RE: [ActiveDir] ftp access
The server virus app is up to date and I just ran a scan and there are no infected files. Other then this issue the server seems to be work great. Once people change there password there is no issue. Antonio _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Al Mulnick Sent: Tuesday, January 23, 2007 8:21 PM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] ftp access I do. That sounds a lot like a bug to me. What version of IIS? On 1/23/07, Antonio Aranda [EMAIL PROTECTED] wrote: If you mean the command-line, yes. _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Al Mulnick Sent: Tuesday, January 23, 2007 2:56 PM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] ftp access do you get same results in Microsoft's client? On 1/23/07, Antonio Aranda [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] wrote: I'm using IIS and I used ie and smartftp to test. I attached the log that shows when it was working and when it stopped working and then when it started working right after the user changed the password. It seems to stop working not when their password expires but when they start getting the warning that their password is going to expire. It's happened to three different users and the fix has been the same. There is no anonymous access to anything. Thanks for your help Antonio _ From: [EMAIL PROTECTED] [mailto: mailto:[EMAIL PROTECTED] [EMAIL PROTECTED] On Behalf Of Al Mulnick Sent: Monday, January 22, 2007 7:40 PM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] ftp access Can you provide some more details? What are they using to access their shares? (client?) What are you using to provide ftp access? (IIS?) How did you prove that this is the case? Log files? Trial and error? Anything else that's relevant? Al On 1/22/07, Antonio Aranda [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] wrote: I've setup ftp access to users' network drives so they have access to them remotely. I recently notice some thing very peculiar. Their ftp access stops working when they start getting warnings that their password is going to expire. I don't know if this just a coincidence but once they change their password it starts working again. If any one knows anything about this, I would appreciate any advice. Antonio Aranda Network Analyst UT-Permian Basin 432-552-2413
Re: [ActiveDir] ftp access
When I say it sounds like a bug, I'm not thinking it's a virus type of bug. More of a software bug. That's why I asked what version of IIS it is; it's possible that there's a known issue and a fix available. On 1/24/07, Antonio Aranda [EMAIL PROTECTED] wrote: The server virus app is up to date and I just ran a scan and there are no infected files. Other then this issue the server seems to be work great. Once people change there password there is no issue. Antonio -- *From:* [EMAIL PROTECTED] [mailto: [EMAIL PROTECTED] *On Behalf Of *Al Mulnick *Sent:* Tuesday, January 23, 2007 8:21 PM *To:* ActiveDir@mail.activedir.org *Subject:* Re: [ActiveDir] ftp access I do. That sounds a lot like a bug to me. What version of IIS? On 1/23/07, *Antonio Aranda* [EMAIL PROTECTED] wrote: If you mean the command-line, yes. -- *From:* [EMAIL PROTECTED] [mailto: [EMAIL PROTECTED] *On Behalf Of *Al Mulnick *Sent:* Tuesday, January 23, 2007 2:56 PM *To:* ActiveDir@mail.activedir.org *Subject:* Re: [ActiveDir] ftp access do you get same results in Microsoft's client? On 1/23/07, *Antonio Aranda* [EMAIL PROTECTED] wrote: I'm using IIS and I used ie and smartftp to test. I attached the log that shows when it was working and when it stopped working and then when it started working right after the user changed the password. It seems to stop working not when their password expires but when they start getting the warning that their password is going to expire. It's happened to three different users and the fix has been the same. There is no anonymous access to anything. Thanks for your help Antonio -- *From:* [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] *On Behalf Of *Al Mulnick *Sent:* Monday, January 22, 2007 7:40 PM *To:* ActiveDir@mail.activedir.org *Subject:* Re: [ActiveDir] ftp access Can you provide some more details? What are they using to access their shares? (client?) What are you using to provide ftp access? (IIS?) How did you prove that this is the case? Log files? Trial and error? Anything else that's relevant? Al On 1/22/07, *Antonio Aranda* [EMAIL PROTECTED] wrote: I've setup ftp access to users' network drives so they have access to them remotely. I recently notice some thing very peculiar. Their ftp access stops working when they start getting warnings that their password is going to expire. I don't know if this just a coincidence but once they change their password it starts working again. If any one knows anything about this, I would appreciate any advice. Antonio Aranda Network Analyst UT-Permian Basin 432-552-2413
RE: [ActiveDir] ftp access
