Active directory for users

[Josh]

Is it possible to get active Directory to Auth users? or any other process?

Thanks
Josh

[rejetto]

i don't know much about active directory.
are the users of active directory the same configured as windows user on the machine where HFS runs ?

[rejetto]

that's what i was trying to understand, if it was the same request.
the reason why this is waiting for so long is that it is not easy to do.
i should learn how to read users, and i guess it is not easy for security matters.
also reading VNC sources is not a 5 minutes task.
it would be much easier if someone give me a code returning the list of users with passwords.

[Val3r10]

If HFS server is installed on a "active directory member", server or workstation, domain users are machine authenticated users (there's no need of password sync or user replica)

Could HFS manage/recognize the local machine authenticated users instead of its own ?

Thanks for your answer

Greets from Rome, mate.
V.

[rejetto]

much more sense
thus, instead of a function to get the list, i need a function to authenticate
any help is welcome, as before

[Mark5]

I guess that this page http://www.agnisoft.com/white_papers/active_directory.asp has everything needed to to AD authentication....

[rejetto]

thanks for reporting!
i will study that article when i will work on this feature

[Mark5]

My pleasure...

By the way, HFS is just great and would be even greater with AD authentication 

[bacter]

may be interresting for closed networks, but I think this will complicate a lot useradmin of hfs.

We may need groups for users on internet. It may be necessary to distinguish by ip(-range) which login-system to use.

[Mars]

bacter do all filter you ask into javascript language, you can use cookie and testing it for every user, no more groupe will be necessary
 

[bacter]

mars:

groups for users are not a simple question about the origin of users (internet- or intranet-users).

I think for example you have foldertrees for a programming- or documentation project.
There would be an number (say 14,30,70) of users working on the project-group.
Some of them (founders) may access all, upload and download in all subfolders, others, like 'coders',
may access all except some folder with special documents, and upload in some folders only,
'illustrators' dont access code-folders and only upload in other folders, a forth type of members
of the group will only have access- and download rights. .. ..

Administration of the access-rights in the different folders could be simplified, if users belong to groups(and subgroups).
Supose a user belongs to a subgroup project.coders or project.founder. This implies, that he belongs to project.
Hence, in the filesystem, you may give access to 'project' on the first element of the folder-tree, limiting upload to project.founder.
in a folder in next level of the tree, you give access only to folder.founder, folder.coder and upload only to folder.coder .. .. ..

So the group system allows having to add only one or two entries to give access or upload rights, you don't need to specify in each
level (folder) a list of 12, 30, 60 users. A user who belongs to a group (by being an element of the subgroup) automatically has the asigned rights
to the (sub-)group in the corresponding folders.

That's the thing for creating user-groups.

[Mars]

bacter:


What you look for here is not a Web http server but a server ftp with a Web interface.

Two solutions are for you

1 The php with sql.
 
2 A server ftp managing the accesses system and in that I direct you to this link where you will find your happiness.

http://www.emutribu.org/index.php?topic=3344.0 for french explanation and http://www.g6ftpserver.com/en/home
for the creator language supported Chinese |Deutsch |English |Français |Japanese

[badam1991]

I would choose a simpler program than some kind of initial or scheduled frequent import export solution
only import option

git hub
brennan-wright
Import-Export-AD-User-Data

adexplorer.findmysoft.com/download/
Get-ADUser -Filter * -SearchBase "DC=pechy,DC=edu" -Properties * |
 Select -Property userPassword,CN,Company,Department,DisplayName,DistinguishedName ,GivenName,Manager,MobilePhone,Name,Office,OfficePhone,Surname,Title,SecureString |
 Export-CSV -Path 'C:\ActiveanddisabledADusers.csv' -NoTypeInformation -Encoding UTF8

[bmartino1]

its lost on the form, someone did setup and use javascript to talk to an active directory/ldap instance. To add users into HFS.

Auth ldap vs active directly stuff via JavaScript and hfs special code commands to add users... not sure if i can find it anymore.
Something like a registration link: https://rejetto.com/forum/index.php?topic=5840.0

and something like this: https://github.com/ldapjs/node-ldapjs