{"id":18166,"date":"2014-01-23T06:08:13","date_gmt":"2014-01-22T22:08:13","guid":{"rendered":"https:\/\/2blog.ilc.edu.tw\/25793\/2014\/01\/23\/pure-ftpd-ftp-server-%e4%bd%bf%e7%94%a8-ldap-server-%e8%aa%8d%e8%ad%89\/"},"modified":"2014-01-23T06:08:13","modified_gmt":"2014-01-22T22:08:13","slug":"pure-ftpd-ftp-server-%e4%bd%bf%e7%94%a8-ldap-server-%e8%aa%8d%e8%ad%89","status":"publish","type":"post","link":"https:\/\/2blog.ilc.edu.tw\/25793\/2014\/01\/23\/pure-ftpd-ftp-server-%e4%bd%bf%e7%94%a8-ldap-server-%e8%aa%8d%e8%ad%89\/","title":{"rendered":"Pure-FTPd FTP Server \u4f7f\u7528 LDAP Server \u8a8d\u8b49"},"content":{"rendered":"

\u958b\u555f PureFTPd FTP Server\u00a0\u7684 LDAP\u00a0\u00a0\u8a2d\u5b9a
# vim \/etc\/pure-ftpd\/pure-ftpd.conf<\/span>
# LDAP configuration file (see README.LDAP)<\/span>
LDAPConfigFile\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \/etc\/pure-ftpd\/pureftpd-ldap.conf<\/span><\/p>\n

\u4fee\u6539 \/etc\/pure-ftpd\/pureftpd-ldap.conf\u00a0\u8a2d\u5b9a
# vim \/etc\/pure-ftpd\/pureftpd-ldap.conf<\/span>
# Optional : name of the LDAP server. Default : localhost<\/span>
# LDAP Server IP<\/span>
LDAPServer 192.168.154.167<\/span><\/p>\n

# Optional : server port. Default : 389<\/span>
# LDAP Server\u00a0\u9023\u7dda Port<\/span>
LDAPPort\u00a0\u00a0 389<\/span><\/p>\n

# Mandatory : the base DN to search accounts from. No default.<\/span>
LDAPBaseDN ou=Student,dc=ldap,dc=tces.ilc.edu.tw<\/span><\/p>\n

# Optional : who we should bind the server as.<\/span>
#\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Default : binds anonymously or binds as FTP users<\/span>
LDAPBindDN cn=Manager,dc=ldap,dc=tces.ilc.edu.tw<\/span><\/p>\n

# Password if we don’t bind anonymously<\/span>
# This configuration file should be only readable by root<\/span>
# LDAP\u00a0\u7ba1\u7406\u8005\u5bc6\u78bc<\/span>
LDAPBindPW 123456<\/span><\/p>\n

\u91cd\u65b0\u555f\u52d5 PureFTPd FTP Server
# service pure-ftpd restart<\/span>
\u6b63\u5728\u505c\u6b62 pure-ftpd\uff1a\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 [\u00a0 \u78ba\u5b9a\u00a0 ]<\/span>
\u6b63\u5728\u555f\u52d5 pure-ftpd\uff1a\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 [\u00a0 \u78ba\u5b9a\u00a0 ]<\/span>
[@more@]
\u8981\u6e2c\u8a66\u7684\u5e33\u865f s0990499\u00a0\u548c s0990999
# cat s0990t.ldif<\/span>
dn: uid=s0990499,ou=s0990,ou=Student,dc=ldap,dc=tces.ilc.edu.tw<\/span>
uid: s0990499<\/span>
cn: \u56db\u5fe001\u8521\u4e2d\u706b<\/span>
sn: \u56db\u5fe001\u8521\u4e2d\u706b<\/span>
mail: s0990499@tces.ilc.edu.tw<\/span>
objectClass: person<\/span>
objectClass: organizationalPerson<\/span>
objectClass: inetOrgPerson<\/span>
objectClass: posixAccount<\/span>
objectClass: top<\/span>
userPassword: {SSHA}xecUVfAyOlao7udDzLccUvf4fHOonjzN<\/span>
loginShell: \/sbin\/nologin<\/span>
uidNumber: 500<\/span>
gidNumber: 500<\/span>
homeDirectory: \/home\/s0990\/s0990499<\/span>
gecos: \u56db\u5fe001\u8521\u4e2d\u706b<\/span><\/p>\n

dn: uid=s0990999,ou=s0990,ou=Student,dc=ldap,dc=tces.ilc.edu.tw<\/span>
uid: s0990999<\/span>
cn: \u56db\u5fe002\u9673\u5927\u6c34<\/span>
sn: \u56db\u5fe002\u9673\u5927\u6c34<\/span>
mail: s0990999@tces.ilc.edu.tw<\/span>
objectClass: person<\/span>
objectClass: organizationalPerson<\/span>
objectClass: inetOrgPerson<\/span>
objectClass: posixAccount<\/span>
objectClass: top<\/span>
userPassword: {SSHA}WqVy40LfOfoRV1KBwlJFPpfGNgnkIbtr<\/span>
loginShell: \/sbin\/nologin<\/span>
uidNumber: 500<\/span>
gidNumber: 500<\/span>
homeDirectory: \/home\/s0990\/s0990999<\/span>
gecos: \u56db\u5fe002\u9673\u5927\u6c34<\/span><\/p>\n

