Re: WE/IE FTP

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

Understood. but I'm not aware of any setting that you tweak for WE to
authenticate the first time with password.


--
Regards,
Bernard Cheah
http://www.iis.net/
http://www.iis-resources.com/
http://msmvps.com/blogs/bernard/


"Allen" <NOYB@xxxxxxxx> wrote in message
news:%23P06FteuGHA.5056@xxxxxxxxxxxxxxxxxxxxxxx
Well WE and IE also auto sends user credential + password. Just that it
doesn't send the password on the first attempt.

I like using WE for ftp because it's a common Windows 'native' interface
and no third party additional application to deal with. Just wish it
would send correct password on first login attempt. Other that it works
great for ftp and far as I'm concerned is a decent ftp client.

"Bernard Cheah [MVP]" <qbernard@xxxxxxxxxxxxxxxxxxx> wrote in message
news:%23wTJFheuGHA.2392@xxxxxxxxxxxxxxxxxxxxxxx
From your testing, what I can tell is client side app behavior.
If you have a decent ftp client, say wsftp pro or etc, it will auto send
user credential + pwd if you instruct it to send.

--
Regards,
Bernard Cheah
http://www.iis.net/
http://www.iis-resources.com/
http://msmvps.com/blogs/bernard/


"Allen" <NOYB@xxxxxxxx> wrote in message
news:%23zHWxYeuGHA.2036@xxxxxxxxxxxxxxxxxxxxxxx
I don't have access to the server, it's my ISP.



Using IE directly behaves in similar fashion.



If I specify ftp://userid@xxxxxxxxxxxxxxx IE tries to login with userid
twice with blank password then with correct password the third attempt.



If I specify ftp://ftpsite.isp.net IE tries to login twice as anonymous
with what I assume is a default anonymous password. Then logins as
userid with correct password on the third attempt.



Specifying ftp://userid:password@xxxxxxxxxxxxxxx logins in on the first
attempt with userid and password. However creating a shortcut like this
puts the password in plain text in the shortcut and registry.



Since the system obviously has the password for userid, why doesn't it
just send it on the first attempt?





"Bernard Cheah [MVP]" <qbernard@xxxxxxxxxxxxxxxxxxx> wrote in message
news:%23dC%23gmduGHA.5056@xxxxxxxxxxxxxxxxxxxxxxx
Lovely... what's the correspondent IIS FTP log file indicating?
if you direct use IE, do you got the same behavior in sniffer log?

--
Regards,
Bernard Cheah
http://www.iis.net/
http://www.iis-resources.com/
http://msmvps.com/blogs/bernard/


"Allen" <NOYB@xxxxxxxx> wrote in message
news:ucg2qZSuGHA.2036@xxxxxxxxxxxxxxxxxxxxxxx
Well first of all it's WE not IE, though WE does I believe use IE
engine/settings or such.

The way I know blank password being sent on first attempt is I used
snifffer to watch the traffic.
Also there are no attempts to login as 'anonymous'. So that's not
even in the picture.

No. Time Source Destination Protocol Info
Connect:
1 0.000000 <CLIENT> <SERVER> TCP 2894 >
21 [SYN] Seq=4089064229 Ack=0 Win=64240 Len=0 MSS=1460
2 0.116001 <SERVER> <CLIENT> TCP 21 >
2894 [SYN, ACK] Seq=2379666828 Ack=4089064230 Win=5840 Len=0 MSS=1460
3 0.116034 <CLIENT> <SERVER> TCP 2894 >
21 [ACK] Seq=4089064230 Ack=2379666829 Win=64240 Len=0

First Login Attempt
4 16.236439 <SERVER> <CLIENT> FTP
Response: 220 <ftp.isp.net>
5 16.236573 <CLIENT> <SERVER> FTP Request:
USER <USER ID>
6 16.352338 <SERVER> <CLIENT> TCP 21 >
2894 [ACK] Seq=2379666856 Ack=4089064245 Win=5840 Len=0
7 16.355448 <SERVER> <CLIENT> FTP
Response: 331 Password required for <USER ID>.

Blank Password Sent:
8 16.357648 <CLIENT> <SERVER> FTP Request:
PASS
9 16.506272 <SERVER> <CLIENT> TCP 21 >
2894 [ACK] Seq=2379666893 Ack=4089064252 Win=5840 Len=0
10 16.517560 <SERVER> <CLIENT> FTP
Response: 530 Login incorrect.