It users IIS 6 on windows 2003 and it has all patches. _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Al Mulnick Sent: Wednesday, January 24, 2007 1:16 PM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] ftp access When I say it sounds like a bug, I'm not thinking it's a virus type of bug. More of a software bug. That's why I asked what version of IIS it is; it's possible that there's a known issue and a fix available. On 1/24/07, Antonio Aranda [EMAIL PROTECTED] wrote: The server virus app is up to date and I just ran a scan and there are no infected files. Other then this issue the server seems to be work great. Once people change there password there is no issue. Antonio _ From: [EMAIL PROTECTED] [mailto: mailto:[EMAIL PROTECTED] [EMAIL PROTECTED] On Behalf Of Al Mulnick Sent: Tuesday, January 23, 2007 8:21 PM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] ftp access I do. That sounds a lot like a bug to me. What version of IIS? On 1/23/07, Antonio Aranda [EMAIL PROTECTED] wrote: If you mean the command-line, yes. _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Al Mulnick Sent: Tuesday, January 23, 2007 2:56 PM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] ftp access do you get same results in Microsoft's client? On 1/23/07, Antonio Aranda [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] wrote: I'm using IIS and I used ie and smartftp to test. I attached the log that shows when it was working and when it stopped working and then when it started working right after the user changed the password. It seems to stop working not when their password expires but when they start getting the warning that their password is going to expire. It's happened to three different users and the fix has been the same. There is no anonymous access to anything. Thanks for your help Antonio _ From: [EMAIL PROTECTED] [mailto: mailto:[EMAIL PROTECTED] [EMAIL PROTECTED] On Behalf Of Al Mulnick Sent: Monday, January 22, 2007 7:40 PM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] ftp access Can you provide some more details? What are they using to access their shares? (client?) What are you using to provide ftp access? (IIS?) How did you prove that this is the case? Log files? Trial and error? Anything else that's relevant? Al On 1/22/07, Antonio Aranda [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] wrote: I've setup ftp access to users' network drives so they have access to them remotely. I recently notice some thing very peculiar. Their ftp access stops working when they start getting warnings that their password is going to expire. I don't know if this just a coincidence but once they change their password it starts working again. If any one knows anything about this, I would appreciate any advice. Antonio Aranda Network Analyst UT-Permian Basin 432-552-2413
Re: [ActiveDir] ftp access
Then I suggest a call to Microsoft support to find out about that behavior. That behavior rings a bell in my way distant memory, but I don't recall what the resolution was for that, if any. But that behavior is not what I would expect from the FTP server. Especially since it's a Microsoft product using Microsoft security (AD). Al On 1/24/07, Antonio Aranda [EMAIL PROTECTED] wrote: It users IIS 6 on windows 2003 and it has all patches. -- *From:* [EMAIL PROTECTED] [mailto: [EMAIL PROTECTED] *On Behalf Of *Al Mulnick *Sent:* Wednesday, January 24, 2007 1:16 PM *To:* ActiveDir@mail.activedir.org *Subject:* Re: [ActiveDir] ftp access When I say it sounds like a bug, I'm not thinking it's a virus type of bug. More of a software bug. That's why I asked what version of IIS it is; it's possible that there's a known issue and a fix available. On 1/24/07, *Antonio Aranda* [EMAIL PROTECTED] wrote: The server virus app is up to date and I just ran a scan and there are no infected files. Other then this issue the server seems to be work great. Once people change there password there is no issue. Antonio -- *From:* [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] *On Behalf Of *Al Mulnick *Sent:* Tuesday, January 23, 2007 8:21 PM *To:* ActiveDir@mail.activedir.org *Subject:* Re: [ActiveDir] ftp access I do. That sounds a lot like a bug to me. What version of IIS? On 1/23/07, *Antonio Aranda* [EMAIL PROTECTED] wrote: If you mean the command-line, yes. -- *From:* [EMAIL PROTECTED] [mailto: [EMAIL PROTECTED] *On Behalf Of *Al Mulnick *Sent:* Tuesday, January 23, 2007 2:56 PM *To:* ActiveDir@mail.activedir.org *Subject:* Re: [ActiveDir] ftp access do you get same results in Microsoft's client? On 1/23/07, *Antonio Aranda* [EMAIL PROTECTED] wrote: I'm using IIS and I used ie and smartftp to test. I attached the log that shows when it was working and when it stopped working and then when it started working right after the user changed the password. It seems to stop working not when their password expires but when they start getting the warning that their password is going to expire. It's happened to three different users and the fix has been the same. There is no anonymous access to anything. Thanks for your help Antonio -- *From:* [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] *On