1Gbps 2003 2008 bandwidth connection credential cs csUriQuery csUriStem development directory edition epreuve error fault filter hardware hosting hotfix IET IIS IIS7 initiator isapi iscsi issue kunale letogolais linux log Login longhorn memory microsoft over partners query recovery SCST security server Stem target unlimited upgrade Uri virtual web webhosting windows

Re: Isolating FTP user with IIS Manager based credentials

Hmmm... interesting insights with the process manager...

When I run ftp with ftp user isolation set to: Do not isolate users. Start users in User name directory, I see:

Create file D:\dummy_ftp_home\user

When I run with Isolate Users. Restrict users to the following directory: and select either User name directory (disable global virtual directories) or User name physical directory (enable global virtual directories), in both cases I see:

Create file D:\dummy_ftp_home\LocalUser\user\ (yes the backslash is there and not in the other call)

And of course the LocalUser business there ... must be a reason why.

So I created .\LocalUser\user physical directory. This works. So then I proceeded to do a little change to this setup - my original question was if I can have a virtual directory. I deleted physical directory so now I have \LocalUser\ with virtual directory user which is directed elsewhere.

Again this fails as it calls createFile on physical location.

So far i found one workaround but it is not nice - i can create an empty directory and then create virtual directory underneath it called "my actual home", for example. This of course is not a good solution, what I would like to have is something like this:

D:\dummy_ftp_directory - the root for ftp.

Then if I log in as user, to get my home directory isolated to, for example, f:\user_home. If I choose to log in as, for example, john, I'd like that user to be isolated to, for example, g:\websites\john_sites.

I don't want to pull the linux card here to compare the solutions, but it helps for illustration purposes. I can create home directories anywhere i want and ftp will read the home from a password file and that's where the user goes upon login. Logical place for this would be, for example, in IIS Manager Permissions for the FTP site instance, where I could put in home directory. It seems the home directory functionality is available when using Active directory ("isolate users. restrict users to the following directory: FTP home directory configured in Active Directory").

Maybe someone knows how to pull "Ftp home directory" that is not configured in active directory?

More info:

permanent link to article http://freecash.hogger.net/re_isolating_ftp_user_with_iis_manager_based_credentials