Re: Viewing ftproot
- From: "Bernard Cheah [MVP]" <qbernard@xxxxxxxxxxxxxxxxxxx>
- Date: Thu, 27 Mar 2008 12:26:31 +0800
The issue is with IE7 not Vista. Have you try Windows Explorer it will
redirect to user folder.
Anyway for IIS 5, even user got redirected to the home path, they still able
to do a 'cd ..' and navigate
to the root path.
So the trick here you can do is
a) map ftproot to a dummy path. say f:\ftpdummy
b) create vdir of the same user name and point it to the actual content
path, say e:\ftpclient\bob\
c) make sure you control NTFS permissions on ftpclient path. so that even if
bob know susan folder 'cd susan', bob will not be able to access the folder.
--
Regards,
Bernard Cheah
http://www.iis.net/
http://msmvps.com/blogs/bernard/
"StevieD" <StevieD@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:BBFAF676-3D1E-40F4-B235-BA79AA93E4AA@xxxxxxxxxxxxxxxx
Our Setup: IIS 5.0 FTP site is pointing to the home directory of
inetpub\ftproot. Within here, we have separate folders setup for each
customer. The permissions on these folders are restricted to
administrators
and the local user account (customer account), which has read access. So
when user Bob logs into the FTP site, they are directed to their folder
called Bob.
Now, we have an issue with permissions, where authenticated users using
Vista & IE, are defaulted to the full directory listing of the ftproot
folder. This enables any potential customer with a user\pass to view our
customer base. Using Windows and going through Internet Explorer to
access
the FTP site (rather than FTP client software or UNIX for example), it
seems
being defaulted to the root of the directory is only possible with Vista
(not
XP). Once logged in using Vista, it defaults to the ftproot directory
(where
you can view all folders), instead of going straight to the particular
folder
for the customer. Why is this?
I?ve tried changing the ?Apply onto? setting to Subfolders only &
Subfolders
and files only, but this then doesn?t allow the user to login, as they don?t
have read permissions to ftproot where their folder is located. I?ve even
tried removing some of the explicit permissions like ?List Folder? etc,
but
unless the permissions are set as shown, any user account cannot login.
How else could I set this up, to allow users to login, but to prevent the
full directory listing of ftproot being shown when using Vista? I will
test
to see if viewing the full directory listing is possible using an FTP
client
like SmartFTP or CuteFTP.
.
- Prev by Date: Re: Command to turn off ftp service at specific time
- Next by Date: Re: free ftp software with scheduler
- Previous by thread: Command to turn off ftp service at specific time
- Index(es):
Relevant Pages
|
Loading
