ldappamrhel8vsftpdsssd

Using LDAP for user authentication in VSFTPD in RHEL8


I want to set up a new ftp server using vsftpd on RHEL8, for user authentication we would like to use LDAP(389 directory server). As I understood ldap_pam.so module is deprecated in RHEL8, so I'm wondering how to connect the remote LDAP server to my vsftpd service without PAM module?


Solution

  • Here is the full setup for connection between vsftpd and ldap in rhel8:

    in /etc/vsftpd/vsftpd.conf

    pam_service_name=vsftpd
    

    in /etc/pam.d/vsftpd:

    #%PAM-1.0
    auth required pam_sss.so domains=vsftpd 
    account required pam_sss.so 
    

    in /etc/sssd/sssd.conf

    [sssd]
    config_file_version = 2
    services = nss, pam
    domains = vsftpd
    [domain/vsftpd] 
    id_provider = ldap
    sudo_provider = none
    auth_provider = ldap 
    ldap_uri = ldap://example.com
    ldap_search_base = ou=example1,ou=example2