Unable to FTP in MS Windows browser due to Linux Server Configuration
 

Hello,
Can anyone tell me why I am getting this error???
I have about 150 pcs with Windows XP Pro. These computers need to connect to the Windows Server 2003 FTP server through the squid proxy. It is not feasible to disable the proxy on each computer each time they need to ftp something.

All FTPing is done in ACTIVE mode.....not "passive".

Most users open a Internet Explorer Web Browser window and enter the FTP address in the browser address bar. (i.e. ftp.acme.net). Then they get a login box that pops up asking them to enter their user name and password. Once they press enter they are successfully logged into the ftp server.
Everything is fine as long as this proxy is not enabled on the client workstation.

The error below started occuring as soon as I setup this proxy server. I am not able to put all users on this proxy until this ftp problem is resolved.

I am using Ubuntu 9.04 Server / Squid 2.7 / and Dansguardian 2.9.9.7

This is the error that I am getting:

ERROR
The requested URL could not be retrieved

--------------------------------------------------------------------------------

An FTP authentication failure occurred while trying to retrieve the URL: ftp://ftp.acme.net/

Squid sent the following FTP command:

PASS <yourpassword>and then received this reply
Password not accepted.Your cache administrator is webmaster.



--------------------------------------------------------------------------------

Generated Thu, 22 Oct 2009 15:54:59 GMT by bhproxy.xxxxxxxxxxxx.com (squid/2.7.STABLE3)

Squid proxy is not allowing to access ftp through the browser.

How about adding following in the Squid acl and restarting it:

Sorry about the delay in getting back to you with an answer.

I added in the 2 lines you mentioned above. Here are the results after the lines were added and squid was restarted (results are the same...I got the same error):

ERROR
The requested URL could not be retrieved

--------------------------------------------------------------------------------

An FTP authentication failure occurred while trying to retrieve the URL: ftp://ftp.abc123.net/

Squid sent the following FTP command:

PASS <yourpassword>and then received this reply
Password not accepted.Your cache administrator is webmaster.



--------------------------------------------------------------------------------

Generated Tue, 27 Oct 2009 12:44:35 GMT by ctproxy.abc123.com (squid/2.7.STABLE3)


Any other thoughts????

Thank you

Bobby Howerton

Try typeing as root

modprobe ip_nat_ftp

This may not be a default module and you may have to build it. But that should fix you problem with squid

also make sure this is in your squid config file
ftp_passive off

Did you give following in your browser window?

If your FTP server is configured to deny anonymous logins then you will get a message like that. Use the ftp username and password and try that.

To make things more complex MS Internet Explorer does not appear to support authentication on proxied FTP URLs so the proxy can not cleanly ask the browser for authentication when receiving a "login failed" message from the FTP server. Many other browsers do seem to support this, and is used by Squid if you request ftp://user@host/ (without password). Please try in any other browser and see how it goes.