11 16.517738 <CLIENT> <SERVER> TCP 2894 >
21 [FIN, ACK] Seq=4089064252 Ack=2379666915 Win=64154 Len=0
12 16.533357 <CLIENT> <SERVER> TCP 2895 >
21 [SYN] Seq=2817114375 Ack=0 Win=64240 Len=0 MSS=1460
13 16.633661 <SERVER> <CLIENT> TCP 21 >
2894 [FIN, ACK] Seq=2379666915 Ack=4089064253 Win=5840 Len=0
14 16.633712 <CLIENT> <SERVER> TCP 2894 >
21 [ACK] Seq=4089064253 Ack=2379666916 Win=64154 Len=0
15 16.650102 <SERVER> <CLIENT> TCP 21 >
2895 [SYN, ACK] Seq=2298200853 Ack=2817114376 Win=5840 Len=0 MSS=1460
16 16.650134 <CLIENT> <SERVER> TCP 2895 >
21 [ACK] Seq=2817114376 Ack=2298200854 Win=64240 Len=0

Second Login Attempt:
17 30.106776 <SERVER> <CLIENT> FTP
Response: 220 <ftp.isp.net>
18 30.106909 <CLIENT> <SERVER> FTP Request:
USER <USER ID>
19 30.512334 <SERVER> <CLIENT> TCP 21 >
2895 [ACK] Seq=2298200881 Ack=2817114391 Win=5840 Len=0
20 30.512490 <SERVER> <CLIENT> FTP
Response: 331 Password required for <USER ID>.

Correct Password Sent:
21 30.512609 <CLIENT> <SERVER> FTP Request:
PASS <PASSWORD>
22 30.663902 <SERVER> <CLIENT> TCP 21 >
2895 [ACK] Seq=2298200918 Ack=2817114405 Win=5840 Len=0
23 30.733681 <SERVER> <CLIENT> FTP [TCP
Previous segment lost] Response: 230 Quota: avail(78.0%)=7360358.0
used(22.0%)=2076826.0 limit=9437184.0 bytes
24 30.733719 <CLIENT> <SERVER> TCP 2895 >
21 [ACK] Seq=2817114405 Ack=2298200918 Win=64176 Len=0 SLE=2298200948
SRE=2298201027
25 30.736733 <SERVER> <CLIENT> FTP [TCP
Retransmission] Response: 230-User <USER ID> logged in.

26 30.736778 <CLIENT> <SERVER> TCP 2895 >
21 [ACK] Seq=2817114405 Ack=2298201027 Win=64067 Len=0
27 30.736958 <CLIENT> <SERVER> FTP Request:
opts utf8 on
28 30.856052 <SERVER> <CLIENT> TCP 21 >
2895 [ACK] Seq=2298201027 Ack=2817114419 Win=5840 Len=0
29 30.859208 <SERVER> <CLIENT> FTP
Response: 501 OPTS: utf8 not understood
30 30.859321 <CLIENT> <SERVER> FTP Request:
syst
31 30.973514 <SERVER> <CLIENT> FTP
Response: 215 UNIX Type: L8
32 30.973693 <CLIENT> <SERVER> FTP Request:
site help
33 31.089610 <SERVER> <CLIENT> FTP [TCP
Previous segment lost] Response: HELP
34 31.089656 <CLIENT> <SERVER> TCP 2895 >
21 [ACK] Seq=2817114436 Ack=2298201077 Win=64017 Len=0 SLE=2298201149
SRE=2298201156
35 31.094466 <SERVER> <CLIENT> FTP [TCP
Retransmission] Response: 214-The following SITE commands are
recognized (* =>'s unimplemented).
36 31.094500 <CLIENT> <SERVER> TCP 2895 >
21 [ACK] Seq=2817114436 Ack=2298201156 Win=63938 Len=0
37 31.205421 <SERVER> <CLIENT> FTP
Response: CHGRP
38 31.205577 <CLIENT> <SERVER> FTP Request:
PWD
39 31.319834 <SERVER> <CLIENT> FTP
Response: 257 "/" is current directory.
40 31.419157 <CLIENT> <SERVER> TCP 2896 >
21 [SYN] Seq=3405431610 Ack=0 Win=64240 Len=0 MSS=1460
41 31.497332 <CLIENT> <SERVER> TCP 2895 >
21 [ACK] Seq=2817114441 Ack=2298201256 Win=63838 Len=0
42 31.533585 <SERVER> <CLIENT> TCP 21 >
2896 [SYN, ACK] Seq=2312840124 Ack=3405431611 Win=5840 Len=0 MSS=1460
43 31.533624 <CLIENT> <SERVER> TCP 2896 >
21 [ACK] Seq=3405431611 Ack=2312840125 Win=64240 Len=0

