Page 1 of 1

550 permission denied

Posted: 2022-08-18 18:41
by Noubish
So here's the issue...

We're connecting from an outside network (IC) to communicate with the FileZilla server and upload a file to a network drive on the server however every time after attempting to write the file it's giving the 550 permission denied error.
I am able to connect from home to the server and successfully write a file via FileZilla using the same FTP details & SFTP configured

What we've done so far-
Verified user read/write permissions in the network folder
Correct permissions in FileZilla Server configuration
Open port 21 & 990 successfully able to connect outside
Granted the FTP account access in Computer management & tried the system admin account

The company states it's most likely CHMOD/user permissions however I've gone over everything that I can think of, any help would be appreciated!

Re: 550 permission denied

Posted: 2022-08-19 07:17
by botg
Please post a complete log.

Re: 550 permission denied

Posted: 2022-08-22 17:53
by Noubish
botg wrote:
2022-08-19 07:17
Please post a complete log.
Hey so I was able to successfully connect however I am getting the "TLS session of data connection not resumed" when extracting a file & the file is blank with no data inside of it. Originally I wasn't able to successfully write the file however now it won't send any data with it, see attached image below

Re: 550 permission denied

Posted: 2022-08-23 03:03
by boco
Your used client must support the TLS session resumption feature, FileZilla Server requires it. That requirement cannot be relaxed.

Re: 550 permission denied

Posted: 2022-08-23 10:03
by botg
This requirement is an important security measure. Not requiring resumption would leave the server vulnerable to data connection stealing attacks. As such, this requirement cannot be disabled.

Re: 550 permission denied

Posted: 2022-10-18 09:38
by vpreda2003
Hello,
I try to configure a Lexmark X734de printer to send scan file over ftp, but I got a 550 Permission Denied error.
<Date> Info [Type] Message
<Tue, 18.10.2022 12:04:35 PM> FTP Session 197 172.168.0.160 [Response] 220-FileZilla Server 1.5.1
<Tue, 18.10.2022 12:04:35 PM> FTP Session 197 172.168.0.160 [Response] 220 Please visit https://filezilla-project.org/
<Tue, 18.10.2022 12:04:35 PM> FTP Session 197 172.168.0.160 [Command] USER scan
<Tue, 18.10.2022 12:04:35 PM> FTP Session 197 172.168.0.160 [Response] 331 Please, specify the password.
<Tue, 18.10.2022 12:04:35 PM> FTP Session 197 172.168.0.160 [Command] PASS ****
<Tue, 18.10.2022 12:04:35 PM> FTP Session 197 172.168.0.160 scan [Response] 230 Login successful.
<Tue, 18.10.2022 12:04:35 PM> FTP Session 197 172.168.0.160 scan [Command] TYPE i
<Tue, 18.10.2022 12:04:35 PM> FTP Session 197 172.168.0.160 scan [Response] 200 Type set to I
<Tue, 18.10.2022 12:04:37 PM> FTP Session 197 172.168.0.160 scan [Command] PORT 172,168,0,160,148,117
<Tue, 18.10.2022 12:04:37 PM> FTP Session 197 172.168.0.160 scan [Response] 200 PORT command successful.
<Tue, 18.10.2022 12:04:37 PM> FTP Session 197 172.168.0.160 scan [Command] STOR scan2022-10-18-120428-1.jpg
<Tue, 18.10.2022 12:04:37 PM> FTP Session 197 172.168.0.160 scan [Response] 550 Permission denied
<Tue, 18.10.2022 12:04:37 PM> FTP Server [Status] Session 197 ended gracefully.
I use Windows 10 Pro, added ftp 21 port on firewall, permision for Everyone over Scan folder security.
Thank you!

Re: 550 permission denied

Posted: 2022-10-18 12:42
by botg
Did you grant write permission in FileZilla Server itself?

Re: 550 permission denied

Posted: 2022-10-19 11:51
by vpreda2003
Filezilla.jpg
Filezilla.jpg (98.25 KiB) Viewed 16672 times
Thank you

Re: 550 permission denied

Posted: 2022-10-19 12:12
by vpreda2003
Right now I test it on Filezilla Server 0.9.41. Everything worked like a charm! Could be an issue with TLS version. My printer use TLS 1.1, FZ accept minimum TLS1.2.

