550 permission denied

Need help with FileZilla Server? Something does not work as expected? In this forum you may find an answer.

Moderator: Project members

Post Reply
Message
Author
Noubish
500 Command not understood
Posts: 2
Joined: 2022-08-18 18:35

550 permission denied

#1 Post by Noubish » 2022-08-18 18:41

So here's the issue...

We're connecting from an outside network (IC) to communicate with the FileZilla server and upload a file to a network drive on the server however every time after attempting to write the file it's giving the 550 permission denied error.
I am able to connect from home to the server and successfully write a file via FileZilla using the same FTP details & SFTP configured

What we've done so far-
Verified user read/write permissions in the network folder
Correct permissions in FileZilla Server configuration
Open port 21 & 990 successfully able to connect outside
Granted the FTP account access in Computer management & tried the system admin account

The company states it's most likely CHMOD/user permissions however I've gone over everything that I can think of, any help would be appreciated!

User avatar
botg
Site Admin
Posts: 35507
Joined: 2004-02-23 20:49
First name: Tim
Last name: Kosse

Re: 550 permission denied

#2 Post by botg » 2022-08-19 07:17

Please post a complete log.

Noubish
500 Command not understood
Posts: 2
Joined: 2022-08-18 18:35

Re: 550 permission denied

#3 Post by Noubish » 2022-08-22 17:53

botg wrote:
2022-08-19 07:17
Please post a complete log.
Hey so I was able to successfully connect however I am getting the "TLS session of data connection not resumed" when extracting a file & the file is blank with no data inside of it. Originally I wasn't able to successfully write the file however now it won't send any data with it, see attached image below
Attachments
Untitled.png
Untitled.png (18.35 KiB) Viewed 11689 times

User avatar
boco
Contributor
Posts: 26910
Joined: 2006-05-01 03:28
Location: Germany

Re: 550 permission denied

#4 Post by boco » 2022-08-23 03:03

Your used client must support the TLS session resumption feature, FileZilla Server requires it. That requirement cannot be relaxed.
No support requests over PM! You will NOT get any reply!!!
FTP connection problems? Please read Network Configuration.
FileZilla connection test: https://filezilla-project.org/conntest.php
FileZilla Pro support: https://customerforum.fileZilla-project.org

User avatar
botg
Site Admin
Posts: 35507
Joined: 2004-02-23 20:49
First name: Tim
Last name: Kosse

Re: 550 permission denied

#5 Post by botg » 2022-08-23 10:03

This requirement is an important security measure. Not requiring resumption would leave the server vulnerable to data connection stealing attacks. As such, this requirement cannot be disabled.

vpreda2003
504 Command not implemented
Posts: 6
Joined: 2022-10-18 09:32
First name: Vasile
Last name: Preda

Re: 550 permission denied

#6 Post by vpreda2003 » 2022-10-18 09:38

Hello,
I try to configure a Lexmark X734de printer to send scan file over ftp, but I got a 550 Permission Denied error.
<Date> Info [Type] Message
<Tue, 18.10.2022 12:04:35 PM> FTP Session 197 172.168.0.160 [Response] 220-FileZilla Server 1.5.1
<Tue, 18.10.2022 12:04:35 PM> FTP Session 197 172.168.0.160 [Response] 220 Please visit https://filezilla-project.org/
<Tue, 18.10.2022 12:04:35 PM> FTP Session 197 172.168.0.160 [Command] USER scan
<Tue, 18.10.2022 12:04:35 PM> FTP Session 197 172.168.0.160 [Response] 331 Please, specify the password.
<Tue, 18.10.2022 12:04:35 PM> FTP Session 197 172.168.0.160 [Command] PASS ****
<Tue, 18.10.2022 12:04:35 PM> FTP Session 197 172.168.0.160 scan [Response] 230 Login successful.
<Tue, 18.10.2022 12:04:35 PM> FTP Session 197 172.168.0.160 scan [Command] TYPE i
<Tue, 18.10.2022 12:04:35 PM> FTP Session 197 172.168.0.160 scan [Response] 200 Type set to I
<Tue, 18.10.2022 12:04:37 PM> FTP Session 197 172.168.0.160 scan [Command] PORT 172,168,0,160,148,117
<Tue, 18.10.2022 12:04:37 PM> FTP Session 197 172.168.0.160 scan [Response] 200 PORT command successful.
<Tue, 18.10.2022 12:04:37 PM> FTP Session 197 172.168.0.160 scan [Command] STOR scan2022-10-18-120428-1.jpg
<Tue, 18.10.2022 12:04:37 PM> FTP Session 197 172.168.0.160 scan [Response] 550 Permission denied
<Tue, 18.10.2022 12:04:37 PM> FTP Server [Status] Session 197 ended gracefully.
I use Windows 10 Pro, added ftp 21 port on firewall, permision for Everyone over Scan folder security.
Thank you!

User avatar
botg
Site Admin
Posts: 35507
Joined: 2004-02-23 20:49
First name: Tim
Last name: Kosse

Re: 550 permission denied

#7 Post by botg » 2022-10-18 12:42

Did you grant write permission in FileZilla Server itself?

vpreda2003
504 Command not implemented
Posts: 6
Joined: 2022-10-18 09:32
First name: Vasile
Last name: Preda

Re: 550 permission denied

#8 Post by vpreda2003 » 2022-10-19 11:51

Filezilla.jpg
Filezilla.jpg (98.25 KiB) Viewed 9668 times
Thank you

vpreda2003
504 Command not implemented
Posts: 6
Joined: 2022-10-18 09:32
First name: Vasile
Last name: Preda

Re: 550 permission denied

#9 Post by vpreda2003 » 2022-10-19 12:12

Right now I test it on Filezilla Server 0.9.41. Everything worked like a charm! Could be an issue with TLS version. My printer use TLS 1.1, FZ accept minimum TLS1.2.

