCP 2895 > 21 >>> [ACK] Seq=2817114376 Ack=2298200854 Win=64240 Len=0 >>> >>> Second Login Attempt: >>> 17 30.106776 <SERVER> <CLIENT> FTP Response: >>> 220 <ftp.isp.net> >>> 18 30.106909 <CLIENT> <SERVER> FTP Request: >>> USER <USER ID> >>> 19 30.512334 <SERVER> <CLIENT> TCP 21 > 2895 >>> [ACK] Seq=2298200881 Ack=2817114391 Win=5840 Len=0 >>> 20 30.512490 <SERVER> <CLIENT> FTP Response: >>> 331 Password required for <USER ID>. >>> >>> Correct Password Sent: >>> 21 30.512609 <CLIENT> <SERVER> FTP Request: >>> PASS <PASSWORD> >>> 22 30.663902 <SERVER> <CLIENT> TCP 21 > 2895 >>> [ACK] Seq=2298200918 Ack=2817114405 Win=5840 Len=0 >>> 23 30.733681 <SERVER> <CLIENT> FTP [TCP >>> Previous segment lost] Response: 230 Quota: avail(78.0%)=7360358.0 >>> used(22.0%)=2076826.0 limit=9437184.0 bytes >>> 24 30.733719 <CLIENT> <SERVER> TCP 2895 > 21 >>> [ACK] Seq=2817114405 Ack=2298200918 Win=64176 Len=0 SLE=2298200948 >>> SRE=2298201027 >>> 25 30.736733 <SERVER> <CLIENT> FTP [TCP >>> Retransmission] Response: 230-User <USER ID> logged in. >>> >>> 26 30.736778 <CLIENT> <SERVER> TCP 2895 > 21 >>> [ACK] Seq=2817114405 Ack=2298201027 Win=64067 Len=0 >>> 27 30.736958 <CLIENT> <SERVER> FTP Request: >>> opts utf8 on >>> 28 30.856052 <SERVER> <CLIENT> TCP 21 > 2895 >>> [ACK] Seq=2298201027 Ack=2817114419 Win=5840 Len=0 >>> 29 30.859208 <SERVER> <CLIENT> FTP Response: >>> 501 OPTS: utf8 not understood >>> 30 30.859321 <CLIENT> <SERVER> FTP Request: >>> syst >>> 31 30.973514 <SERVER> <CLIENT> FTP Response: >>> 215 UNIX Type: L8 >>> 32 30.973693 <CLIENT> <SERVER> FTP Request: >>> site help >>> 33 31.089610 <SERVER> <CLIENT> FTP [TCP >>> Previous segment lost] Response: HELP >>> 34 31.089656 <CLIENT> <SERVER> TCP 2895 > 21 >>> [ACK] Seq=2817114436 Ack=2298201077 Win=64017 Len=0 SLE=2298201149 >>> SRE=2298201156 >>> 35 31.094466 <SERVER> <CLIENT> FTP [TCP >>> Retransmission] Response: 214-The following SITE commands are recognized >>> (* =>'s unimplemented). >>> 36 31.094500 <CLIENT> <SERVER> TCP 2895 > 21 >>> [ACK] Seq=2817114436 Ack=2298201156 Win=63938 Len=0 >>> 37 31.205421 <SERVER> <CLIENT> FTP Response: >>> CHGRP
Lovely... what's the correspondent IIS FTP log file indicating?
