FTP

  • 08 Jun

    How to use domain account authentication in our SFTP and FTP server

    How to use domain account authentication in our SFTP and FTP server

    In version v2025.6.8.0 we added the possibility to use domain users as authentication method.

    Select Server menu item > SFTP Server

    limagito file mover sftp server option

    There are a couple of ways to use this new ‘Domain User’ option. The examples below are related to SFTP but the same counts for FTP(S).

    1. First example:

    • Domain User is enabled
    • Username is set to “administrator”
    • Domain Name is set to “limagito”

    When a SFTP client connects to our SFTP server with the user “administrator” we will request the domain “limagito” to check if the provided password from the SFTP  client is correct.

    limagito file mover sftp server domain account authentication

    2. Second example:

    • Domain User is enabled
    • Username is set to “limagito\administrator”.
      • The Username is prefixed by the domain.
      • You need to use the sAMAccountName
    • Domain Name is left blanc

    When a SFTP client connects to our SFTP server with the user “limagito\administrator” we will request the domain “limagito” to check if the provided password from the SFTP  client is correct.

    limagito file mover sftp server domain account authentication

    3. Third example:

    • Domain User is enabled
    • Username is set to “localhost\administrator”.
      • The Username is prefixed by the domain.
      • You need to use the sAMAccountName
    • Domain Name is left blanc

    When a SFTP client connects to our SFTP server with the user “localhost\administrator” we will request the localhost user accounts to check if the provided password from the SFTP  client is correct.

    limagito file mover sftp server accounts setup

    In this version we also added a LDAP(S) client option. In the first two account examples we used the “limagito” domain. Our domain LDAPS server is listening on IP 192.168.2.202 – Port 636.

    • Check ‘Enable LDAP Client(s)’
    • Add the Client(s) you need
      • You can add multiple domains
    • For each domain you add, you need to add:
      • LDAP Host, our LDAP test server is using the IP 192.168.2.202
      • LDAP Port, our LDAP test server is listening on Port 636
      • LDAP Use TLS
        • When enabled TLS will be used to encrypt the LDAP packets

    limagito file mover sftp server ldap setup

    If you need any help with this ‘domain account authentication’ option, please let us know.

    Best Regards,

    Limagito Team

    #sftp #ldap #managedfiletransfer #filetransfer #filemanagement

    By Limagito-Team FTP LDAP SFTP ,
  • 08 Sep

    Failed to convert data connection to TLS

    Failed to convert data connection

    Q: What could be the reason of this?

    When trying to FTP, This is the error message –

    9/4/2024 3:36:11 PM FTPListDirectory, CK GetDirCount Error: ChilkatLog:
    GetDirCount:
    VerboseLogging: 0
    listPattern: *
    fetchDirListing:
    pattern: *
    supportsMLSD: 0
    fetchDirListing2:
    pbsz_protp:
    simpleCommand:
    sendCommand:
    sendingCommand: PBSZ 0
    –sendCommand
    readCommandResponse:
    replyLineQP: 200 OK.
    –readCommandResponse
    –simpleCommand
    simpleCommand:
    sendCommand:
    sendingCommand: PROT P
    –sendCommand
    readCommandResponse:
    replyLineQP: 200 Data connections set to secure (SSL) mode
    –readCommandResponse
    –simpleCommand
    –pbsz_protp
    setupDataConnection:
    passive transfer mode
    setupPassiveDataSocket:
    sendCommand:
    sendingCommand: PASV
    –sendCommand
    readCommandResponse:
    replyLineQP: 227 Entering Passive Mode (XXX,XXX,XXX,XXX,XXX,XXX)
    –readCommandResponse
    dataConnect:
    hostname: XXX.XXX.XXX.XXX
    port: 49434
    Setting SNI hostname for data connection.
    SNI_hostname: XXXXXXXX
    socketOptions:
    SO_SNDBUF: 262144
    SO_RCVBUF: 4194304
    TCP_NODELAY: 0
    SO_KEEPALIVE: 1
    –socketOptions
    dataConnectSuccess: 1
    –dataConnect
    –setupPassiveDataSocket
    –setupDataConnection
    sendCommand:
    sendingCommand: LIST
    –sendCommand
    readCommandResponse:
    replyLineQP: 125 Secure data connection open; transfer starting.
    –readCommandResponse
    convertDataConnToSsl:
    ConvertToTls: Elapsed time: 0 millisec
    Failed to convert data connection to TLS
    –convertDataConnToSsl
    Failed to convert data connection to TLS.
    –fetchDirListing2
    –fetchDirListing
    Failed to get and cache directory listing…
    N: -1
    Failed.
    –GetDirCount
    –ChilkatLog

    Could you please help in this?

    A: The error indicates that while the initial control connection to the FTP server was established successfully, the client failed to upgrade the data connection to a secure TLS (Transport Layer Security) connection.

