Configuring vsftpd to authenticate with Active Directory

source

1) yum install vsftpd pam_ldap
2)
# egrep -v '^(#.*|)$' /etc/vsftpd/vsftpd.conf
anonymous_enable=NO
local_enable=YES
write_enable=YES
local_umask=022
anon_upload_enable=YES
anon_mkdir_write_enable=YES
dirmessage_enable=NO
xferlog_enable=YES
connect_from_port_20=YES
xferlog_std_format=YES
listen=YES
guest_enable=YES
pam_service_name=vsftpd
userlist_enable=NO
tcp_wrappers=YES
virtual_use_local_privs=YES
dual_log_enable=YES
log_ftp_protocol=YES
local_root=<your ftp root directory>
chroot_local_user=YES

3)
# egrep -v '^(#.*|)$' /etc/pam.d/vsftpd
auth     required    pam_ldap.so
account  required    pam_permit.so
session  required    pam_limits.so

4)
# egrep -v '^(#.*|)$' /etc/pam_ldap.conf
uri ldap://<domain controller's name>/
ssl no
base dc=example,dc=com
binddn cn=user,dc=example,dc=com
bindpw <user password>
nss_map_objectclass posixAccount user
nss_map_objectclass shadowAccount user
nss_map_attribute uid sAMAccountName
nss_map_attribute homeDirectory unixHomeDirectory
nss_map_attribute shadowLastChange pwdLastSet
nss_map_objectclass posixGroup group
nss_map_attribute uniqueMember member
pam_login_attribute sAMAccountName
pam_filter objectclass=User