rejetto forum

Active directory for users

Guest · 14 · 28462

0 Members and 1 Guest are viewing this topic.

Josh

  • Guest
Is it possible to get active Directory to Auth users? or any other process?

Thanks
Josh


Offline rejetto

  • Administrator
  • Tireless poster
  • *****
    • Posts: 13523
    • View Profile
i don't know much about active directory.
are the users of active directory the same configured as windows user on the machine where HFS runs ?


Offline rejetto

  • Administrator
  • Tireless poster
  • *****
    • Posts: 13523
    • View Profile
that's what i was trying to understand, if it was the same request.
the reason why this is waiting for so long is that it is not easy to do.
i should learn how to read users, and i guess it is not easy for security matters.
also reading VNC sources is not a 5 minutes task.
it would be much easier if someone give me a code returning the list of users with passwords.


Val3r10

  • Guest
If HFS server is installed on a "active directory member", server or workstation, domain users are machine authenticated users (there's no need of password sync or user replica)

Could HFS manage/recognize the local machine authenticated users instead of its own ?

Thanks for your answer

Greets from Rome, mate.
V.


Offline rejetto

  • Administrator
  • Tireless poster
  • *****
    • Posts: 13523
    • View Profile
much more sense
thus, instead of a function to get the list, i need a function to authenticate :)
any help is welcome, as before



Offline rejetto

  • Administrator
  • Tireless poster
  • *****
    • Posts: 13523
    • View Profile
thanks for reporting!
i will study that article when i will work on this feature


Mark5

  • Guest
My pleasure...

By the way, HFS is just great and would be even greater with AD authentication  :P


Offline bacter

  • Operator
  • Tireless poster
  • *****
    • Posts: 681
    • View Profile
may be interresting for closed networks, but I think this will complicate a lot useradmin of hfs.

We may need groups for users on internet. It may be necessary to distinguish by ip(-range) which login-system to use.
your computer has no brain - use your own !


Offline Mars

  • Operator
  • Tireless poster
  • *****
    • Posts: 2063
    • View Profile
bacter do all filter you ask into javascript language, you can use cookie and testing it for every user, no more groupe will be necessary
 


Offline bacter

  • Operator
  • Tireless poster
  • *****
    • Posts: 681
    • View Profile
mars:

groups for users are not a simple question about the origin of users (internet- or intranet-users).

I think for example you have foldertrees for a programming- or documentation project.
There would be an number (say 14,30,70) of users working on the project-group.
Some of them (founders) may access all, upload and download in all subfolders, others, like 'coders',
may access all except some folder with special documents, and upload in some folders only,
'illustrators' dont access code-folders and only upload in other folders, a forth type of members
of the group will only have access- and download rights. .. ..

Administration of the access-rights in the different folders could be simplified, if users belong to groups(and subgroups).
Supose a user belongs to a subgroup project.coders or project.founder. This implies, that he belongs to project.
Hence, in the filesystem, you may give access to 'project' on the first element of the folder-tree, limiting upload to project.founder.
in a folder in next level of the tree, you give access only to folder.founder, folder.coder and upload only to folder.coder .. .. ..

So the group system allows having to add only one or two entries to give access or upload rights, you don't need to specify in each
level (folder) a list of 12, 30, 60 users. A user who belongs to a group (by being an element of the subgroup) automatically has the asigned rights
to the (sub-)group in the corresponding folders.

That's the thing for creating user-groups.

your computer has no brain - use your own !


Offline Mars

  • Operator
  • Tireless poster
  • *****
    • Posts: 2063
    • View Profile
bacter:


What you look for here is not a Web http server but a server ftp with a Web interface.

Two solutions are for you

1 The php with sql.
 
2 A server ftp managing the accesses system and in that I direct you to this link where you will find your happiness.

http://www.emutribu.org/index.php?topic=3344.0 for french explanation and http://www.g6ftpserver.com/en/home
for the creator language supported Chinese |Deutsch |English |Français |Japanese ;)


Offline badam1991

  • Occasional poster
  • *
    • Posts: 2
    • View Profile
I would choose a simpler program than some kind of initial or scheduled frequent import export solution
only import option

git hub
brennan-wright
Import-Export-AD-User-Data

adexplorer.findmysoft.com/download/
Get-ADUser -Filter * -SearchBase "DC=pechy,DC=edu" -Properties * |
 Select -Property userPassword,CN,Company,Department,DisplayName,DistinguishedName ,GivenName,Manager,MobilePhone,Name,Office,OfficePhone,Surname,Title,SecureString |
 Export-CSV -Path 'C:\ActiveanddisabledADusers.csv' -NoTypeInformation -Encoding UTF8
« Last Edit: January 29, 2024, 06:06:05 PM by Mars »


Offline bmartino1

  • Tireless poster
  • ****
    • Posts: 911
  • I'm only trying to help i mean no offense.
    • View Profile
    • My HFS Google Drive Shared Link
its lost on the form, someone did setup and use javascript to talk to an active directory/ldap instance. To add users into HFS.

Auth ldap vs active directly stuff via JavaScript and hfs special code commands to add users... not sure if i can find it anymore.
Something like a registration link: https://rejetto.com/forum/index.php?topic=5840.0

and something like this: https://github.com/ldapjs/node-ldapjs
Files I have snagged and share can be found on my google drive:

https://drive.google.com/drive/folders/1qb4INX2pzsjmMT06YEIQk9Nv5jMu33tC?usp=sharing