if you direct use IE, do you got the same behavior in sniffer log? -- Regards, Bernard Cheah http://www.iis.net/ http://www.iis-resources.com/ http://msmvps.com/blogs/bernard/ [quoted text, click to view] "Allen" <NOYB@NOYB.org> wrote in message
news:ucg2qZSuGHA.2036@TK2MSFTNGP05.phx.gbl... > Well first of all it's WE not IE, though WE does I believe use IE > engine/settings or such. > > The way I know blank password being sent on first attempt is I used > snifffer to watch the traffic. > Also there are no attempts to login as 'anonymous'. So that's not even in > the picture. > > No. Time Source Destination Protocol > Info > Connect: > 1 0.000000 <CLIENT> <SERVER> TCP 2894 > 21 > [SYN] Seq=4089064229 Ack=0 Win=64240 Len=0 MSS=1460 > 2 0.116001 <SERVER> <CLIENT> TCP 21 > 2894 > [SYN, ACK] Seq=2379666828 Ack=4089064230 Win=5840 Len=0 MSS=1460 > 3 0.116034 <CLIENT> <SERVER> TCP 2894 > 21 > [ACK] Seq=4089064230 Ack=2379666829 Win=64240 Len=0 > > First Login Attempt > 4 16.236439 <SERVER> <CLIENT> FTP Response: > 220 <ftp.isp.net> > 5 16.236573 <CLIENT> <SERVER> FTP Request: > USER <USER ID> > 6 16.352338 <SERVER> <CLIENT> TCP 21 > 2894 > [ACK] Seq=2379666856 Ack=4089064245 Win=5840 Len=0 > 7 16.355448 <SERVER> <CLIENT> FTP Response: > 331 Password required for <USER ID>. > > Blank Password Sent: > 8 16.357648 <CLIENT> <SERVER> FTP Request: > PASS > 9 16.506272 <SERVER> <CLIENT> TCP 21 > 2894 > [ACK] Seq=2379666893 Ack=4089064252 Win=5840 Len=0 > 10 16.517560 <SERVER> <CLIENT> FTP Response: > 530 Login incorrect. > > 11 16.517738 <CLIENT> <SERVER> TCP 2894 > 21 > [FIN, ACK] Seq=4089064252 Ack=2379666915 Win=64154 Len=0 > 12 16.533357 <CLIENT> <SERVER> TCP 2895 > 21 > [SYN] Seq=2817114375 Ack=0 Win=64240 Len=0 MSS=1460 > 13 16.633661 <SERVER> <CLIENT> TCP 21 > 2894 > [FIN, ACK] Seq=2379666915 Ack=4089064253 Win=5840 Len=0 > 14 16.633712 <CLIENT> <SERVER> TCP 2894 > 21 > [ACK] Seq=4089064253 Ack=2379666916 Win=64154 Len=0 > 15 16.650102 <SERVER> <CLIENT> TCP 21 > 2895 > [SYN, ACK] Seq=2298200853 Ack=2817114376 Win=5840 Len=0 MSS=1460 > 16 16.650134 <CLIENT> <SERVER> TCP 2895 > 21 > [ACK] Seq=2817114376 Ack=2298200854 Win=64240 Len=0 > > Second Login Attempt: > 17 30.106776 <SERVER> <CLIENT> FTP Response: > 220 <ftp.isp.net> > 18 30.106909 <CLIENT> <SERVER> FTP Request: > USER <USER ID> > 19 30.512334 <SERVER> <CLIENT> TCP 21 > 2895 > [ACK] Seq=2298200881 Ack=2817114391 Win=5840 Len=0 > 20 30.512490 <SERVER> <CLIENT> FTP Response: > 331 Password required for <USER ID>. > > Correct Password Sent: > 21 30.512609 <CLIENT> <SERVER> FTP Request: > PASS <PASSWORD> > 22 30.663902 <SERVER> <CLIENT> TCP 21 > 2895 > [ACK] Seq=2298200918 Ack=2817114405 Win=5840 Len=0 > 23 30.733681 <SERVER> <CLIENT> FTP [TCP > Previous segment lost] Response: 230 Quota: avail(78.0%)=7360358.0 > used(22.0%)=2076826.0 limit=9437184.0 bytes > 24 30.733719 <CLIENT> <SERVER> TCP 2895 > 21 > [ACK] Seq=2817114405 Ack=2298200918 Win=64176 Len=0 SLE=2298200948 > SRE=2298201027 > 25 30.736733 <SERVER> <CLIENT> FTP [TCP > Retransmission] Response: 230-User <USER ID> logged in. > > 26 30.736778 <CLIENT> <SERVER> TCP 2895 > 21 > [ACK] Seq=2817114405 Ack=2298201027 Win=64067 Len=0 > 27 30.736958 <CLIENT> <SERVER> FTP Request: > opts utf8 on > 28 30.856052 <SERVER> <CLIENT> TCP 21 > 2895 > [ACK] Seq=2298201027 Ack=2817114419 Win=5840 Len=0 > 29 30.859208 <SERVER> <CLIENT> FTP Response: > 501 OPTS: utf8 not understood > 30 30.859321 <CLIENT> <SERVER> FTP Request: > syst > 31 30.973514 <SERVER> <CLIENT> FTP Response: > 215 UNIX Type: L8 > 32 30.973693 <CLIENT> <SERVER> FTP Request: > site help > 33 31.089610 <SERVER> <CLIENT> FTP [TCP > Previous segment lost] Response: HELP > 34 31.089656 <CLIENT> <SERVER> TCP 2895 > 21 > [ACK] Seq=2817114436 Ack=2298201077 Win=64017 Len=0 SLE=2298201149 > SRE=2298201156 > 35 31.094466 <SERVER> <CLIENT> FTP [TCP > Retransmission] Response: 214-The following SITE commands are recognized > (* =>'s unimplemented). > 36 31.094500 <CLIENT> <SERVER> TCP 2895 > 21 > [ACK] Seq=2817114436 Ack=2298201156 Win=63938 Len=0 > 37 31.205421 <SERVER> <CLIENT> FTP Response: > CHGRP > 38 31.205577 <CLIENT> <SERVER> FTP Request: PWD > 39 31.319834 <SERVER> <CLIENT> FTP Response: > 257 "/" is current directory. > 40 31.419157 <CLIENT> <SERVER> TCP 2896 > 21 > [SYN] Seq=3405431610 Ack=0 Win=64240 Len=0 MSS=1460 > 41 31.497332 <CLIENT> <SERVER> TCP 2895 > 21 > [ACK] Seq=2817114441 Ack=2298201256 Win=63838 Len=0 > 42 31.533585 <SERVER> <CLIENT> TCP 21 > 2896 > [SYN, ACK] Seq=2312840124 Ack=3405431611 Win=5840 Len=0 MSS=1460 > 43 31.533624 <CLIENT> <SERVER> TCP 2896 > 21 > [ACK] Seq=3405431611 Ack=2312840125 Win=64240 Len=0 > > Login a Third Time: > 44 39.644191 <SERVER> <CLIENT> FTP Response: > 220 <ftp.isp.net> > 45 39.644325 <CLIENT> <SERVER> FTP Request: > USER <USER ID> > 46 39.760158 <SERVER> <CLIENT> TCP 21 > 2896 > [ACK] Seq=2312840152 Ack=3405431626 Win=5840 Len=0 > > Correct Password Sent: > 47 39.763321 <SERVER> <CLIENT> FTP Response: > 331 Password required for <USER ID>. > 48 39.763410 <CLIENT> <SERVER> FTP Request: > PASS <PASSWORD> > 49 39.914153 <SERVER> <CLIENT> TCP 21 > 2896 > [ACK] Seq=2312840189 Ack=3405431640 Win=5840 Len=0 > 50 39.917294 <SERVER> <CLIENT> FTP Response: > 230-User <USER ID> logged in. > > 51 39.922254 <SERVER> <CLIENT> FTP Response:
Don't see what you're looking for? Try a search.
|
June 2004
July 2004
August 2004
September 2004
October 2004
November 2004
December 2004
January 2005
February 2005
March 2005
April 2005
May 2005
June 2005
July 2005
August 2005
September 2005
October 2005
November 2005
December 2005
January 2006
February 2006
March 2006
April 2006
May 2006
June 2006
July 2006
August 2006
September 2006
October 2006
November 2006
December 2006
January 2007
February 2007
March 2007
April 2007
May 2007
June 2007
July 2007
August 2007
September 2007
October 2007
November 2007
December 2007
January 2008
February 2008
March 2008
April 2008
May 2008
June 2008
| home · blog · groups | Questions? Comments? Contact the dn |