F16, FTP-servers, sssd and LDAP-backend

Ola Thoresen redhat at olen.net
Tue Nov 15 12:03:59 UTC 2011


Not sure the -devel list is the correct place, but I believe this is not 
a -user-related question.

Has anyone tested (and successfully set up) an F16 based FTP-server with 
LDAP as auth-backend for sssd?

(And please, I do not need any "you should use sftp and ssh"-replies. 
This is a server supporting legacy systems where FTP is currently the 
only solution).

I have tested pure-ftpd, vsftpd and proftpd, and all of them fails to 
authenticate local users for FTP login.  Ssh-logins, pop3, imap and smtp 
(via sasl) works fine for the same users).

I have successfully set up pure-ftpd with LDAP-auth directly, instead of 
relying og sssd, and that works fine.
Except users do not have access to folders woth "rwx"-permissions for a 
secondary-group the are member of.
The same user has access to the folder logging in with ssh.

I have set SELinux to permissive mode, so it should not be a 
SELinux-issue.  I have removed the sssd-cache, and I have remove the 
"initgroups" for nsswitch.conf
- Before that, I was bitten by this bug:
https://bugzilla.redhat.com/show_bug.cgi?id=751450


Is there any reason why it seems like no ftpd-s are able to authenticate 
local users?

This was working fine on an older server, running vsftpd, but with 
pam/nscd, not pam/sssd.


Rgds.

Ola Thoresen


More information about the devel mailing list