FTP and AD

Steve Kennedy · Guest

We are an Active Directory shop. We also use MS FTP servers. We want
some of our AD users (considered "external users") to authenticate to
MS FTP using their e-mail address. Is this possible?

For instance, my active directory user name is "Steve Kennedy"
(skennedy). My e-mail address is skennedy@ufoundme.com (stored in AD).
Is there a way to allow me to authenticate to MS FTP using
skennedy@ufoundme.com and my AD password?

Hutch · Guest

In AD, you can use either the old style login (i.e. skennedy) or a FQDN
login, based on your domain name.

For instance, our domain ends with .net

That being the case I can log in a jdoe, or jdoe@domain.net. If you open
your ADUC and select a user, go to Account, you will see the 2 options. Both
are valid, as long as you have filled them out.

As an FYI, our email addresses end with a .org....while our domain ends with
..net. That being the case, we cannot use our email addresses to
authenticate. If your domain name, and your email addresses are the same,
then what you are proposing should work fine.

"Steve Kennedy" wrote:

Joe Richards [MVP] · Guest

Hutch kind of explained it.

Windows accepts several forms of specifying your ID depending on what you are
doing. For general purpose logons you can usually use your NT format ID or your
userPrincipalName (or UPN)[1]. The NT format ID is the ID with the format like
you were used to in NT, domain\userid. The UPN in Active Directory (but not
ADAM) follows the RFC 822 format which is commonly considered the Email format.
However, the UPN does not have to have ANY relation to the email address.

By default every account has a UPN whether the userPrincipalName attribute is
populated or not, the default UPN is the samaccountname@addomain so if you have
a user with a SAM Name of KEC and the domain is sorprender.com with an email
address of kec@hiddendomain.org then the default UPN would be KEC@sorprender.com.

You could, if you wanted, populate the UPN attribute for the user to be
kec@hiddendomain.org and then they could use that as their UPN for logging into FTP.

joe

[1] If you are using LDAP you can also use the DN format of the userid.

--
Joe Richards Microsoft MVP Windows Server Directory Services
Author of O'Reilly Active Directory Third Edition
www.joeware.net

---O'Reilly Active Directory Third Edition now available---

http://www.joeware.net/win/ad3e.htm

Steve Kennedy wrote: