Posted by: Anonymous
[ip: 203.2.120.51]
on February 13, 2008 01:46 AM
At the risk of sounding pedantic, I am not sure what is virtual about this. Its a bog stock ftp server authenticating off mysqld. "configuring pam_mysql" might be a more appropriate title. As for:
"..because virtual users can access only the FTP server's resources, not the OS's", this is a little spurious. If the only resource being redirected is authentication, you can quite easily argue that using a complex application such as mysql for authentication actually introduces more vectors for security threats. and:
"..also supports some special characters, such as @, that FTP itself doesn't support..". There seems to be a real confusion between FTP and pam_unix. You could just as easily (and perhaps more manageably) be using LDAP or AD as you backend auth mechanism. It has nothing to do with FTP.
Its still all very worthy, it just seems a little confused.
Set up a virtual FTP server with pam-mysql
Posted by: Anonymous [ip: 203.2.120.51] on February 13, 2008 01:46 AM"..because virtual users can access only the FTP server's resources, not the OS's", this is a little spurious. If the only resource being redirected is authentication, you can quite easily argue that using a complex application such as mysql for authentication actually introduces more vectors for security threats. and:
"..also supports some special characters, such as @, that FTP itself doesn't support..". There seems to be a real confusion between FTP and pam_unix. You could just as easily (and perhaps more manageably) be using LDAP or AD as you backend auth mechanism. It has nothing to do with FTP.
Its still all very worthy, it just seems a little confused.
#