User avatar
oibaf
Contributor
Posts: 398
Joined: 2021-07-16 21:02
First name: Fabio
Last name: Alemagna

Re: 550 permission denied

#10 Post by oibaf » 2022-10-19 12:56

From the mount list I can see in the screenshot, it looks like you have no native path associated to the virtual root "/", but the scanner doesn't move from the root itself, hence it tries to write a file where it has no permission to.

Try using a virtual path of just "/", rather than "/scan".

User avatar
boco
Contributor
Posts: 26910
Joined: 2006-05-01 03:28
Location: Germany

Re: 550 permission denied

#11 Post by boco » 2022-10-19 13:52

What I don't understand is: If you absolutely have to test with 0.9 versions, at least, take the last one, which was 0.9.60.2.

https://download.filezilla-project.org/ ... 9_60_2.exe
No support requests over PM! You will NOT get any reply!!!
FTP connection problems? Please read Network Configuration.
FileZilla connection test: https://filezilla-project.org/conntest.php
FileZilla Pro support: https://customerforum.fileZilla-project.org

vpreda2003
504 Command not implemented
Posts: 6
Joined: 2022-10-18 09:32
First name: Vasile
Last name: Preda

Re: 550 permission denied

#12 Post by vpreda2003 » 2022-10-21 12:23

Thank you for everyone,
I saw that "Minimum allowed TLS version is now 1.2, added configuration option to restrict it further to 1.3" feature appeared first time from FZ 1.0.0-rc5 (2021-07-28). Can somebody, please, to send me a link with 1.0.0-rc4 (2021-07-19)?
I test it with FileZilla_Server-0_9_60_2 an worked even with FTP over TLS function activated.
On my printer menu I saw this information about certificates
DHE-RSA-AES256-GCM-SHA384 TLSv1.2 Kx=DH Au=RSA Enc=AESGCM(256) Mac=AEAD
DHE-RSA-AES128-GCM-SHA256 TLSv1.2 Kx=DH Au=RSA Enc=AESGCM(128) Mac=AEAD
ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 Kx=ECDH Au=RSA Enc=AESGCM(256) Mac=AEAD
ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 Kx=ECDH Au=RSA Enc=AESGCM(128) Mac=AEAD
DHE-RSA-AES256-SHA256 TLSv1.2 Kx=DH Au=RSA Enc=AES(256) Mac=SHA256
DHE-RSA-AES128-SHA256 TLSv1.2 Kx=DH Au=RSA Enc=AES(128) Mac=SHA256
ECDHE-RSA-AES256-SHA384 TLSv1.2 Kx=ECDH Au=RSA Enc=AES(256) Mac=SHA384
ECDHE-RSA-AES128-SHA256 TLSv1.2 Kx=ECDH Au=RSA Enc=AES(128) Mac=SHA256
ECDHE-RSA-AES256-SHA SSLv3 Kx=ECDH Au=RSA Enc=AES(256) Mac=SHA1
ECDHE-RSA-AES128-SHA SSLv3 Kx=ECDH Au=RSA Enc=AES(128) Mac=SHA1
AES256-GCM-SHA384 TLSv1.2 Kx=RSA Au=RSA Enc=AESGCM(256) Mac=AEAD
AES128-GCM-SHA256 TLSv1.2 Kx=RSA Au=RSA Enc=AESGCM(128) Mac=AEAD
AES256-SHA256 TLSv1.2 Kx=RSA Au=RSA Enc=AES(256) Mac=SHA256
AES128-SHA256 TLSv1.2 Kx=RSA Au=RSA Enc=AES(128) Mac=SHA256
AES256-SHA SSLv3 Kx=RSA Au=RSA Enc=AES(256) Mac=SHA1
AES128-SHA SSLv3 Kx=RSA Au=RSA Enc=AES(128) Mac=SHA1
DHE-RSA-AES256-SHA SSLv3 Kx=DH Au=RSA Enc=AES(256) Mac=SHA1
DHE-RSA-AES128-SHA SSLv3 Kx=DH Au=RSA Enc=AES(128) Mac=SHA1
Could this help me some how?

vpreda2003
504 Command not implemented
Posts: 6
Joined: 2022-10-18 09:32
First name: Vasile
Last name: Preda

Re: 550 permission denied

#13 Post by vpreda2003 » 2022-10-21 12:26

Images
Attachments
Filezilla_2.jpg
Filezilla_2.jpg (110.12 KiB) Viewed 9510 times
Filezilla_3.jpg
Filezilla_3.jpg (269.38 KiB) Viewed 9510 times

User avatar
oibaf
Contributor
Posts: 398
Joined: 2021-07-16 21:02
First name: Fabio
Last name: Alemagna

Re: 550 permission denied

#14 Post by oibaf » 2022-10-21 13:04

This doesn't have to do with TLS. Please read my post before this one in this thread.

vpreda2003
504 Command not implemented
Posts: 6
Joined: 2022-10-18 09:32
First name: Vasile
Last name: Preda

Re: 550 permission denied

#15 Post by vpreda2003 » 2022-10-24 13:32

Hello again,
Oibaf was right. After upgrade from 0.9.60 to 1.5.1, the default virtual path was set to "/", not to "/scan" as I set it firs time. In 0.9.## I did not saw the "virtual path" feature.
Thank you everyone!

Post Reply