FTP administration question

sarlen · Post by **sarlen** » March 14, 2007, 12:16 pm

I have an FTP server at work with over a hundred users/shares. Up to this point it’s always been very straightforward, the user name matches the share name and when they log in all they can see is their folder. Now I have been asked to make a single share for multiple users and they don’t want them to be able to see any of the other folders. This sounds perfectly simple and easy but for some reason it doesn’t work that way, anyone have any idea what I’m missing here?

Zaelath · Post by **Zaelath** » March 14, 2007, 12:30 pm

Yeah, you're missing what FTP server it is...

sarlen · Post by **sarlen** » March 14, 2007, 12:32 pm

gahh! sorry, IIS6 on 03 server

Animalor · Post by **Animalor** » March 14, 2007, 12:55 pm

Do you want to do this in conjunction with the individual storage space or is that getting ripped out for this common location setup?

sarlen · Post by **sarlen** » March 14, 2007, 1:01 pm

Animalor wrote:Do you want to do this in conjunction with the individual storage space or is that getting ripped out for this common location setup?

These accounts wouldn't have individual space, just the shared area.

Deward · Post by **Deward** » March 14, 2007, 1:39 pm

Should be able to setup a general folder and just apply the proper permissions for the users.

sarlen · Post by **sarlen** » March 14, 2007, 2:03 pm

Deward wrote:Should be able to setup a general folder and just apply the proper permissions for the users.

You would think so, when you do it that way it will still list all the other FTP folders which is what im trying to avoid.

Boogahz · Post by **Boogahz** » March 14, 2007, 2:11 pm

sarlen wrote:
Deward wrote:Should be able to setup a general folder and just apply the proper permissions for the users.
You would think so, when you do it that way it will still list all the other FTP folders which is what im trying to avoid.

Ah, I see. I can see all of the available folders on drives I have access to, but I cannot get into any that I do not have permission for.

sarlen · Post by **sarlen** » March 14, 2007, 2:17 pm

Boogahz wrote:
sarlen wrote:
Deward wrote:Should be able to setup a general folder and just apply the proper permissions for the users.
You would think so, when you do it that way it will still list all the other FTP folders which is what im trying to avoid.
Ah, I see. I can see all of the available folders on drives I have access to, but I cannot get into any that I do not have permission for.

Right, they cant get into them but the boss wants them to not even show and so far I dont see that its even possible.

Animalor · Post by **Animalor** » March 14, 2007, 2:35 pm

If it just needs to be a space to drop stuff in, then I would recommend just having anonymous access and just giving write access to the anon account to the home folder.

This way people can upload but can't even get a listing or see the contents of the folder.

http://www.windowsnetworking.com/articl ... g-FTP.html

Here's an article on IIS6 FTP. Looks like you just want to do away with user isolation altogether. If the FTP server is using the user's home folder property for the FTP server, then the anonymous access (or setting up an FTP account with it's own home as shared space) might be your only recourse.

Sabek · Post by **Sabek** » March 14, 2007, 3:53 pm

Run FTP on a server that actually has a little bit of Security rather than M$.

Neost · Post by **Neost** » March 14, 2007, 6:58 pm

There is no such thing as a secure ftp server.

Fash · Post by **Fash** » March 14, 2007, 8:07 pm

in just about every ftp server software, you're able to set the 'home folder' or 'chroot' of the users. you set it to that shared folder and problem solved.