Login a Third Time:
44 39.644191 <SERVER> <CLIENT> FTP
Response: 220 <ftp.isp.net>
45 39.644325 <CLIENT> <SERVER> FTP Request:
USER <USER ID>
46 39.760158 <SERVER> <CLIENT> TCP 21 >
2896 [ACK] Seq=2312840152 Ack=3405431626 Win=5840 Len=0

Correct Password Sent:
47 39.763321 <SERVER> <CLIENT> FTP
Response: 331 Password required for <USER ID>.
48 39.763410 <CLIENT> <SERVER> FTP Request:
PASS <PASSWORD>
49 39.914153 <SERVER> <CLIENT> TCP 21 >
2896 [ACK] Seq=2312840189 Ack=3405431640 Win=5840 Len=0
50 39.917294 <SERVER> <CLIENT> FTP
Response: 230-User <USER ID> logged in.

51 39.922254 <SERVER> <CLIENT> FTP
Response: 230 Quota: avail(78.0%)=7360358.0 used(22.0%)=2076826.0
limit=9437184.0 bytes
52 39.922293 <CLIENT> <SERVER> TCP 2896 >
21 [ACK] Seq=3405431640 Ack=2312840298 Win=64067 Len=0
53 39.922468 <CLIENT> <SERVER> FTP Request:
opts utf8 on
54 40.041446 <SERVER> <CLIENT> TCP 21 >
2896 [ACK] Seq=2312840298 Ack=3405431654 Win=5840 Len=0

55 40.044604 <SERVER> <CLIENT> FTP
Response: 501 OPTS: utf8 not understood
56 40.044736 <CLIENT> <SERVER> FTP Request:
syst
57 40.159281 <SERVER> <CLIENT> FTP
Response: 215 UNIX Type: L8
58 40.159516 <CLIENT> <SERVER> FTP Request:
site help
59 40.275212 <SERVER> <CLIENT> FTP
Response: 214-The following SITE commands are recognized (* =>'s
unimplemented).
60 40.278478 <SERVER> <CLIENT> FTP
Response: HELP
61 40.278519 <CLIENT> <SERVER> TCP 2896 >
21 [ACK] Seq=3405431671 Ack=2312840427 Win=63938 Len=0
62 40.281733 <SERVER> <CLIENT> FTP
Response: CHGRP
63 40.396062 <SERVER> <CLIENT> FTP
Response: CHMOD
64 40.396107 <CLIENT> <SERVER> TCP 2896 >
21 [ACK] Seq=3405431671 Ack=2312840496 Win=63869 Len=0
65 40.396309 <CLIENT> <SERVER> FTP Request:
PWD
66 40.513622 <SERVER> <CLIENT> FTP
Response: 257 "/" is current directory.
67 40.517216 <CLIENT> <SERVER> FTP Request:
TYPE A
68 40.631340 <SERVER> <CLIENT> FTP
Response: 200 Type set to A
69 40.633594 <CLIENT> <SERVER> FTP Request:
PORT 192,168,n,n,11,81
70 40.750654 <SERVER> <CLIENT> FTP
Response: 200 PORT command successful

71 40.750782 <CLIENT> <SERVER> FTP Request:
LIST
72 40.866424 <SERVER> <CLIENT> TCP 20 >
2897 [SYN] Seq=2313170694 Ack=0 Win=5840 Len=0 MSS=1460 TSV=1124007918
TSER=0 WS=0
73 40.866506 <CLIENT> <SERVER> TCP 2897 >
20 [SYN, ACK] Seq=1487317394 Ack=2313170695 Win=64240 Len=0 MSS=1460
WS=0 TSV=0 TSER=0
74 40.904518 <SERVER> <CLIENT> TCP 21 >
2896 [ACK] Seq=2312840575 Ack=3405431716 Win=5840 Len=0
75 40.982146 <SERVER> <CLIENT> TCP 20 >
2897 [ACK] Seq=2313170695 Ack=1487317395 Win=5840 Len=0 TSV=1124007929
TSER=0
76 40.987312 <SERVER> <CLIENT> FTP
Response: 150 Opening ASCII mode data connection for file list
77 40.998661 <SERVER> <CLIENT> FTP-DATA [TCP
Previous segment lost] FTP Data: 144 bytes
78 40.998690 <CLIENT> <SERVER> TCP [TCP Dup
ACK 73#1] 2897 > 20 [ACK] Seq=1487317395 Ack=2313170695 Win=64240
Len=0 TSV=486190 TSER=1124007929 SLE=2313171715 SRE=2313171860
79 41.037415 <SERVER> <CLIENT> FTP-DATA [TCP
Retransmission] FTP Data: 1020 bytes
80 41.037461 <CLIENT> <SERVER> TCP 2897 >
20 [ACK] Seq=1487317395 Ack=2313171860 Win=63076 Len=0 TSV=486191
TSER=1124007930
81 41.037577 <CLIENT> <SERVER> TCP 2897 >
20 [FIN, ACK] Seq=1487317395 Ack=2313171860 Win=63076 Len=0 TSV=486191
TSER=1124007930
82 41.111132 <CLIENT> <SERVER> TCP 2896 >
21 [ACK] Seq=3405431716 Ack=2312840629 Win=63736 Len=0
83 41.156302 <SERVER> <CLIENT> TCP 20 >
2897 [ACK] Seq=2313171860 Ack=1487317396 Win=5840 Len=0 TSV=1124007947
TSER=486191
84 41.159510 <SERVER> <CLIENT> FTP
Response: 226-Transfer complete.
85 41.227596 <SERVER> <CLIENT> FTP
Response: 226 Quota: avail(78.0%)=7360358.0 used(22.0%)=2076826.0
limit=9437184.0 bytes
86 41.227632 <CLIENT> <SERVER> TCP 2896 >
21 [ACK] Seq=3405431716 Ack=2312840732 Win=63633 Len=0

