This is a discussion on [Proftpd-user] LDAP and Activate Directory - proftpd ; I'll trying to configure ProFTPd to work against activate directory. I have this working but at the lose of groups which I need to use the directive. The problem is that I need to use filters like this: LDAPDoGIDLookups on ...
I'll trying to configure ProFTPd to work against activate directory.
I have this working but at the lose of groups which I need to
use thedirective.
The problem is that I need to use filters like this:
LDAPDoGIDLookups on
"DC=actdir,DC=office,DC=onelan,DC=co,DC=uk"
"(&(sAMAccountName=%v)(objectclass=Group))"
"(&(gidNumber=%v)(objectclass=Group))"
"(&(member=%v)(objectclass=Group))"
For "(&(member=%v)(objectclass=Group))" to work the %v needs to get the
DN of the user, not the sAMAccountName (uid in posix land).
As it is today ProFTPd canot find any groups for the user.
I think the only way to solve this is to modify mod_ldap.c to allow
both %v (aka %u) and a %d for DN to be substituted.
Have I understood this correctly?
Barry
-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.p...r_id=100&url=/
_______________________________________________
ProFTPD Users List
Unsubscribe problems?
http://www.proftpd.org/list-unsub.html