# /etc/nsswitch.conf
#
# Example configuration of GNU Name Service Switch functionality.
# If you have the `glibc-doc-reference' and `info' packages installed, try:
# `info libc "Name Service Switch"' for information about this file.
 
passwd:         compat ldap
group:          compat ldap
shadow:         compat ldap
 
hosts:          files dns
networks:       files
 
protocols:      db files
services:       db files
ethers:         db files
rpc:            db files
 
netgroup:       nis

Aug 06 17:44:38 cicsrv11 proftpd[18882] localhost (172.xx.x.xx[172.xx.xx.xx]): mod_ldap: pr_ldap_connect(): ldap_simple_bind() as cn=xxx,dc=xxxxx,dc=xxx failed: Invalid credentials
Aug 06 17:44:38 cicsrv11 proftpd[18882] localhost (172.xx.x.xx[172.xx.x.xx]): no such user 'jdoo'
Aug 06 17:44:38 cicsrv11 proftpd[18882] localhost (172.xx.x.xx[172.xx.x.xx]): USER jdoo: no such user found from 172.xx.xx.xx [172.xx.x.xx] to 172.xx.x.xx:21
Aug 06 17:44:38 cicsrv11 proftpd[18882] localhost (172.xx.x.xx[172.xx.x.xx]): FTP session closed.

 
#
# /etc/proftpd/proftpd.conf -- This is a basic ProFTPD configuration file.
# To really apply changes reload proftpd after modifications.
#  
 
# Includes DSO modules
Include /etc/proftpd/modules.conf
 
# Set off to disable IPv6 support which is annoying on IPv4 only boxes.
UseIPv6    off
 
ServerName   "Debian"
ServerType   standalone
DeferWelcome   off
 
 
MultilineRFC2228  on
DefaultServer   on
ShowSymlinks   on
 
TimeoutNoTransfer  600
TimeoutStalled   600
TimeoutIdle   1200
 
DisplayLogin                    welcome.msg
DisplayFirstChdir               .message
ListOptions                 "-l"
 
DenyFilter   \*.*/
 
# rajouté par  le 31/07/07
DefaultRoot ~
 
 
# Port 21 is the standard FTP port.
Port    21
 
# In some cases you have to specify passive ports range to by-pass
# firewall limitations. Ephemeral ports can be used for that, but
# feel free to use a more narrow range.
# PassivePorts                    49152 65534
 
# To prevent DoS attacks, set the maximum number of child processes
# to 30.  If you need to allow more than 30 concurrent connections
# at once, simply increase this value.  Note that this ONLY works
# in standalone mode, in inetd mode you should use an inetd server
# that allows you to limit maximum number of processes per service
# (such as xinetd)
MaxInstances   30
 
# Set the user and group that the server normally runs at.
User    proftpd
Group    nogroup
 
# Umask 022 is a good standard umask to prevent new files and dirs
# (second parm) from being group and world writable.
Umask    022  022
# Normally, we want files to be overwriteable.
AllowOverwrite   on
 
# Uncomment this if you are using NIS or LDAP to retrieve passwords:
# PersistentPasswd  off
 
# Be warned: use of this directive impacts CPU average load!
#
# Uncomment this if you like to see progress and transfer rate with ftpwho
# in downloads. That is not needed for uploads rates.
# UseSendFile   off
 
TransferLog /var/log/proftpd/xferlog
SystemLog   /var/log/proftpd/proftpd.log
 
<IfModule mod_tls.c>
TLSEngine off
</IfModule>
 
<IfModule mod_quota.c>
QuotaEngine on
</IfModule>
 
<IfModule mod_ratio.c>
Ratios on
</IfModule>
 
 
# Delay engine reduces impact of the so-called Timing Attack described in
# http://security.lss.hr/index.php?p [...] 2004-10-02
# It is on by default.  
<IfModule mod_delay.c>
DelayEngine off
IdentLookups off
UseReverseDNS off
</IfModule>
 
<IfModule mod_ctrls.c>
ControlsEngine        on
ControlsMaxClients    2
ControlsLog           /var/log/proftpd/controls.log
ControlsInterval      5
ControlsSocket        /var/run/proftpd/proftpd.sock
</IfModule>
 
<IfModule mod_ctrls_admin.c>
AdminControlsEngine on
</IfModule>
 
# A basic anonymous configuration, no upload directories.
 
# <Anonymous ~ftp>
#   User    ftp
#   Group    nogroup
#   # We want clients to be able to login with "anonymous" as well as "ftp"
#   UserAlias   anonymous ftp
#   # Cosmetic changes, all files belongs to ftp user
#   DirFakeUser on ftp
#   DirFakeGroup on ftp
#  
#   RequireValidShell  off
#  
#   # Limit the maximum number of anonymous logins
#   MaxClients   10
#  
#   # We want 'welcome.msg' displayed at login, and '.message' displayed
#   # in each newly chdired directory.
#   DisplayLogin   welcome.msg
#  DisplayFirstChdir  .message
#  
#   # Limit WRITE everywhere in the anonymous chroot
#  <Directory *>
#    <Limit WRITE>
#       DenyAll
#    </Limit>
#   </Directory>
#  
#   # Uncomment this if you're brave.
#   # <Directory incoming>
#   #   # Umask 022 is a good standard umask to prevent new files and dirs
#   #   # (second parm) from being group and world writable.
#   #   Umask    022  022
#   #            <Limit READ WRITE>
#   #            DenyAll
#   #            </Limit>
#   #            <Limit STOR>
#   #            AllowAll
#   #            </Limit>
#   # </Directory>
#  
#</Anonymous>
 
 
#configuration pour LDAP  
 
LDAPServer localhost
LDAPDoAUTH on "cn=Users,dc=cicoph,dc=org"
LDAPDNInfo  cn=admin,dc=pioh,dc=org  pioh