Page 1 of 2

Error 550 - Can't Access File

Posted: 2008-01-28 17:38
by Winterice
Hey Guys,
I write small business software for a little extra income, and would like a way to update my software remotely for one of my clients. I've put Filezilla Server on the the server at their office and tried to connect from home, but it won't properly upload.

The client connects fine, i get a proper directory listing, and when i attempt to upload it seems to work just fine, but right at the end i get an error - 550 can't access file. Then if i refresh the directory listing, the file that i just uploaded is no longer there.

This may be a problem with the way i set up the server, and if so i apologize for posting in the wrong forum. However, if anybody could provide me some insight as to what is going wrong, i'd really appreciate it.
Thanks

Log File:

Code: Select all

Status:	Connecting to *removed by user*
Status:	Connection established, waiting for welcome message...
Response:	220-FileZilla Server version 0.9.24 beta
Response:	220-written by Tim Kosse (Tim.Kosse@gmx.de)
Response:	220 Please visit http://sourceforge.net/projects/filezilla/
Command:	USER Jonathan
Response:	331 Password required for jonathan
Command:	PASS *******
Response:	230 Logged on
Command:	SYST
Response:	215 UNIX emulated by FileZilla
Command:	FEAT
Response:	211-Features:
Response:	 MDTM
Response:	 REST STREAM
Response:	 SIZE
Response:	 MLST type*;size*;modify*;
Response:	 MLSD
Response:	 UTF8
Response:	 CLNT
Response:	 MFMT
Response:	211 End
Status:	Connected
Status:	Retrieving directory listing...
Command:	PWD
Response:	257 "/" is current directory.
Command:	TYPE I
Response:	200 Type set to I
Command:	PASV
Response:	227 Entering Passive Mode (*removed by user*)
Command:	LIST
Response:	150 Connection accepted
Response:	226 Transfer OK
Status:	Directory listing successful
Status:	Connecting to *removed by user*...
Status:	Connection established, waiting for welcome message...
Response:	220-FileZilla Server version 0.9.24 beta
Response:	220-written by Tim Kosse (Tim.Kosse@gmx.de)
Response:	220 Please visit http://sourceforge.net/projects/filezilla/
Command:	USER Jonathan
Response:	331 Password required for jonathan
Command:	PASS *******
Response:	230 Logged on
Status:	Connected
Status:	Starting upload of C:\Users\Jonathan\Documents\Cover Letter.doc
Command:	CWD /
Response:	250 CWD successful. "/" is current directory.
Command:	PWD
Response:	257 "/" is current directory.
Command:	TYPE I
Response:	200 Type set to I
Command:	PASV
Response:	227 Entering Passive Mode (*removed by user*)
Command:	STOR Cover Letter.doc
Response:	150 Connection accepted
Response:	550 can't access file.
Status:	Starting upload of C:\Users\Jonathan\Documents\Cover Letter.doc
Status:	Retrieving directory listing...
Command:	PASV
Response:	227 Entering Passive Mode (*removed by user*)
Command:	LIST
Response:	150 Connection accepted
Response:	226 Transfer OK
Command:	PASV
Response:	227 Entering Passive Mode (*removed by user*)
Command:	STOR Cover Letter.doc
Response:	150 Connection accepted
Response:	550 can't access file.
Status:	Starting upload of C:\Users\Jonathan\Documents\Cover Letter.doc
Status:	Retrieving directory listing...
Command:	PASV
Response:	227 Entering Passive Mode (*removed by user*)
Command:	LIST
Response:	150 Connection accepted
Response:	226 Transfer OK
Command:	PASV
Response:	227 Entering Passive Mode (*removed by user*)
Command:	STOR Cover Letter.doc
Response:	150 Connection accepted
Response:	550 can't access file.

Re: Error 550 - Can't Access File

Posted: 2008-01-28 18:21
by botg
Does the account the service runs under (SYSTEM by default) have permissions to write in the target directory?

