Re: directory based LDAP authentication?

>>> "Arthur DiSegna" <[email protected]> 1/21/2006 7:20 pm >>>

>>> Once logged in they're allowed to all directories on the ftp server
unless I use local permissions to prevent 
>>>it. What I need is to have the user authenticate when logging in to
the FTP server as well as the FTP server >>>check their group membership
when trying to access folders.
>>>Will pureftpd do this?

AFAIK, yes. Pure-FTPd not only authenticates a user, using the
directory over LDAP, but also performs the authorization process using
the same backend. Which means that it uses the UID & GID numbers
retrieved via LDAP, for deciding access rights for users. These are set
on the FTP server for the user. Once these are set, the file system
takes care of checking the rights.

Form what you say in the mail, I presume you are using eDirectory. In
that case, I am not very sure that the authentication part will work
properly. From the code, I can tell that this is because Pure-FTPd tries
to retrieve the user's hashed password via LDAP, but eDirectory does not
permit this for security reasons. So the authentication will probably
fail. The authorization part will work properly, but will not succeed
owing to the failure of authentication. I suppose you will need to try
this out further.

Regards,
Rajat
 



---------------------------------------------------------------------
To post a new message, e-mail: [email protected]
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]