\u532f\u5165 LDAP\u00a0\u8cc7\u6599
# service slapd stop<\/span>
# \/usr\/sbin\/slapadd -l s0990t.ldif<\/span>
# chown -R ldap:ldap \/var\/lib\/ldap<\/span>
# service slapd start<\/span><\/p>\n

\u641c\u5c0b LDAP\u00a0\u8cc7\u6599\u5eab\u662f\u5426\u6709\u52a0\u5165\u7684\u8cc7\u6599
# ldapsearch -x -b “ou=Student,dc=ldap,dc=tces.ilc.edu.tw” uid=s0990999 | php \/root\/utf8ldif.php<\/span><\/p>\n

# extended LDIF<\/span>
#<\/span>
# LDAPv3<\/span>
# base <ou=Student,dc=ldap,dc=tces.ilc.edu.tw> with scope subtree<\/span>
# filter: uid=s0990999<\/span>
# requesting: ALL<\/span>
#<\/span><\/p>\n

# s0990999, s0990, Student, ldap.tces.ilc.edu.tw<\/span>
dn: uid=s0990999,ou=s0990,ou=Student,dc=ldap,dc=tces.ilc.edu.tw<\/span>
uid: s0990999<\/span>
cn: \u56db\u5fe002\u9673\u5927\u6c34<\/span>
sn: \u56db\u5fe002\u9673\u5927\u6c34<\/span>
mail: s0990999@tces.ilc.edu.tw<\/span>
objectClass: person<\/span>
objectClass: organizationalPerson<\/span>
objectClass: inetOrgPerson<\/span>
objectClass: posixAccount<\/span>
objectClass: top<\/span>
userPassword: {SSHA}WqVy40LfOfoRV1KBwlJFPpfGNgnkIbtr<\/span>
loginShell: \/sbin\/nologin<\/span>
uidNumber: 500<\/span>
gidNumber: 500<\/span>
homeDirectory: \/home\/s0990\/s0990999<\/span>
gecos: \u56db\u5fe002\u9673\u5927\u6c34<\/span><\/p>\n

# search result<\/span>
search: 2<\/span>
result: 0 Success<\/span><\/p>\n

# numResponses: 2<\/span>
# numEntries: 1<\/span><\/p>\n

\u5efa\u7acb\u4f7f\u7528\u8005\u865b\u64ec\u76ee\u9304
# vim mkuserdir.awk<\/span>
# \u5efa\u7acb\u4f7f\u7528\u8005\u76ee\u9304<\/span>
{print “mkdir -p \/home\/”$6″\/”$4 }<\/span>
# \u66f4\u6539\u6a94\u6848\u76ee\u9304\u7684\u6240\u5c6c\u64c1\u6709\u8005\u53ca\u7fa4\u7d44<\/span>
{print “chown -R\u00a0 500:500\u00a0 \/home\/”$6″\/”$4″ ” }<\/span><\/p>\n

\u6e2c\u8a66
# awk -f mkuserdir.awk 102_class41.lst<\/span>
mkdir -p \/home\/s0990\/s0990499<\/span>
chown -R\u00a0 500:500\u00a0 \/home\/s0990\/s0990499<\/span>
mkdir -p \/home\/s0990\/s0990999<\/span>
chown -R\u00a0 500:500\u00a0 \/home\/s0990\/s0990999<\/span><\/p>\n

\u4f7f\u7528\u65b9\u5f0f
# awk -f mkuserdir.awk 102_class41.lst\u00a0 | sh<\/span><\/p>\n

\u6e2c\u8a66
# lftp -u s0990999 localhost<\/span>
\u5bc6\u78bc\uff1a<\/span>
lftp s0990999@localhost:~> ls -l<\/span>
drwxr-xr-x\u00a0\u00a0\u00a0 2 500\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 virtualgrp\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 4096 Jan\u00a0 2 10:58 .<\/span>
drwxr-xr-x\u00a0\u00a0\u00a0 2 500\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 virtualgrp\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 4096 Jan\u00a0 2 10:58 ..<\/span>
lftp s0990999@localhost:\/><\/span><\/p>\n

\u5982\u679c\u7cfb\u7d71\u6709\u4f7f\u7528 SELinux\uff0c\u8981\u8a18\u5f97\u628a\u5bb6\u76ee\u9304\u7684\u529f\u80fd\u6253\u958b
# setsebool -P ftp_home_dir 1<\/span>
# setsebool -P allow_ftpd_full_access=1<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

\u958b\u555f PureFTPd FTP Server\u00a0\u7684 LDAP\u00a0\u00a0\u8a2d\u5b9a# vim \/etc\/pure-ftpd\/p … <\/p>\n

\u95b1\u8b80\u5168\u6587\u3008Pure-FTPd FTP Server \u4f7f\u7528 LDAP Server \u8a8d\u8b49\u3009<\/span><\/a><\/p>\n","protected":false},"author":55,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[130,115],"tags":[],"class_list":["post-18166","post","type-post","status-publish","format-standard","hentry","category-c-78475","category-c-78460"],"meta_key":{"_encloseme":["1"],"lt_post_id":["469105"]},"_links":{"self":[{"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/posts\/18166"}],"collection":[{"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/users\/55"}],"replies":[{"embeddable":true,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/comments?post=18166"}],"version-history":[{"count":0,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/posts\/18166\/revisions"}],"wp:attachment":[{"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/media?parent=18166"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/categories?post=18166"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/tags?post=18166"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}