Re: Error 550 - Can't Access File

Posted: 2008-01-28 19:27
by Winterice
botg wrote:Does the account the service runs under (SYSTEM by default) have permissions to write in the target directory?
Yes, the server runs as a Windows service, and the directory (somepath\Update\) has read, write, append, etc permissions for the user SYSTEM.

Re: Error 550 - Can't Access File

Posted: 2008-01-28 20:08
by Winterice
I don't know if this will help at all, but I've got the log from the server end of things here - This log is the same test as above, but from the server end:

Code: Select all

(000036) 28/01/2008 15:00:47 PM - (not logged in) (*removed by user*)> Connected, sending welcome message...
(000036) 28/01/2008 15:00:47 PM - (not logged in) (*removed by user*)> 220 Welcome to the All Protect Update Directory
(000036) 28/01/2008 15:00:48 PM - (not logged in) (*removed by user*)> USER Jonathan
(000036) 28/01/2008 15:00:48 PM - (not logged in) (*removed by user*)> 331 Password required for jonathan
(000036) 28/01/2008 15:00:48 PM - (not logged in) (*removed by user*)> PASS *******
(000036) 28/01/2008 15:00:48 PM - jonathan (*removed by user*)> 230 Logged on
(000036) 28/01/2008 15:00:48 PM - jonathan (*removed by user*)> PWD
(000036) 28/01/2008 15:00:48 PM - jonathan (*removed by user*)> 257 "/" is current directory.
(000037) 28/01/2008 15:00:52 PM - (not logged in) (*removed by user*)> Connected, sending welcome message...
(000037) 28/01/2008 15:00:52 PM - (not logged in) (*removed by user*)> 220 Welcome to the All Protect Update Directory
(000037) 28/01/2008 15:00:53 PM - (not logged in) (*removed by user*)> USER Jonathan
(000037) 28/01/2008 15:00:53 PM - (not logged in) (*removed by user*)> 331 Password required for jonathan
(000037) 28/01/2008 15:00:53 PM - (not logged in) (*removed by user*)> PASS *******
(000037) 28/01/2008 15:00:53 PM - jonathan (*removed by user*)> 230 Logged on
(000037) 28/01/2008 15:00:53 PM - jonathan (*removed by user*)> CWD /
(000037) 28/01/2008 15:00:53 PM - jonathan (*removed by user*)> 250 CWD successful. "/" is current directory.
(000037) 28/01/2008 15:00:53 PM - jonathan (*removed by user*)> PWD
(000037) 28/01/2008 15:00:53 PM - jonathan (*removed by user*)> 257 "/" is current directory.
(000037) 28/01/2008 15:00:53 PM - jonathan (*removed by user*)> TYPE I
(000037) 28/01/2008 15:00:53 PM - jonathan (*removed by user*)> 200 Type set to I
(000037) 28/01/2008 15:00:53 PM - jonathan (*removed by user*)> PASV
(000037) 28/01/2008 15:00:53 PM - jonathan (*removed by user*)> 227 Entering Passive Mode (*removed by user*)
(000037) 28/01/2008 15:00:53 PM - jonathan (*removed by user*)> STOR Cover Letter.doc
(000037) 28/01/2008 15:00:53 PM - jonathan (*removed by user*)> 150 Connection accepted
(000037) 28/01/2008 15:00:53 PM - jonathan (*removed by user*)> 550 can't access file.
(000037) 28/01/2008 15:00:53 PM - jonathan (*removed by user*)> PASV
(000037) 28/01/2008 15:00:53 PM - jonathan (*removed by user*)> 227 Entering Passive Mode (*removed by user*)
(000037) 28/01/2008 15:00:53 PM - jonathan (*removed by user*)> LIST
(000037) 28/01/2008 15:00:53 PM - jonathan (*removed by user*)> 150 Connection accepted
(000037) 28/01/2008 15:00:53 PM - jonathan (*removed by user*)> 226 Transfer OK
(000037) 28/01/2008 15:00:53 PM - jonathan (*removed by user*)> PASV
(000037) 28/01/2008 15:00:53 PM - jonathan (*removed by user*)> 227 Entering Passive Mode (*removed by user*)
(000037) 28/01/2008 15:00:53 PM - jonathan (*removed by user*)> STOR Cover Letter.doc
(000037) 28/01/2008 15:00:53 PM - jonathan (*removed by user*)> 150 Connection accepted
(000037) 28/01/2008 15:00:53 PM - jonathan (*removed by user*)> 550 can't access file.
(000037) 28/01/2008 15:00:53 PM - jonathan (*removed by user*)> PASV
(000037) 28/01/2008 15:00:53 PM - jonathan (*removed by user*)> 227 Entering Passive Mode (*removed by user*)
(000037) 28/01/2008 15:00:53 PM - jonathan (*removed by user*)> LIST
(000037) 28/01/2008 15:00:53 PM - jonathan (*removed by user*)> 150 Connection accepted
(000037) 28/01/2008 15:00:53 PM - jonathan (*removed by user*)> 226 Transfer OK
(000037) 28/01/2008 15:00:53 PM - jonathan (*removed by user*)> PASV
(000037) 28/01/2008 15:00:53 PM - jonathan (*removed by user*)> 227 Entering Passive Mode (*removed by user*)
(000037) 28/01/2008 15:00:53 PM - jonathan (*removed by user*)> STOR Cover Letter.doc
(000037) 28/01/2008 15:00:54 PM - jonathan (*removed by user*)> 150 Connection accepted
(000037) 28/01/2008 15:00:54 PM - jonathan (*removed by user*)> 550 can't access file.
Edit: I've since tried the test on from filezilla client on the server machine to filezilla server on the same machine (localhost:portnum) and got the same 550 error when trying to transfer a file. Additionally, I changed the home directory for the account I'm using to be the root - a directory with plenty of files in it, but on log in, it still shows an empty directory listing. There's something going terribly wrong with the permissions here...

