ferp2 Tux's lil' helper
Joined: 13 Aug 2002 Posts: 104
|
Posted: Thu May 27, 2004 10:31 pm Post subject: Gentoo ProFtpd and Samba3 |
|
|
Hi,
I've been given the task of replacing a Windows 2000 server running ftp, amongst other things. On the internal LAN, the ftp server can be accessed by all users who logon to their Windows 2000 machines via the Primary Domain Controller. The directory setup on the server is as follows:
ftp_root
ftp_root\project_1
ftp_root\project_2
ftp_root\project_3
etc...
The way things are now, any internal user who logs on can view, modify, delete any file in any subdirectory (Don't ask me why this is so, since I'm not the one who sets policies). Again, any registered domain user can access these files, which has been mapped to their individual Win2000 PCs.
Now, if one of these users wants to access these project directories from the internet, he or she would use ftp, and I'm pretty sure they have access to all subdirs, just like they would if they were on the internal LAN. Customers or subcontractors can also have access to certain subdirs that are pertinent to them.
OK, I'm finally getting around to my question now. Is it possible to do all this using Gentoo Linux? I've already got the Gentoo server Samba3 integrated into the Windows domain using Samba. I want it so that the Windows Administrator can create new shares (ie, project subdirs in the ftp_root directory) using SWAT. These new subdirs should be read/write so that they can be accessed by the registered domain users via the mapped drive. Furthermore, the registered domain users can then create their own subdirectories and create and delete files at their discretion. It's important that once these subdirs and files have been created, that they can be viewed and manipulated by external users via FTP.
As far as I can tell at this point, registered domain users should be able to access the samba shares once they have logged on to their Win2000 machines via the Primary Domain Controller, which has all the Usernames and Passwords. Is this a correct assumption?
With regards to users accessing the FTP server, a separate configuration file will have to be setup. I've emerged FtpPro and got it working at a basic level. Will it be possible to have each individual subdir in ftp_root belong to a different group, and then setup each user to have access to the different subdirectories based on the different groups he belongs to? It seems plausible on paper, but I'm a far cry from getting it to work in the /etc/proftpd/proftpd.conf file.
Anyway, I hope what I've written makes sense to you. If you don't understand something, please write and I'll try to explain it better.
Thanks in advance |
|