Active Directory Authentication for FTP server

element247 · 03-21-2007, 08:22 AM

I have a fedora core 5 box that is set up with sadms to act as an active directory client. Users can log in on the box, ssh into the box, but can not be authenticated via FTP.

I am using proftpd. When an active directory user attempts to FTP in, the authorization does not follow through.
Will mod_gss or mod_ldap fix this? Is there something else I need to do?

Help would be MUCH appreciated, thank you.

acid_kewpie · 03-22-2007, 03:20 AM

essentially it's simplest to just utilize the pam framework to allow ldap. use system-config-authentication to use ldap and enter the details there. you will still need to customize /etc/ldap.conf after as the gui is really pretty shitty. it can be a bit tricky getting the usre base from ldap if you do want that (note that obtaining the usernames and details is actually seperate to authenticating those details - where i work, we use local unix accounts on a box, but authenticate those accounts against ldap.)

element247 · 03-23-2007, 12:16 PM

Still no dice...I'm pretty sure I have the LDAP configured okay because the box itself will allow active directory authentication, just not through FTP.

/etc/ldap.conf reads:

ssl no
tls_cacertdir /etc/openldap/cacerts
pam_password md5
host venus.matcor-matsu.com
base dc=matcor-matsu,dc=com
bind_policy soft

am I missing something?

acid_kewpie · 03-23-2007, 01:34 PM

well the pam config file for your ftp server would need to reference the ldap module, chekc this.... http://www.computing.net/linux/wwwbo...rum/27181.html