Re: Error 550 - Can't Access File

Posted: 2008-01-28 21:52
by botg
Guessing: Network share?

Re: Error 550 - Can't Access File

Posted: 2008-01-28 23:22
by Winterice
botg wrote:Guessing: Network share?
Yeah, its a network share drive. I would post the problem on some other site, but it is Filezilla related - I dont know what i've got wrong here.

Re: Error 550 - Can't Access File

Posted: 2008-01-29 00:09
by botg
SYSTEM account does not have permissions to access network shares because Microsoft is stupid.

Re: Error 550 - Can't Access File

Posted: 2008-01-29 00:11
by Winterice
botg wrote:SYSTEM account does not have permissions to access network shares because Microsoft is stupid.
No kidding? Any ideas on how to get around it?

Re: Error 550 - Can't Access File

Posted: 2008-01-29 08:53
by botg
Change the user for the service in the services dialog of the Windows control panel.

Re: Error 550 - Can't Access File

Posted: 2008-02-12 12:49
by heinebroers
I just setup filezilla server and got the same problem.

Solution: Add the user System to the specified directory for that user.
And add modifying right for the user System.

And it works

Thanks for earlier posting: It had helped me

Re: Error 550 - Can't Access File

Posted: 2008-06-27 12:03
by mac
Hi guys,

same problem here. Windows 2003 Server with filezilla . there is network share mounted on the server but the ftp clients can't write to it (error 550). I changed the user in the services part to a local admin and this starts OK, but I can't manage to add this user to the network drive (security tab). Even if try "System" as the user and try to add this user to the security tab, it disappears when I open the security window again.

Anyone has an idea how to solve this?

Re: Error 550 - Can't Access File

Posted: 2008-06-27 19:59
by da chicken
The best option is to use a domain account. Then you simply grant the domain account the rights on the FTP server and file server as appropriate.

If you don't have a domain, then you need to create a Windows local account on both the FTP server and the file server that have the same username and password and then grant each account rights on their respective machines appropriately.

