Microsoft Active Directory Database User Plug-in Configuration

How to get here

This page allows you to configure a host to use a Microsoft Active Directory user database for authentication.

• Plug-in name. This is the name of the user plug-in. This is provided as information only and cannot be edited.
• Plug-in location. This is the location of the DLL file for the user plug-in. This is provided as information only and cannot be edited.
• Plug-in description. This is a description of the plug-in that describes its function. This is provided as information only and cannot be edited.
• Organizational Unit. Enter the fully distinguished name of the organizational unit that contains the users you want to grant access to the file transfer server (Maximum length: 256 characters).
  For example: OU=YourOrgUnit,DC=YourDomain,DC=com
• Include users from nested OUs. Select this option to grant access to all users contained in the organizational unit specified in Organizational Unit and all users in organizational units contained within the specified organizational unit. If this option is cleared, only the users in the specified organizational unit are granted access to WS_FTP Server; users in organizational units contained within the specified organizational unit are not granted access.
• User Groups. Specify the fully distinguished name for the user groups that contain the users you want to allow to authenticate to the file transfer server. You can specify multiple group distinguished names separated by the pipe character ("|") (Maximum length: 256 characters).

  For example: CN=Group1,OU=YourOrgUnit,DC=YourDomain,DC=com|CN=Group2,OU=AnotherOrgUnit,DC=YourDomain,DC=com

  Note: The organizational unit that a user group belongs to does not have to match or be contained within the organizational unit entered in the first field.

  Tip: For more information about distinguished names, see "LDAP Naming Model" in How Active Directory Searches Work on the Microsoft Web site.

  1. From the top menu, select Host > Host Details. The Host Details page opens.
  2. Next to User database, click Configure. The User Database Configuration page opens.
• Use Microsoft Windows file permissions. Select this option to use Microsoft Windows file permissions in addition to any permissions set within WS_FTP Server. For more information, see Using Windows file permissions.

You must also change the user context of the host or the server so that WS_FTP Server has permission to access the user database. For more information, see Changing user context via user impersonation or Changing user context on the services.