all groups > iis ftp > february 2007 >
You're in the

iis ftp

group:

FTP user isolation help


FTP user isolation help marc
2/21/2007 11:01:36 PM
iis ftp:
Hello Everyone,

I am in charge of a lab with roughly 20 users. Everyone has a user
account and I have set up 1 ftp site with virtual directories for
every user since I only have 1 ip to work with.

When users log in with IE7 and have not selected the "View FTP sites
in Windows Explorer" option, they log onto the ftproot folder...Not
good.

However when they do switch to Explorer view, and re-log on, they are
immediately transferred to their own directory with each of their
folders only allowing themselves and admin as permissions.

It is not a caching issue, as I created a dummy user with a virtual
site and the first time I log on to the site, it goes right to root,
where after I switch to explorer view, re-input the credentials it
goes to "their" virtual directory??

Any help or insight on this issue would be greatly appreciated.

Thanks,
Marc


"I gotta go. My damn wiener kids are listening."
Re: FTP user isolation help marc
2/22/2007 8:09:46 AM
[quoted text, click to view]

I will implement this morning. Thank you very much!

Marc
Re: FTP user isolation help .._..
2/22/2007 3:50:50 PM
Marc,

There is a solution for this. Here are the steps sumarized from start to
finish, you'll have to pick out the parts you need to do.

Set up IIS
Make FTP root folder
Make _Second_ FTP root folder
Make user folders in _Second_ ftp root folder
Make users
Add user permissions to user folders

Make FTP site
Use _first_ root folder as the root of that.
Make user folders, make those go to /second/user/ folder.
Repeat as necessary.

End result. Users using "CD" to get out of their folder end up in the
"first" root folder which has no write permissions for them, and no other
folders or data to view. Only if they a) know the virtual folder name of
other users and b) have permissions to view or edit it can they get in
there. Otherwise it looks like they are on their own FTP instance all
alone.

Depending on if the folders have HTTP access or not, you could remove
permissions so users can't view or edit even if they should manage to figure
out how. (Most won't.)

As admin, you would be able to log in and change folders around as needed.
(Assuming you knew the folder names)

Works in IIS5 and IIS6.

[quoted text, click to view]

Re: FTP user isolation help Bernard Cheah [MVP]
3/1/2007 12:00:00 AM
this is known issue for IE7. if you want user to automatic redirect to home
folder. use Windows explorer to access not IE.

--
Regards,
Bernard Cheah
http://www.iis.net/
http://www.iis-resources.com/
http://msmvps.com/blogs/bernard/


[quoted text, click to view]

Re: FTP user isolation help Bernard Cheah [MVP]
3/1/2007 12:00:00 AM
This won't address the IE 7 issue. Microsoft break something on ftp login.
and what you propose can be easily done via user isolation in iis 6.

--
Regards,
Bernard Cheah
http://www.iis.net/
http://www.iis-resources.com/
http://msmvps.com/blogs/bernard/


[quoted text, click to view]

AddThis Social Bookmark Button