I am having the same problem.
Virtual Paths seem to work with normal Core FTP server accounts, but when I try to use Active Directory accounts, I get an "Access Denied" message.
Anyone get this to work?
Virtual Path permissions
AD Users and Virtual Directories
Thanks for the quick response, but still not having any luck.
Here is what I did:
- Created a site and set Base Directory to: F:\FTP Root\ADUsers
- Created a Virtual Path called: Testsite
Physical Path: F:\IIS Root\Websites\Testsite
Mapped To: F:\FTP Root\ADUsers\ADTestUser
- Checked the following:
Enable AD Users
Use Base Dir + Username
- Typed in the domain in the Use Windows Domain field
- Created a CoreFTP user named: CoreUser
- Set the Home Directory to: F:\FTP Root\ADUsers
- Gave CoreUser Full CoreFTP Permissions to: F:\FTP Root\ADUsers
- Gave CoreUser Full CoreFTP Permissions to: F:\IIS Root\Websites\Testsite
- In the Users Settings to Use field, I added: CoreUser
- Gave the AD user ADTestUser Full AD Permissions to: F:\FTP Root\ADUsers\ADTestUser and F:\IIS Root\Websites\Testsite
When I connect, via SFTP, using the ADTestUser account, I can login fine.
I can also write to: F:\FTP Root\ADUsers\ADTestUser
I can see: F:\FTP Root\ADUsers\ADTestUser\Testsite, but when I try to enter that virtual folder, I get a "permission denied" message.
Any ideas?[/list]
Here is what I did:
- Created a site and set Base Directory to: F:\FTP Root\ADUsers
- Created a Virtual Path called: Testsite
Physical Path: F:\IIS Root\Websites\Testsite
Mapped To: F:\FTP Root\ADUsers\ADTestUser
- Checked the following:
Enable AD Users
Use Base Dir + Username
- Typed in the domain in the Use Windows Domain field
- Created a CoreFTP user named: CoreUser
- Set the Home Directory to: F:\FTP Root\ADUsers
- Gave CoreUser Full CoreFTP Permissions to: F:\FTP Root\ADUsers
- Gave CoreUser Full CoreFTP Permissions to: F:\IIS Root\Websites\Testsite
- In the Users Settings to Use field, I added: CoreUser
- Gave the AD user ADTestUser Full AD Permissions to: F:\FTP Root\ADUsers\ADTestUser and F:\IIS Root\Websites\Testsite
When I connect, via SFTP, using the ADTestUser account, I can login fine.
I can also write to: F:\FTP Root\ADUsers\ADTestUser
I can see: F:\FTP Root\ADUsers\ADTestUser\Testsite, but when I try to enter that virtual folder, I get a "permission denied" message.
Any ideas?[/list]
AD and Virtual Directories
Well, if it worked for you, maybe there's hope for me.
I double-checked my AD/WinNT permissions on F:\IIS Root\Websites\Testsite and they are definitely set correctly for the ADTestUser account.
I even added CoreFTP permissions to F:\IIS Root\Websites\Testsite via the CoreUser account and that did not help either.
I did some more experimenting, and noticed another strange thing.
If I set the Domain Base directory to something like: F:\FTP Root\empty
I would think that when I SFTP'd in, I would still be put in the F:\FTP Root\ADUsers, since that is the Home Directory of CoreUser. But I don't. I get dropped into the F:\FTP Root\empty directory.
Not sure if that's a clue to what's going on, or if that just confuses things more.
I can send you screen shots, if you think that will help.
Thanks for any other info you can provide.
I double-checked my AD/WinNT permissions on F:\IIS Root\Websites\Testsite and they are definitely set correctly for the ADTestUser account.
I even added CoreFTP permissions to F:\IIS Root\Websites\Testsite via the CoreUser account and that did not help either.
I did some more experimenting, and noticed another strange thing.
If I set the Domain Base directory to something like: F:\FTP Root\empty
I would think that when I SFTP'd in, I would still be put in the F:\FTP Root\ADUsers, since that is the Home Directory of CoreUser. But I don't. I get dropped into the F:\FTP Root\empty directory.
Not sure if that's a clue to what's going on, or if that just confuses things more.
I can send you screen shots, if you think that will help.
Thanks for any other info you can provide.