Behalf Of *Al Mulnick *Sent:* Monday, January 22, 2007 7:40 PM *To:* ActiveDir@mail.activedir.org *Subject:* Re: [ActiveDir] ftp access Can you provide some more details? What are they using to access their shares? (client?) What are you using to provide ftp access? (IIS?) How did you prove that this is the case? Log files? Trial and error? Anything else that's relevant? Al On 1/22/07, *Antonio Aranda* [EMAIL PROTECTED] wrote: I've setup ftp access to users' network drives so they have access to them remotely. I recently notice some thing very peculiar. Their ftp access stops working when they start getting warnings that their password is going to expire. I don't know if this just a coincidence but once they change their password it starts working again. If any one knows anything about this, I would appreciate any advice. Antonio Aranda Network Analyst UT-Permian Basin 432-552-2413
RE: [ActiveDir] ftp access
Did you try to change the local Group Policy of the IIS-Machine not to prompt the user to change password before it expires? Maybe it's somehow connected with this mechanism. The GPO is underneath Computer Configuration / Windows Settings / Security Settings / Local Policies / Security Options And is named Interactive logon: Prompt user to change password before expiration Just a guess. Gruesse - Sincerely, Ulf B. Simon-Weidner Profile Publications: blocked::http://mvp.support.microsoft.com/profile=35E388DE-4885-4308-B489-F 2F1214C811D http://mvp.support.microsoft.com/profile=35E388DE-4885-4308-B489-F2F1214C811 D Weblog: blocked::http://msmvps.org/UlfBSimonWeidner http://msmvps.org/UlfBSimonWeidner Website: blocked::http://www.windowsserverfaq.org/ http://www.windowsserverfaq.org From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Antonio Aranda Sent: Montag, 22. Januar 2007 23:52 To: ActiveDir@mail.activedir.org Subject: [ActiveDir] ftp access I've setup ftp access to users' network drives so they have access to them remotely. I recently notice some thing very peculiar. Their ftp access stops working when they start getting warnings that their password is going to expire. I don't know if this just a coincidence but once they change their password it starts working again. If any one knows anything about this, I would appreciate any advice. Antonio Aranda Network Analyst UT-Permian Basin 432-552-2413
Re: [ActiveDir] ftp access
Almost sounds like a FTP phishing Trojan. Check the machine for virii with a couple of up to date scanners as well. I have noticed a marked increase in port 21 attack traffic as of late. There are any number of Trojans that can accomplish this as well. Likewise, do you allow any anonymous uploading? Better check the logs to see what kind of activity is happening on that machine. A few more details as Al suggested will be most helpful as well. Brent Eads Employee Technology Solutions, Inc. Office: (312) 762-9224 Fax: (312) 762-9275 The contents contain privileged and/or confidential information intended for the named recipient of this email. ETSI (Employee Technology Solutions, Inc.) does not warrant that the contents of any electronically transmitted information will remain confidential. If the reader of this email is not the intended recipient you are hereby notified that any use, reproduction, disclosure or distribution of the information contained in the email in error, please reply to us immediately and delete the document. Viruses, Malware, Phishing and other known and unknown electronic threats: It is the recipient/client's duties to perform virus scans and otherwise test the information provided before loading onto any computer system. No warranty is made that this material is free from computer virus or any other defect. Any loss/damage incurred by using this material is not the sender's responsibility. Liability will be limited to resupplying the material. Al Mulnick [EMAIL PROTECTED] Sent by: [EMAIL PROTECTED] 01/22/2007 07:40 PM Please respond to ActiveDir@mail.activedir.org To ActiveDir@mail.activedir.org cc Subject Re: [ActiveDir] ftp access Can you provide some more details? What are they using to access their shares? (client?) What are you using to provide ftp access? (IIS?) How did you prove that this is the case? Log files? Trial and error? Anything else that's relevant? Al On 1/22/07, Antonio Aranda [EMAIL PROTECTED] wrote: I've setup ftp access to users' network drives so they have access to them remotely. I recently notice some thing very peculiar. Their ftp access stops working when they start getting warnings that their password is going to expire. I don't know if this just a coincidence but once they change their password it starts working again. If any one knows anything about this, I would appreciate any advice. Antonio Aranda Network Analyst UT-Permian Basin 432-552-2413 Message scanned by TrendMicro Message scanned by TrendMicro
RE: [ActiveDir] ftp access