Re: 550 permission denied

Posted: 2022-10-19 12:56
by oibaf
From the mount list I can see in the screenshot, it looks like you have no native path associated to the virtual root "/", but the scanner doesn't move from the root itself, hence it tries to write a file where it has no permission to.

Try using a virtual path of just "/", rather than "/scan".

Re: 550 permission denied

Posted: 2022-10-19 13:52
by boco
What I don't understand is: If you absolutely have to test with 0.9 versions, at least, take the last one, which was 0.9.60.2.

https://download.filezilla-project.org/ ... 9_60_2.exe

Re: 550 permission denied

Posted: 2022-10-21 12:23
by vpreda2003
Thank you for everyone,
I saw that "Minimum allowed TLS version is now 1.2, added configuration option to restrict it further to 1.3" feature appeared first time from FZ 1.0.0-rc5 (2021-07-28). Can somebody, please, to send me a link with 1.0.0-rc4 (2021-07-19)?
I test it with FileZilla_Server-0_9_60_2 an worked even with FTP over TLS function activated.
On my printer menu I saw this information about certificates
DHE-RSA-AES256-GCM-SHA384 TLSv1.2 Kx=DH Au=RSA Enc=AESGCM(256) Mac=AEAD
DHE-RSA-AES128-GCM-SHA256 TLSv1.2 Kx=DH Au=RSA Enc=AESGCM(128) Mac=AEAD
ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 Kx=ECDH Au=RSA Enc=AESGCM(256) Mac=AEAD
ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 Kx=ECDH Au=RSA Enc=AESGCM(128) Mac=AEAD
DHE-RSA-AES256-SHA256 TLSv1.2 Kx=DH Au=RSA Enc=AES(256) Mac=SHA256
DHE-RSA-AES128-SHA256 TLSv1.2 Kx=DH Au=RSA Enc=AES(128) Mac=SHA256
ECDHE-RSA-AES256-SHA384 TLSv1.2 Kx=ECDH Au=RSA Enc=AES(256) Mac=SHA384
ECDHE-RSA-AES128-SHA256 TLSv1.2 Kx=ECDH Au=RSA Enc=AES(128) Mac=SHA256
ECDHE-RSA-AES256-SHA SSLv3 Kx=ECDH Au=RSA Enc=AES(256) Mac=SHA1
ECDHE-RSA-AES128-SHA SSLv3 Kx=ECDH Au=RSA Enc=AES(128) Mac=SHA1
AES256-GCM-SHA384 TLSv1.2 Kx=RSA Au=RSA Enc=AESGCM(256) Mac=AEAD
AES128-GCM-SHA256 TLSv1.2 Kx=RSA Au=RSA Enc=AESGCM(128) Mac=AEAD
AES256-SHA256 TLSv1.2 Kx=RSA Au=RSA Enc=AES(256) Mac=SHA256
AES128-SHA256 TLSv1.2 Kx=RSA Au=RSA Enc=AES(128) Mac=SHA256
AES256-SHA SSLv3 Kx=RSA Au=RSA Enc=AES(256) Mac=SHA1
AES128-SHA SSLv3 Kx=RSA Au=RSA Enc=AES(128) Mac=SHA1
DHE-RSA-AES256-SHA SSLv3 Kx=DH Au=RSA Enc=AES(256) Mac=SHA1
DHE-RSA-AES128-SHA SSLv3 Kx=DH Au=RSA Enc=AES(128) Mac=SHA1
Could this help me some how?

Re: 550 permission denied

Posted: 2022-10-21 12:26
by vpreda2003
Images

Re: 550 permission denied

Posted: 2022-10-21 13:04
by oibaf
This doesn't have to do with TLS. Please read my post before this one in this thread.

Re: 550 permission denied

Posted: 2022-10-24 13:32
by vpreda2003
Hello again,
Oibaf was right. After upgrade from 0.9.60 to 1.5.1, the default virtual path was set to "/", not to "/scan" as I set it firs time. In 0.9.## I did not saw the "virtual path" feature.
Thank you everyone!