FTP. Works internally. Only works extermally using 1 program

[mrforgetful]

Hello,

 

So now I've given up with WebDAV as Microsoft can't get it right I'm moving to FTP to provide users with external access to resources.

 

Now, internally it all works fine, My Computer, Map Network Drive, use the online storage link etc..

 

At home, this come up with Access Denied.

 

Using various other FPT client programs I get Access Denied.

 

Using Ipswitch's WS_FTP program it all works fine.

 

Now I've noticed when using IE that the credentials are passed in the usual FTP way, username@address:password even if I enter details as domain\user and a password.

 

Using WS_FTP I'm pretty sure it sends the credentials as domain\username.

 

I think this is why it works with that, and not with anything else as Windows is only authenticating WS_FTP access correctly.

 

What have I done wrong? Is there some setting on the server to tell it how to ask for the credentials? Is it something else?

[GlennT]

Hi!

From what I understand [i am no FTP expert!], there is a difference between the type of authentication used by dedicated ftp clients and web browsers.

I think you will need to reconfigure your IIS server to use the correct authentication, see this link... Enabling and Configuring Authentication for more info.

You may also need to look at your firewall to see if anything is being blocked.

Good luck!

[mrforgetful]

Thanks for that I'll have a read.

 

The firewall logs show no problems...

[petectid]

Could it be that somewhere along the route from home port 21 is closed denying access to FTP, and that WS_FTP which uses port 20 is open?

[mrforgetful]

I wouldn't have thought so as I know for certain my firewall only has 21 open and I asked the LEA to only open port 21 also.

[kesomir]

can't you use secure ftp?

 

[option] or sort out webdav on a lamp box which accesses your ntfs fileshares and auths against your AD?

[mrforgetful]

How do I instigate secure ftp?

 

Also regards webdav, it's the client machines that have the problem, works fine on my Macbook Pro!

[kesomir]

here's a 101

 

Secure FTP 101 - Page 2

 

Personally, I use ssh (on *nix) which I can connect to via an ftp client over sftp, but I think there are products on windows that can do it:

 

A guide:

Setting up a SFTP Server on Windows

 

Another linky:

Glub Tech, Inc. - Secure FTP - FTPS the easy way!

 

above mentions free for non-commercial, so I guess it's good unless you're an independent.

 

Not used that though, was just the first hit on google.

[petectid]

I wouldn't have thought so as I know for certain my firewall only has 21 open and I asked the LEA to only open port 21 also.

 

Have they opened it? Would they not be reluctant to do that?

[mrforgetful]

Cheers Kesomir, will take a look when I can.

 

petectid - never have any trouble opening up any ports as it's only on a IP address mapped to our own firewall.