Shulou(Shulou.com)06/03 Report--

Experimental environment: an original clean virtual machine with an ip address of 172.20.53.1. And install web server and ftp server for this virtual machine beforehand.

Purpose of the experiment: by isolating users, users can have their own dedicated directory. At this time, users will be directed to this exclusive directory after logging in to the FTP site, and can be limited to their own dedicated directory, so they can only view or modify the files in their own exclusive directory. For anonymous users, you can set up a public directory, and if you log in as an anonymous user, you will see the same public content.

The steps of the experiment:

First at the beginning-- > Administrative tools-- > Open the Internet Information Services (IIS) Manager, and then start creating a FTP site. By default, there is only one Web site in the IIS Manager. Create a new FTP site below, and click the add FTP site option in the actions panel on the right. Start the add FTP site wizard and write the name and path of the site.

Specify the IP address and port number of the site, and set SSL to none because you do not have a SSL certificate, as shown in the figure:

Check the Anonymous check box in authentication to enable anonymous authentication and authorize all users to read and write. Click the finish button to complete the site creation.

4. After FTP, start creating users, open the control panel at the beginning, and click add or remove users. Create only one zhangsan user here and set the password for it.

After the user has been created, open the FTP server and click FTP authentication to ensure that the basic identity and anonymous identity are enabled.

6. Open the Authorization rules to set read and write permissions for both zhangsan and anonymous accounts.

7. Right-click the FTP site, select Edit permissions, and the user sets the appropriate NTFS permissions.

8. Open the FTP user isolation window, the system defaults to not isolating users, and all users are automatically directed to the FTP root directory. To enable user isolation, select the username directory below (disable the global virtual directory), and then click the apply option on the right.

9. Then you need to set up your own directory for users who have permission to log in to FTP. The user's dedicated directory must be a subdirectory under the home directory of the FTP site, either a physical directory or a virtual directory.

Depending on the type of user, there are the following types of exclusive directories:

(1) localuser\ user name: the localuser folder is a folder dedicated to the local user, and the user name is the local user name. You need to create a new dedicated subfolder under the localuser folder for each local user who needs to log in to the FTP site, with the same file name as the user name.

(2) localuser\ public: when users log in anonymously, they are directed to the public folder.

(3) Domain name\ user name: if you use the domain user account to log in to the FTP site, you first need to create a dedicated folder for the domain, with the same folder name as the NetBIOS domain name; then, under this folder, create a dedicated subfolder for each domain 2 user who needs to log in to the FTP site, with the same folder name as the user name.

10. First create a localuser folder under C:\ inetpub\ ftproot, where the localuser folder is a local user-specific folder, then create a folder called zhangsan for the local user zhangsan under the localuser folder, and a folder named public for anonymous accounts.

11. To facilitate testing later, 1.txt and 2.txt are created in the Public folder and in the zhangsan folder, respectively.

twelve。 Start the test. First, log in to zhangsan and find that you can only see 2.txt.

13. Then enter the anonymous account and find that there is only 1.txt.

13. After testing, it was found that they were directed to different dedicated folders, and FTP users were isolated successfully.

The problem encountered in the experiment: when it is found that when changing users, anonymous users can not be quarantined, but still enter the zhangsan folder.

The reason is that the anonymous user import failed because the public was mistakenly written as publish.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.