Re: log on locally FTP??? What is this?

From: Scott Lowe (me_at_privacy.net)
Date: 10/19/04 

Date: Tue, 19 Oct 2004 15:37:52 -0400

On 2004-10-18 15:49:44 -0400, "Brad Wilson"
<nctarheelfan@nospam.hotmail.com> said:

> times. I have tried different FTP clients. I did find one article
> that says something about log on locally but one of the accounts that I
> am testing with is the domain admin and also in the administrators
> group. I can see in the logs that an account login was attempted but
> denied. I have set the router up to open the DMZ and proved that it is
> not a firewall issue.
>

You are probably already aware of this, but FTP passes credentials in
clear text. Attempting to login via FTP across the Internet with the
domain admin credentials means you just passed your domain admin
username and password in clear text for anyone on the wire to see.

I know this doesn't answer your question, but I just wanted to mention
the potential problems of using administrative privileges when testing
FTP from the outside.

With regards to making this work, most of the other posters in this
thread have covered all the bases--NTFS (file system) permissions, IIS
permissions, logon credentials (using DOMAIN\username instead of just
username). You might also check to ensure that you haven't
inadvertently added some IP address restrictions (i.e., only allow
access from specific IP address ranges). The behavior doesn't match
that, but it doesn't hurt to check.

HTH. 

-- 
Scott Lowe

Relevant Pages

  • Re: cached login credentials
    ... large this residual risk is, because I can avoid it all together ... as it causes cached credentials to be stored as well. ... Remember that a "rainbow table attack" against a cached domain ... domain admin account credentials), is a credential cached anywhere for the ...
    (microsoft.public.windowsxp.security_admin)
  • Re: cached login credentials
    ... it takes longer to investigate an attack and clean up after it than ... in my network (egads! ... credentials, and uses runas to do priviledged operations (assume they ... domain admin account credentials), is a credential cached anywhere for ...
    (microsoft.public.windowsxp.security_admin)
  • Re: cached login credentials
    ... Anything that does an interactive logon will store cached credentials, so yes, the GUI RunAs will do this. ... They're effective in pass-the-hash attacks, and this is why I've become an ardent fan of long simple passphrases rather than short complex passwords. ... domain admin account credentials), is a credential cached anywhere for the ... password cracking attacks from your list of worries, ...
    (microsoft.public.windowsxp.security_admin)
  • Re: cached login credentials
    ... Remember that a "rainbow table attack" against a cached domain ... then over time through precision monitoring of network ... Anything that does an interactive logon will store cached credentials, ... domain admin account credentials), is a credential cached anywhere for the ...
    (microsoft.public.windowsxp.security_admin)
  • Re: cached login credentials
    ... Remember that a "rainbow table attack" against a cached domain ... then over time through precision monitoring of network ... Anything that does an interactive logon will store cached credentials, ... domain admin account credentials), is a credential cached anywhere for the ...
    (microsoft.public.windowsxp.security_admin)
Loading