Disconnect:
87 52.305478 <CLIENT> <SERVER> TCP 2896 >
21 [FIN, ACK] Seq=3405431716 Ack=2312840732 Win=63633 Len=0
88 52.422028 <SERVER> <CLIENT> TCP 21 >
2896 [FIN, ACK] Seq=2312840732 Ack=3405431717 Win=5840 Len=0
89 52.422079 <CLIENT> <SERVER> TCP 2896 >
21 [ACK] Seq=3405431717 Ack=2312840733 Win=63633 Len=0


"Bernard Cheah [MVP]" <qbernard@xxxxxxxxxxxxxxxxxxx> wrote in message
news:Ors%231vRuGHA.1888@xxxxxxxxxxxxxxxxxxxxxxx
How do you know that IE is sending blank password?
If I remembered correctly, IE will login as anonymous first, then
prompt
if that's not successful.
and this is client behavior......

--
Regards,
Bernard Cheah
http://www.iis.net/
http://www.iis-resources.com/
http://msmvps.com/blogs/bernard/


"Allen" <NOYB@xxxxxxxx> wrote in message
news:OzKwe7KuGHA.4336@xxxxxxxxxxxxxxxxxxxxxxx
For FTP to my ISP (Verizon) provided web space I use Windows Explorer
(used to be affectionately referred to as file mangler (file
manager)).
It works fine except for one little quirk. When establishing a
connection
it first attempts to login with my correct user name but a blank
password.
Due to this the first login attempt obviously fails, and there is
about 15
to 30 second delay. Then on the second login attempt it adds the
password
and successfully logs in.

It's annoying having to wait that extra 15 to 30 seconds to establish
a
connection.

Why does Windows Explorer first attempt with a blank password, and
how can
I get it to provide the correct password on the first attempt.

TIA














.

Relevant Pages

  • Re: Help trying to login to myspace programatically in vb.net
    ... 'Dim myspacecookies As New Net.CookieContainer ... you should get the login page from a config file. ... Dim response As System.Net.WebResponse = Nothing ... ' You need to capture the cookies at this point and use ...
    (microsoft.public.dotnet.general)
  • AIX password enumeration possible
    ... BPR personnel can neither confirm or deny this behaviour exists in any OS other than AIX of versions mentioned below. ... In the case that the correct password is provided, the response is as follows: ... believed to be in the response from the login program after authentication ... Give accounts that have been restricted from remote logins strong passwords. ...
    (Bugtraq)
  • Re: sendmail with smtp relay authentication
    ... LOGIN PLAIN')dnl ... the mail log and also attached the auto mail response I got. ... m31N0w2T002913: return to sender: User unknown ... 505 5.0.0 Message is sent with SSL but SSL is not allowed ...
    (comp.mail.sendmail)
  • Re: Multiple logins on same ID
    ... The usage model is that kids don't regularly use the computers. ... Hence I can't manage one login per student. ... terminals, other than dynamically generating gdm.conf on system ... And, before I forget, thanks a ton for the response. ...
    (Fedora)
  • Re: WE/IE FTP
    ... Other that it works great for ftp ... twice with blank password then with correct password the third attempt. ... Also there are no attempts to login as 'anonymous'. ... 215 UNIX Type: L8 ...
    (microsoft.public.inetserver.iis.ftp)