Quick Question regarding IIS 5

[lck092580]

I've set up IIS 5.0 on my home computer running windows 2k so that my friends that have a firewall could get stuff from me (they dunno how to open up ports so the usual ICQ way is out of the question). I noticed something very odd yesterday when my friend tried to d/l a .zip file and it ended up asking her for a password. I tried it @ work and the same thing happened. However, if i tried putting a .jpg file into the same directory and tried to d/l it, it wouldn't ask for a password. I ended up going into windows explorer (not internet explorer) and gave IUSER read access so that my friend could d/l it. This seems very odd. Any ideas?

T

 

[epohl]

If you are just setting this up so your friends can download files can I suggest you setup FTP instead of WWW.

 

[lck092580]

Well, I did a setup for some other file with FTP the other night but i totally forgot about FTP last night so i just stuck it on the website.. gave read access and directory browsing. I'm not sure if i would get the same problem with ftp but i prefer not to run away from problems. I'd rather understand them.

T

 

[itguru]

Hello!

What is odd in giving permission to IUSR? your friends are accessing your computer with internet and they are IUSR if they have permission to access resources on your site then they will be able to download files, also if you have diffrent location for files like

http://www.yoursite.com/download/zip/myfile.zip

then you must set your site as directory listing(browsing) allowed.

I hope this will clear your confusion. iis_guru@yahoo.com

 

[lck092580]

Nono.. i'm not saying that it was odd that IUSER got permission. Here let me clarify what I meant.

-I've just finished setting up the a virtual directory in IIS5. Let's call it: temp
-So to access it, you will need to type

http://www.domain.com/temp

-I put a, say, dummy.zip in the directory.
-I ask my friend to d/l it and she gets a window asking for a password.
-I'm baffled as to why that's the case.
-So i extract a file in the dummy.zip file and place it within the same directory.
-So now to access that extracted file you simply goto

http://www.domain.com/temp

-I ask my friend to d/l it and she does and successfully does it without even being asked for a password.

Do you get what i mean?.. this is a question as to why she was prompt for a password when trying to d/l a .zip file but not for some other file (in this case a .jpg). IUSER in this case was given READ access to the directory along with directory browsing. So why would a zip file be any different from a .jpg file.

Thanks.

 

[itguru]

is it Possible for you to creat a new virtual directory and DON'T CHANGE ANYTHING and try to access same zip file what i understood that you changed permission on your virtual drive and set the authentication as NT chellenge response or NTLM, Try configuring another virtual directory it will resolve your problem or send me permissions settings details what you MADE.
I hope this will help. iis_guru@yahoo.com

 

[lck092580]

Thanks for the response itguru. I'm not home rite now (i'm @ work) but i'll get the details when i get home this afternoon. But from what i've read, if you enable the IUSER account it actually bypasses the NT challenge response cuz I'm allowing anonymous users to connect.

T