Hi,
I'm currently butting my head on a configuration where
I have a RHEL4 (x86_64) server with OpenLDAP and proftpd,
user data are residing in the OpenLDAP, and I wish to
get proftpd to also use that LDAP directory.
2 variants:
- recompile proftpd with LDAP support built-in.
This is definitely not wanted for maintainability
reasons, I need to use plain RPMs from RedHat.
I did install proftpd-ldap, but for some reason
proftpd won't recognize the presence of that
module.
- get proftpd to use PAM, specifically pam_ldap
I went with the 2nd variant, but didn't get it working
so far. According to the fine manuals, I've created the
file /etc/pam.d/ftp with contents like:
auth sufficient /lib64/security/pam_ldap.so
account sufficient /lib64/security/pam_ldap.so
session sufficient /lib64/security/pam_ldap.so
(I did try with some other variants).
proftpd.conf is adapted:
AuthPAM on
AuthPAMConfig ftp
AuthOrder mod_auth_pam.c* mod_auth_unix.c
The files /etc/ldap.conf resp. /etc/openldap/ldap.conf
are adapted for use with the local LDAP, and simple
ldapsearch -x uid=xyz
does provide the correct answer.
nsswitch was of course adapted.
I can login via ssh with an user present only in the
LDAP tree, but no dice with proftpd.
All I find in the log file is "no such user" despite
activating "debug" logging. The ldap log doesn't show
activity at the moment of trying to access proftpd.
Any ideas what I missed?
I'll welcome precise RTFM instructions, google or
proftpd.org are what got me this far.
Greetings & TIA, Eric