{"id":18173,"date":"2014-01-29T06:39:56","date_gmt":"2014-01-28T22:39:56","guid":{"rendered":"https:\/\/2blog.ilc.edu.tw\/25793\/2014\/01\/29\/proftpd-ftp-server-%e4%bd%bf%e7%94%a8-ldap-server-%e8%aa%8d%e8%ad%89\/"},"modified":"2014-01-29T06:39:56","modified_gmt":"2014-01-28T22:39:56","slug":"proftpd-ftp-server-%e4%bd%bf%e7%94%a8-ldap-server-%e8%aa%8d%e8%ad%89","status":"publish","type":"post","link":"https:\/\/2blog.ilc.edu.tw\/25793\/2014\/01\/29\/proftpd-ftp-server-%e4%bd%bf%e7%94%a8-ldap-server-%e8%aa%8d%e8%ad%89\/","title":{"rendered":"ProFTPd FTP Server \u4f7f\u7528 LDAP Server \u8a8d\u8b49"},"content":{"rendered":"

\u6e2c\u8a66\u74b0\u5883
LDAP Server IP\uff1a192.168.1.20
FTP Server\uff1a192.168.1.9<\/p>\n

1. \u5b89\u88dd proftpd proftpd-ldap \u5957\u4ef6
# yum install proftpd proftpd-ldap –enablerepo=epel<\/span>
[@more@]
2. \u4fee\u6539 ProFTPd FTP \u8a2d\u5b9a\u6a94
# vim \/etc\/proftpd.conf<\/span>
SystemLog\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \/var\/log\/proftpd\/proftpd.log<\/span>
PassivePorts\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 60000\u00a0\u00a0 61000<\/span><\/p>\n

# Use pam to authenticate (default) and be authoritative<\/span>
#AuthPAMConfig\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 proftpd<\/span>
AuthOrder\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 mod_ldap.c<\/span>
#AuthOrder\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 mod_auth_pam.c* mod_auth_unix.c<\/span>
LoadModule mod_ldap.c<\/span>
<IfModule mod_ldap.c><\/span>
LDAPServer 192.168.1.20<\/span>
LDAPDNInfo “cn=Manager,dc=ldap,dc=tces.ilc.edu.tw” “123456”<\/span>
##LDAPDoUIDLookups on “ou=Student,dc=ldap,dc=tces.ilc.edu.tw”<\/span>
##LDAPDoGIDLookups on “ou=groups,dc=ldap,dc=tces.ilc.edu.tw”<\/span>
LDAPDoAuth on “ou=Student,dc=ldap,dc=tces.ilc.edu.tw” “(&(uid=%v)(objectclass=posixAccount))”<\/span>
LDAPSearchScope subtree<\/span><\/p>\n

## Assign default IDs<\/span>
LDAPDefaultUID 500<\/span>
LDAPDefaultGID 500<\/span><\/p>\n

## Create the home directory<\/span>
LDAPGenerateHomedir on<\/span>
LDAPGenerateHomedirPrefix \/home\/s0990<\/span>
LDAPForceGeneratedHomedir on<\/span>
CreateHome on<\/span><\/p>\n

## Use different attribute names where necessary<\/span>
#LDAPAttr uid sAMAccountName<\/span>
#LDAPAttr gidNumber primaryGroupID<\/span>
<\/IfModule><\/span><\/p>\n

3. \u91cd\u65b0\u555f\u52d5 ProFTPd FTP Server
# service proftpd restart<\/span>
Shutting down proftpd:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 [\u00a0 OK\u00a0 ]<\/span>
Starting proftpd:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 [\u00a0 OK\u00a0 ]<\/span><\/p>\n

\u5728 LDAP Server \u4e2d\u7684\u6e2c\u8a66\u5e33\u865f s0990999<\/span>
#<\/span> \/usr\/bin\/ldapsearch -x -b “ou=s0990,ou=Student,dc=ldap,dc=tces.ilc.edu.tw” uid=s0990999<\/span><\/span>
# extended LDIF<\/span>
#<\/span>
# LDAPv3<\/span>
# base <ou=s0990,ou=Student,dc=ldap,dc=tces.ilc.edu.tw> with scope subtree<\/span>
# filter: uid=s0990135<\/span>
# requesting: ALL<\/span>
#<\/span><\/p>\n

# s0990999, s0990, Student, ldap.tces.ilc.edu.tw<\/span>
dn: uid=s0990999,ou=s0990,ou=Student,dc=ldap,dc=tces.ilc.edu.tw<\/span>
uid: s0990999<\/span>
cn:: 5Zub+gMjHlpbPpfoirPnkak=<\/span>
sn:: 5Zub+gMjHlpbPpfoirPnkak=<\/span>
mail: s0990999@tces.ilc.du.tw<\/span>
objectClass: person<\/span>
objectClass: organizationalPerson<\/span>
objectClass: inetOrgPerson<\/span>
objectClass: posixAccount<\/span>
objectClass: top<\/span>
userPassword:: e2<\/span>
loginShell: \/sbin\/nologin<\/span>
uidNumber: 1322<\/span>
gidNumber: 1073<\/span>
homeDirectory: \/home\/s0990\/s0990999<\/span>
gecos:: 5Zub+gMjHlpbPpfoirPnkak=<\/span><\/p>\n

# search result<\/span>
search: 2<\/span>
result: 0 Success<\/span><\/p>\n

# numResponses: 2<\/span>
# numEntries: 1<\/span><\/p>\n

4. \u6e2c\u8a66\u9023\u7dda
# lftp -u s0990999 192.168.1.9<\/span>
\u5bc6\u78bc\uff1a<\/span>
lftp s0990999@192.168.1.9:~><\/span> ls<\/span>
-rw-r–r–\u00a0\u00a0 1 s0990999 1073\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 73416 Jan\u00a0 7 13:06 Pietty.reg<\/span>
lftp s0990999@192.168.1.9:\/><\/span><\/p>\n

5. \u6aa2\u67e5\u4f7f\u8005\u7684\u5bb6\u76ee\u9304\u662f\u5426\u6703\u81ea\u52d5\u5efa\u7acb
# ls -l \/home\/s0990<\/span>
total 4<\/span>
drwx——. 2 1322 1073 4096 Jan\u00a0 7 20:53 s0990999<\/span><\/p>\n

\u5728 FTP Server \u4e0a\u4e5f\u53ef\u4ee5\u767c\u73fe\u4f7f\u7528\u8005\u7684\u5bb6\u76ee\u9304\u6703\u81ea\u52d5\u5efa\u7acb<\/p>\n","protected":false},"excerpt":{"rendered":"

\u6e2c\u8a66\u74b0\u5883LDAP Server IP\uff1a192.168.1.20FTP Server\uff1a192.168.1.9 1 … <\/p>\n

\u95b1\u8b80\u5168\u6587\u3008ProFTPd FTP Server \u4f7f\u7528 LDAP Server \u8a8d\u8b49\u3009<\/span><\/a><\/p>\n","protected":false},"author":55,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[130,115],"tags":[],"class_list":["post-18173","post","type-post","status-publish","format-standard","hentry","category-c-78475","category-c-78460"],"meta_key":{"_encloseme":["1"],"lt_post_id":["469641"]},"_links":{"self":[{"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/posts\/18173"}],"collection":[{"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/users\/55"}],"replies":[{"embeddable":true,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/comments?post=18173"}],"version-history":[{"count":0,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/posts\/18173\/revisions"}],"wp:attachment":[{"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/media?parent=18173"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/categories?post=18173"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/tags?post=18173"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}