This post is more than 5 years old
26 Posts
0
2222
July 22nd, 2010 13:00
ftps & Celerra
We are trying to implement a FTPS server on our Celerra.
Problem being is that we don't want to manage users/groups. We want our Active Directory to do this. We have setup internally a ftp server and use all the standard "server_ftp" commands...however just for a few users.
Is there a way for FTPS on Celerra to be controlled by Active Directory users/groups?
Thanks for the help,
Brian
No Events found!
sebbyr
99 Posts
0
July 22nd, 2010 13:00
Per FTP documentation:
The CIFS service must be started on a Data Mover to allow CIFS authentication for Windows
FTP users. If a Windows user attempts to log in by using a Windows domain name and
username, and if the CIFS service is not active on the Data Mover, the login fails.
At the FTP login prompt, a user can select either a UNIX username or a Windows domain
and username (in the format domain\username or username@domain). If the user logs in
without a domain name, UNIX authentication is used.
See document attached.
Thanks
- Sebby Robles
1 Attachment
FTP.pdf
BrianBoyd1
26 Posts
0
July 22nd, 2010 13:00
Thanks Sebby-
Now, I'm off to research home directories! I think this might work. Problem is sometimes we offer temp usernames for FTP users, so I'll have to figure out a good way to update the home directory database on a regular basis....
-Brian
umichklewis_ac7b91
300 Posts
1
July 22nd, 2010 14:00
You might be able to use wildcards with regex in the home directory database. Here's what we do:
OURDOMAIN:[a-z].*:\home_fs01\home\guests:regex
*:[a-b]:\home_fs01\home\:regex
*:[c-d]:\home_fs02\home\:regex
*:[e-i]:\home_fs03\home\:regex
*:[j-k]:\home_fs04\home\:regex
*:[l-m]:\home_fs05\home\:regex
*:[n-q]:\home_fs06\home\:regex
*:[r-s]:\home_fs07\home\:regex
*:[t-z]:\home_fs08\home\:regex
We pre-create homedirs in our space, then make a space available for guests accounts. Since we control the account creation process, we force all temp and guest accounts to end in #, i.e. coeguest1, afalguest9, etc. We don't allow normal user accounts to have numbers. If your temp accounts are called temp#, this might work. Be sure to use the Celerra MMC snap-in to validate your regex before using in production!
Karl
uk2
65 Posts
0
November 17th, 2011 06:00
I need to enable SFTP/ FTP and grand access to the Domain users to a particular CIFS share.
When the user log in to the CIFS server using ftp, the user should see the cifs share.
Please help..
dynamox
9 Legend
•
20.4K Posts
0
November 17th, 2011 06:00
have you looked at the manual ?
Using FTP on Celerra 6.0 A01