Network Security Internet Technology Development Database Servers Mobile Phone Android Software Apple Software Computer Software News IT Information

In addition to Weibo, there is also WeChat

Please pay attention

WeChat public account

Shulou

Set different permissions to different users on the FTP server to achieve different functions

2025-01-18 Update From: SLTechnology News&Howtos shulou NAV: SLTechnology News&Howtos > Servers >

Share

Shulou(Shulou.com)06/02 Report--

Experimental environment: an original clean virtual machine with an ip address of 172.20.53.1.

And install web server and ftp server for this virtual machine beforehand.

Purpose: to enable zhangsan to upload and download, lisi can only upload, anonymous users can only download

The steps of the experiment:

First create a FTP site. By default, there is only one Web site in IIS Manager. Create a new FTP site below, and click the add FTP site option in the actions panel on the right. Start the add FTP site wizard.

Give the site a name and specify the home directory of the FTP site. The default home directory of FTP is: C:\ inetpub\ ftproot. Click next.

3. Specify the IP address and port number of the site, and set SSL to "none" because you do not have a SSL certificate, as shown in the figure

Check the Anonymous check box in authentication to enable anonymous authentication and basic authentication while authorizing all users to have read and write permissions. Click the finish button to complete the site creation.

5. After creating the FTP, start creating users, open the control panel at the beginning, and click add or remove users.

6. Create a new user, creating lisi and zhangsan, respectively.

7. Create passwords for each user after the account is created separately.

After the user has been created, open the FTP server and click FTP Authentication.

Make sure that basic Authentication and Anonymous Authentication are enabled.

Go to the FTP server to set the appropriate permissions and open the FTP authorization rules.

10. Right-click in the space and select "add allow Rule". First, add a rule for the user zhangsan, select the specified user, have read and write permissions, and click OK.

11. Then add a rule for lisi, select the specified user, and the permission is write.

twelve。 Add rules for anonymous accounts, allowing only reads.

13. Set NTFS permissions on the site directory, assign modification permissions to the user, right-click the FTP site, select "Edit permissions", select the Security tab, and then click Edit.

Click add.

15. Write zhangsan in the input object name, and then click OK

16. Set the permissions for the user zhangsan, as shown in the following figure.

To set the permissions for the lisi user, click apply.

18. Set the permission of anonymous account, do not allow modification, click apply.

19. Next, to test whether the experiment is successful, open the explorer and type ftp://172.20.53.1

20. Switch to zhangsan user login. Right-click in the space and select login

Enter your user name and password, and then click Log in.

Enter the zhangsan user, and then first copy the prepared 21.txt to the server, and find that the copy is successful, indicating that the upload can be achieved.

Then copy the 3.txt to the outside and find that it can also be copied successfully, indicating that it can be downloaded.

Switch to the lisi user and click Log in.

25. Log in to the Lisi user to copy the 21.txt to the server and find that the replication is successful, which means that the lisi user can upload to the server, and the lisi user can upload the copy successfully.

Then test to see if lisi can put the 21.txt, delete and find that it cannot, and then try to copy the 21.txt out and find that it cannot be downloaded.

twenty-seven。 Log in anonymously.

Copy the prepared 5.txt to the server and find that it cannot be realized, indicating that it cannot be uploaded.

twenty-nine。 If you copy out the 3.txt on the server and find it successful, it means you can download it, and then try to delete it, but you can't delete it, indicating that anonymous users can only download this requirement.

The above phenomena show that the experiment is successful.

The error occurred when the FTP server cannot upload:

(1) check the root directory of the FTP server for errors.

(2) the security attribute of the folder is to enable read and write permissions for anonymous users.

(3) delete the folder and create a new one

When doing the experiment, we encountered that the configuration of the zhangsan user was complete, but the download could not be realized.

Reason: it is caused by a problem with the security settings of IE.

Solution:

1. Locate the internet option in the tool.

two。 Select Security

3. Find the download option in the custom level, modify the download to enable, apply and exit.

In this way, it was successfully solved.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.

Views: 0

*The comments in the above article only represent the author's personal views and do not represent the views and positions of this website. If you have more insights, please feel free to contribute and share.

Share To

Servers

Wechat

© 2024 shulou.com SLNews company. All rights reserved.

12
Report