Experimental support for Filezilla Server and LDAP directory

[mauri300856]

Hi.
Any news?
Bye

[boco]

See anything new? This is not an official version, LDAP feature depends on the work of "kontumenin". Feel free to contact him/her through his/her profile.

[sKrejci]

Hello!
Even this thread is a littled outdated, I hope for some hints!
I downloaded version 0.9.33 of the LDAP-Module (THANKS!!! btw) and installed it. I changed the configuration file to my setting. Now, when I test the connection with oldapcheck.exe, I get a successful authentication. I also see the LDAP-Query passing my firewall. But when I connect with a FTP-Client, I get a 530 critical error "Login or Password incorrect". But still in this case, I see the LDAP-Query passing the firewall.
Any hints? Thanks!
Stefan

[jiwandono]

Hi,

I'm interested in expanding filezilla with ldap support.

My question is,
where can i get the LDAP libraries, especially for Visual C++ 2008?

I've googled it and got no luck.

Thanks.

[jiwandono]

Finally got a LDAP library that easy to use with VC++ 2008.
http://developer.novell.com/wiki/index. ... ows.tar.gz

Still working on it.

[botg]

How are the licensing terms of that library? The license on the download page sounds very much as if it would not be GPL compatible, in which case you would not be allowed to incorporate it into FileZilla Server.

[jiwandono]

Well, it is really hard for me to find LDAP library that works with VC++ 2008. With their licensing terms, it is likely true that i will not allowed to incorporate it to FileZilla Server. I'm not planning to release my modifications to this forum now.

But the main point is i see that the implementation of LDAP is similar between software vendors. In the future when i found a GPL-compatible LDAP library, i will surely switch the library.

Btw, is it possible to get a license to use their library in FileZilla Server?
I only understand a little about license.


- sorry for my bad english

[botg]

For in-house use if you do not ever plan to distribute the changed version, you can do whatever you want.

Btw, is it possible to get a license to use their library in FileZilla Server?

I am not the only copyright holder of FileZilla Server. There have been several code contributers, some of which I currently have no way of contacting. As such, I am not able to change the license of FileZilla Server even if I wanted to.

[boco]

But once the server will get its rewrite from scratch, the situation will change, right?

[botg]

I plan to make use of certain third-party libraries.

[boco]

I know OpenLDAP, but I don't know if it license is compatible or clashes with the GPL.

[jiwandono]

I know OpenLDAP, too. I simply have no idea to build it using VC++ 2008.

Here are the OpenLDAP license and discussions about it:

http://www.openldap.org/software/release/license.html
http://www.openldap.org/lists/openldap- ... 00088.html

I'm not very clear about it.

By the way, my FileZilla+LDAP works like this:
1. Any LDAP user can log in to FTP using their username and password.
2. LDAP users are logged on using 'pseudousername', a regular internal FileZilla FTP user.

Sample case:
There is a LDAP server.
There is a regular FileZilla user named "LDAP" that will be associated with LDAP users.
I can log in to FTP server using my LDAP username and password.
Internally, "jiwandono" account is identified as "LDAP".

Here is the ldap.ini:

Code: Select all

[ldap]
server=ldap.yyy.zzz
port=389
basedn=ou=people,dc=yyy,dc=zzz
userattr=username
tls=NO
pseudousername=_LDAP

Currently, the 'pseudousername' is still hardcoded and TLS is not implemented.

Works well with OpenLDAP 2.4.21 server.

Things i want to do:
Enable LDAP search filter.
Integrate LDAP configuration to "FileZilla Server.xml".

[kontumenin]

I'm sorry, but I've been very busy the last year.

New version and sources:
http://www.dreamcamip.com/files/FileZil ... 0_9_34.zip

New configurations options in oldapcheck.ini

Code: Select all

[settings]
port=389
server=ldap.uclm.es
domain=@2uclm.es
TLS=N
BaseDN=DC=2uclm,DC=es
CheckLockUser=N
CheckLdapPasswordOnly=N

Thanks Filezilla creator for all your hard work. If I can help in any way, just let me know.

NOTES:
- Openldap sources in ftp://ftp.openldap.org/pub/OpenLDAP/openldap-release/
- Licence compatibility. See http://www.gnu.org/licenses/license-list.html:

OpenLDAP License, Version 2.7
This is a permissive non-copyleft free software license that is compatible with the GNU GPL.

Regards

[kontumenin]

I have integrated Ldap Support with Filezilla Server.



The binaries and sources

http://www.dreamcamip.com/files/FileZil ... 4_full.zip

[kontumenin]

A few observation about the testing I made:

1. All the test I made are against a Active Directory service.

2.If I try to log in to the LDAP service when my user is locked out,
the LDAP service will always give me an error back.
You can check it using the command-line utility oldacheck.exe and setting the parameters
CheckLockUser=Y and BaseDN=dc=whatever,dc=whatever2 in the file oldapcheck.ini.

3. You can configurate the domain field by diferent ways.
for example:
1) Domain=MYDOMAIN
2) Domain=@example.com

4. If you select on the check box "Only check password in LDAP" it will only check the password
in the LDAP service. It won´t check with the local user password.

5. If my user in AD is MyName.MyLastName@example.com, in Filezilla must be MyName.MyLastName

6. The application, firstly check for local password, and secondly check for LDAP password