Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

FTP website in IIS with anonymous authentication requires username and password

I have a FTP website in IIS 8 that I want to expose to public (non-authenticated visitors) that is configured using the following settings from here:

  • No SSL
  • Authentication: Anonymous (Basic authentication is disabled)
  • Allow access to: Anonymous Users
  • Read permission selected

Whenever I try to connect to the website externally using the ftp://mysite.com address, I am always prompted with a dialog that says:

Authentication Required - The server ftp://mysite.com:21 requires a username and password

I've tried every credentials (even for the users that have read permissions to folder that the website is pointing to) and still nothing. Basic Authentication is disabled for the website.

How can I configure the FTP site in order to allow external read access for any visitor?

PS: it is okay even with a solution that implies Basic Authentication in place since I can provide the users with an account on the server for my purposes, but even with Basic Authentication enabled and providing the correct credentials, it failed to authenticate.

Regards, Ionut

like image 896
Tamas Ionut Avatar asked Jul 30 '14 22:07

Tamas Ionut


People also ask

What is the password for anonymous FTP login?

Anonymous users will typically log in by using a user name of ftp or anonymous, and most users will use their e-mail address as a password, although this is not required.

How do I enable FTP anonymous login?

In the Connections pane, expand the server name, expand the Sites node, and then click the name of the site. In the site's Home pane, double-click the FTP Authentication feature. On the FTP Authentication page, select Anonymous Authentication.

Does FTP require user authentication?

Note: Due to the design of File Transfer Protocol (FTP), user names and passwords are transmitted over FTP in plain text, making them vulnerable to network discovery. It is therefore recommended that you use Basic authentication with SSL.


1 Answers

Four things to check:

  1. FTP Authentication->Anonymous Authentication->Enable, then edit, User:IUSR Pass:<blank>
  2. FTP Authorization Rules->All Anonymous Users->Read
  3. FTP User Isolation->Do not isolate. Start in: FTP root directory

  4. Add the "IUSR" account to the root directory NTFS Security Permissions with Read, Read and Execute, and List Folder Contents.

like image 179
Shogan Aversa-Druesne Avatar answered Sep 18 '22 05:09

Shogan Aversa-Druesne