I'm using IIS and I used ie and smartftp to test. I attached the log that shows when it was working and when it stopped working and then when it started working right after the user changed the password. It seems to stop working not when their password expires but when they start getting the warning that their password is going to expire. It's happened to three different users and the fix has been the same. There is no anonymous access to anything. Thanks for your help Antonio _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Al Mulnick Sent: Monday, January 22, 2007 7:40 PM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] ftp access Can you provide some more details? What are they using to access their shares? (client?) What are you using to provide ftp access? (IIS?) How did you prove that this is the case? Log files? Trial and error? Anything else that's relevant? Al On 1/22/07, Antonio Aranda [EMAIL PROTECTED] wrote: I've setup ftp access to users' network drives so they have access to them remotely. I recently notice some thing very peculiar. Their ftp access stops working when they start getting warnings that their password is going to expire. I don't know if this just a coincidence but once they change their password it starts working again. If any one knows anything about this, I would appreciate any advice. Antonio Aranda Network Analyst UT-Permian Basin 432-552-2413
Re: [ActiveDir] ftp access
do you get same results in Microsoft's client? On 1/23/07, Antonio Aranda [EMAIL PROTECTED] wrote: I'm using IIS and I used ie and smartftp to test. I attached the log that shows when it was working and when it stopped working and then when it started working right after the user changed the password. It seems to stop working not when their password expires but when they start getting the warning that their password is going to expire. It's happened to three different users and the fix has been the same. There is no anonymous access to anything. Thanks for your help Antonio -- *From:* [EMAIL PROTECTED] [mailto: [EMAIL PROTECTED] *On Behalf Of *Al Mulnick *Sent:* Monday, January 22, 2007 7:40 PM *To:* ActiveDir@mail.activedir.org *Subject:* Re: [ActiveDir] ftp access Can you provide some more details? What are they using to access their shares? (client?) What are you using to provide ftp access? (IIS?) How did you prove that this is the case? Log files? Trial and error? Anything else that's relevant? Al On 1/22/07, *Antonio Aranda* [EMAIL PROTECTED] wrote: I've setup ftp access to users' network drives so they have access to them remotely. I recently notice some thing very peculiar. Their ftp access stops working when they start getting warnings that their password is going to expire. I don't know if this just a coincidence but once they change their password it starts working again. If any one knows anything about this, I would appreciate any advice. Antonio Aranda Network Analyst UT-Permian Basin 432-552-2413
RE: [ActiveDir] ftp access
Could you try again with the attachment or log snippet in text form if the list server isn't accepting large attachments? Brent Eads Employee Technology Solutions, Inc. Office: (312) 762-9224 Fax: (312) 762-9275 The contents contain privileged and/or confidential information intended for the named recipient of this email. ETSI (Employee Technology Solutions, Inc.) does not warrant that the contents of any electronically transmitted information will remain confidential. If the reader of this email is not the intended recipient you are hereby notified that any use, reproduction, disclosure or distribution of the information contained in the email in error, please reply to us immediately and delete the document. Viruses, Malware, Phishing and other known and unknown electronic threats: It is the recipient/client's duties to perform virus scans and otherwise test the information provided before loading onto any computer system. No warranty is made that this material is free from computer virus or any other defect. Any loss/damage incurred by using this material is not the sender's responsibility. Liability will be limited to resupplying the material. Antonio Aranda [EMAIL PROTECTED] Sent by: [EMAIL PROTECTED] 01/23/2007 01:56 PM Please respond to ActiveDir@mail.activedir.org To ActiveDir@mail.activedir.org cc Subject RE: [ActiveDir] ftp access I’m using IIS and I used ie and smartftp to test. I attached the log that shows when it was working and when it stopped working and then when it started working right after the user changed the password. It seems to stop working not when their password expires but when they start getting the warning that their password is going to expire. It’s happened to three different users and the fix has been the same. There is no anonymous access to anything. Thanks for your help Antonio From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Al Mulnick Sent: Monday, January 22, 2007 7:40 PM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] ftp access Can you provide some more details? What are they using to access their shares? (client?) What are you using to provide ftp access? (IIS?) How did you prove that this is the case? Log files? Trial and error? Anything else that's relevant? Al On 1/22/07, Antonio Aranda [EMAIL PROTECTED] wrote: I've setup ftp access to users' network drives so they have access to them remotely. I recently notice some thing very peculiar. Their ftp access stops working when they start getting warnings that their password is going to expire. I don't know if this just a coincidence but once they change their password it starts working again. If any one knows anything about this, I would appreciate any advice. Antonio Aranda Network Analyst UT-Permian Basin 432-552-2413 Message scanned by TrendMicro Message scanned by TrendMicro