    Possible causes:

    • Misconfiguration on the server or client side
    • Incompatible TLS versions between client and server
    • Firewall or network issues blocking the necessary ports
    • Outdated software that doesn’t support the required encryption methods

    Common scenarios:

    • The FTP client is set to use explicit FTPS, but the server doesn’t support it
    • The server requires implicit FTPS, but the client is not configured for it
    • There’s a mismatch in the supported TLS versions between client and server

    To resolve this issue, you could try the following:

    1. Check your FTP client settings to ensure you’re using the correct encryption method (implicit or explicit FTPS).
    2. Verify with your FTP server administrator that FTPS is supported and properly configured.
    3. Try using a different FTP client to rule out client-specific issues.
    4. Ensure your firewall isn’t blocking the necessary ports for FTPS (usually port 990 for implicit FTPS).
    5. Update your FTP client and server software to the latest versions.

    The The reason here was a mismatch in the supported TLS versions between client and server. Somehow the server has an issue with TLS and the only way to transfer the data was to disable our ‘Encrypt Data Channel” option.

    C:\Data\Foto\v2023\FTP\Failed to convert data connection\Failed to convert data connection

    The customer was using Implicit FTPS on port 990

    limagito file mover ftps setup

    If you need any help with this question, please let us know.

    Best Regards,

    Limagito Team

    #ftp #managedfiletransfer #filetransfer #filemanagement

    By Limagito-Team FTP ,
  • 03 Sep

    Can’t open data connection for ftp transfer

    Can’t open data connection for ftp transfer

    Q: I’m using the attached FTP source that I have set to get files, but I’m getting an error when reading the directory. I’m able to access the folder using Cyberduck fine with the same settings. Below is the log showing the response I get.  I’m using v2024.2.24.0. Please let me know if you need anything else to troubleshoot.

    A: It looked like the system was not able to open a data connection to the FTP server (425 Can’t open data connection for transfer) and we asked the user to switch be to ‘Active’ mode. FTP is using two channels, a command and a data channel. So if you are able to connect, then you know at least the command channel is working. If you are not able to receive directory listings, then you know something is wrong with the data channel. The data channel can be used in active and passive mode (passive mode = default).

    Reply user: “That seemed to work. Thank you.”

    Connecting to ftp_useast.xxxxxxxx.com:22

    Connection successful

    Server System: 220-Xxxxx Secure FTP

    220 **Authorized Access Only**

    Request Path: /PAX_Test_Xpance

    Response Path: /PAX_Test_Xpance

    List Directory: /PAX_Test_Xpance/

    List Directory /PAX_Test_Xpance/ Error

    Disconnected from ftp_useast.xxxxxxxx.com:22

    8/20/2024 4:14:07 PM FTPSCheckConnected, CK Login Reply: 220-Xxxxxx Secure FTP
    220 **Authorized Access Only**
    8/20/2024 4:14:07 PM FTPSCheckConnected, CK Request Path after Login: /
    8/20/2024 4:14:07 PM FTPSCheckConnected, CK Change Path to /PAX_Test_Xpance
    8/20/2024 4:14:07 PM FTPSCheckConnected, CK Request Path after Change: /PAX_Test_Xpance/
    8/20/2024 4:14:17 PM FTPListDirectory, CK GetDirCount Error: ChilkatLog:
    GetDirCount:
    DllDate: Jan 27 2024
    ChilkatVersion: 9.5.0.97
    UnlockPrefix: CPSFBE
    UnlockStatus: 2
    Architecture: Little Endian; 64-bit
    Language: Delphi DLL
    VerboseLogging: 0
    listPattern: *
    fetchDirListing:
    pattern: *
    supportsMLSD: 1
    fetchDirListing2:
    setupDataConnection:
    active transfer mode
    setupActiveDataSocket:
    Created data listen socket
    Using ephemeral port range for Active data connection.
    dataPort: 51222
    portIpAddress: 192.168.xxx.xxx
    MyIPv4: 192,168,xxx,xxx,200,22
    sendCommand:
    sendingCommand: PORT 192,168,xxx,xxx,200,22
    –sendCommand
    readCommandResponse:
    replyLineQP: 200 Port command successful
    –readCommandResponse
    –setupActiveDataSocket
    –setupDataConnection
    sendCommand:
    sendingCommand: MLSD
    –sendCommand
    completeDataConnection:
    acceptDataConnection:
    controlChannelReply:
    Reading intermediate response..
    readCommandResponse:
    replyLineQP: 150 Opening data channel for directory listing of “/PAX_Test_Xpance”

                  –readCommandResponse
    –controlChannelReply
    controlChannelReply:
    Reading final response..
    readCommandResponse:
    replyLineQP: 425 Can’t open data connection for transfer of “/PAX_Test_Xpance”

                  –readCommandResponse
    Final response indicates error.
    –controlChannelReply
    –acceptDataConnection
    Failed to accept data connection.
    –completeDataConnection
    Failed to complete the data connection.
    –fetchDirListing2
    –fetchDirListing
    Failed to get and cache directory listing…
    N: -1
    Failed.
    –GetDirCount

    If you need any help with this ‘data connection for ftp transfer’ question, please let us know.

    Best Regards,

    Limagito Team

    #ftp #managedfiletransfer #filetransfer #filemanagement

     

    By Limagito-Team FTP ,
1 2 3 4 7
SEARCH