Re: Error 550 - Can't Access File

Posted: 2008-06-27 21:49
by simoneqask
Hi,
I've read the previous posts but I got the same problem (I want to map a netword shared directory into my FilezillaServer) but I can't understand how make it!
Actually my Windows2003Server starts with "Administrator" user and "FilezillaServer FTP Server" service starts as Administrator user.
Logging in windows with this user I can browse the network directory after inserting the NAS user and password (is this the cause? Because Filezilla don't know the NAS password also if the network dir is already mapped in a drive?).

If so, what can I to do to workaround this?

Thanks.
Simone

Re: Error 550 - Can't Access File

Posted: 2008-06-28 01:14
by da chicken
Ok, here's an example.

Let's say I don't have a domain. A domain would make life much easier, but the steps are largely the same.
I have two servers with Win2k3 installed.
One server has a hostname (computer name) of FTP1. This is the server where FileZilla Server is installed.
The second server has a hostname of FILE2. This server has a directory where we want to keep files, D:\ftproot\.

Step 1: We go log in to FTP1, and we create a Windows local user account to use as a service account.

To create a local user account:
  • On FTP1, open Computer Management.
  • Expand Local Users and Groups.
  • Right-click Users and click New User.
  • In the User name box, type a name for the service account (for example, FileZillaServerService).
  • In the Password and Confirm password boxes, type the account's password, like "12345" (except use something secure).
  • Clear the User must change password at next logon check box.
  • Check the Password never expires and User cannot change password options because this is a service account.
  • Click Create
Step 2: Add the local user FTP1\FileZillaServerService to the local Administrators group (FTP1\Administrators). This is more permissions than are strictly necessary so I don't recommend it for security reasons, so if you want to lock it down properly you certainly can. I don't know what permissions FileZilla Server needs to operate so I'm going the easy route.

Step 3: Configure the FileZilla Server Service on FTP1 to start using the FTP1\FileZillaServerService account.

Step 4: Now let's go log in to the file server, FILE2. Create a Windows local user account with the exact same name and the exact same password as the one you created on FTP1. You should now have FileZillaServerService on FTP1 and FILE2, both with the exact same password.

Step 5: Turn on File Sharing on the directory D:\ftproot\. Give the share a name (ftproot is fine). Grant the local user FILE2\FileZillaServerService the Share Permission of Full Control, and the NTFS Permissions of Read, Read & Execute, Write, and Modify (granting Full Control is not necessary and carries security implications).

Step 6: Now go back to FTP1, and log on as FileZillaServerService. Open up Windows Explorer and browse to \\FILE2\. Right-click share we created (ftproot) and pick Map Network Drive.... Give it a drive letter. Now you can configure FileZilla Server in the Control Interface to use the mapped network drive. You should be able to access the network drive, create files and folders and so on. It shouldn't ask for a password or anything.

Warning: Mapped network drives are associated with user accounts when they're logged on, not with service accounts. It's very likely that if the user account FileZillaServerService is logged off the server that the network drive on FTP1 will no longer available. This will cause problems whenever you reboot FTP1 because you'll have to go log in again to get your mapped drive back most likely. The FileZilla Server, however, will already have started at that point, and may have thrown an error because the file server appears to be inaccessible.

These kinds of problems are some of the reasons why it's not recommended to do things this way. It will break, and probably often.

Re: Error 550 - Can't Access File

Posted: 2008-06-28 23:41
by simoneqask
Hi,
thank you very much, now I understand witch was the problem and the relative solution!
Now it's running!
If I understand well, it is because windows use the user that's running the FileZilla Server Service to try access the network directory! So, in the s.o. where it would run the Filezilla Server, it has to create a user with the same username and password necessary to access to remote network directory shared, set it the grant to access the network (in the example, the fastest mode is to add it to "Administrator" group) and set the FileZilla Server Service to be executed with it.
In case there's a domain it could be easier because users definition was centralized on the domain controller and the only thing necessary is to make the service run with a domain user that has permissions to access the network shared directory, right?

Thank you very much for fast and long explanation, it had helped me!!