JohnsonCheng | 28 May 2012 09:08
Picon

Re: [Proftpd-user] A permission issue on AD group

Dear TJ,

First, thanks for your reply.

1. My mod_ldap configuration is listed as follows,
<IfModule mod_ldap.c>
AuthOrder       mod_ldap.c
LDAPServer "192.168.106.168:3268"
LDAPBindDN "cn=administrator,cn=Users,dc=win2008,dc=johnson,dc=ad,dc=tw"
"1!q"
LDAPUsers "dc=win2008,dc=johnson,dc=ad,dc=tw" "samaccountname=%u"
LDAPGroups "dc=win2008,dc=johnson,dc=ad,dc=tw"
LDAPAttr uid                    sAMAccountName
LDAPAttr gidNumber              primaryGroupID
LDAPDefaultUID                  37
LDAPDefaultGID                  65534
LDAPGenerateHomedir             on
LDAPGenerateHomedirPrefix       /share
DefaultChdir            /share
</IfModule>

2. And the part of my share configuration is listed as follows,
<Directory "/share/fs1">
        <Limit ALL>
                Order           Deny, Allow
                AllowUser       "johnson"
        </Limit>
        <Limit WRITE>
                Order           Deny, Allow
                AllowUser       "johnson"
(Continue reading)

TJ Saunders | 6 Jun 2012 22:25

Re: [Proftpd-user] A permission issue on AD group


> 1. My mod_ldap configuration is listed as follows,
> <IfModule mod_ldap.c>
> AuthOrder       mod_ldap.c
> LDAPServer "192.168.106.168:3268"
> LDAPBindDN "cn=administrator,cn=Users,dc=win2008,dc=johnson,dc=ad,dc=tw"
> "1!q"
> LDAPUsers "dc=win2008,dc=johnson,dc=ad,dc=tw" "samaccountname=%u"
> LDAPGroups "dc=win2008,dc=johnson,dc=ad,dc=tw"
> LDAPAttr uid                    sAMAccountName
> LDAPAttr gidNumber              primaryGroupID
> LDAPDefaultUID                  37
> LDAPDefaultGID                  65534
> LDAPGenerateHomedir             on
> LDAPGenerateHomedirPrefix       /share
> DefaultChdir            /share
> </IfModule>
> 
> 2. And the part of my share configuration is listed as follows,
> <Directory "/share/fs1">
>         <Limit ALL>
>                 Order           Deny, Allow
>                 AllowUser       "johnson"
>         </Limit>
>         <Limit WRITE>
>                 Order           Deny, Allow
>                 AllowUser       "johnson"
>         </Limit>
> </Directory>
> <Directory "/share/fs2">
(Continue reading)


Gmane