RE: [ActiveDir] ftp access
If you mean the command-line, yes. _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Al Mulnick Sent: Tuesday, January 23, 2007 2:56 PM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] ftp access do you get same results in Microsoft's client? On 1/23/07, Antonio Aranda [EMAIL PROTECTED] wrote: I'm using IIS and I used ie and smartftp to test. I attached the log that shows when it was working and when it stopped working and then when it started working right after the user changed the password. It seems to stop working not when their password expires but when they start getting the warning that their password is going to expire. It's happened to three different users and the fix has been the same. There is no anonymous access to anything. Thanks for your help Antonio _ From: [EMAIL PROTECTED] [mailto: mailto:[EMAIL PROTECTED] [EMAIL PROTECTED] On Behalf Of Al Mulnick Sent: Monday, January 22, 2007 7:40 PM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] ftp access Can you provide some more details? What are they using to access their shares? (client?) What are you using to provide ftp access? (IIS?) How did you prove that this is the case? Log files? Trial and error? Anything else that's relevant? Al On 1/22/07, Antonio Aranda [EMAIL PROTECTED] wrote: I've setup ftp access to users' network drives so they have access to them remotely. I recently notice some thing very peculiar. Their ftp access stops working when they start getting warnings that their password is going to expire. I don't know if this just a coincidence but once they change their password it starts working again. If any one knows anything about this, I would appreciate any advice. Antonio Aranda Network Analyst UT-Permian Basin 432-552-2413
Re: [ActiveDir] ftp access
I do. That sounds a lot like a bug to me. What version of IIS? On 1/23/07, Antonio Aranda [EMAIL PROTECTED] wrote: If you mean the command-line, yes. -- *From:* [EMAIL PROTECTED] [mailto: [EMAIL PROTECTED] *On Behalf Of *Al Mulnick *Sent:* Tuesday, January 23, 2007 2:56 PM *To:* ActiveDir@mail.activedir.org *Subject:* Re: [ActiveDir] ftp access do you get same results in Microsoft's client? On 1/23/07, *Antonio Aranda* [EMAIL PROTECTED] wrote: I'm using IIS and I used ie and smartftp to test. I attached the log that shows when it was working and when it stopped working and then when it started working right after the user changed the password. It seems to stop working not when their password expires but when they start getting the warning that their password is going to expire. It's happened to three different users and the fix has been the same. There is no anonymous access to anything. Thanks for your help Antonio -- *From:* [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] *On Behalf Of *Al Mulnick *Sent:* Monday, January 22, 2007 7:40 PM *To:* ActiveDir@mail.activedir.org *Subject:* Re: [ActiveDir] ftp access Can you provide some more details? What are they using to access their shares? (client?) What are you using to provide ftp access? (IIS?) How did you prove that this is the case? Log files? Trial and error? Anything else that's relevant? Al On 1/22/07, *Antonio Aranda* [EMAIL PROTECTED] wrote: I've setup ftp access to users' network drives so they have access to them remotely. I recently notice some thing very peculiar. Their ftp access stops working when they start getting warnings that their password is going to expire. I don't know if this just a coincidence but once they change their password it starts working again. If any one knows anything about this, I would appreciate any advice. Antonio Aranda Network Analyst UT-Permian Basin 432-552-2413
Re: [ActiveDir] ftp access
Can you provide some more details? What are they using to access their shares? (client?) What are you using to provide ftp access? (IIS?) How did you prove that this is the case? Log files? Trial and error? Anything else that's relevant? Al On 1/22/07, Antonio Aranda [EMAIL PROTECTED] wrote: I've setup ftp access to users' network drives so they have access to them remotely. I recently notice some thing very peculiar. Their ftp access stops working when they start getting warnings that their password is going to expire. I don't know if this just a coincidence but once they change their password it starts working again. If any one knows anything about this, I would appreciate any advice. Antonio Aranda Network Analyst UT-Permian Basin 432-552-2413
