• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 869
  • Last Modified:

Need a reliable FTP server

I am looking for a good FTP server to run on our Linux fedora machine.
The only requirement is that it should perform user authentication using a Radius server.

So far I have looks like vsftpd and pureftpd could be the right products but I cannot find any information regarding the Radius feature.

Do you know if that is supported?

Thanks
0
excelacom
Asked:
excelacom
2 Solutions
 
myrondCommented:
I have used vsftpd and proftpd, I think you should go with proftpd as it has a multitude of features including mod_radius.

http://www.castaglia.org/proftpd/modules/mod_radius.html

see that for information on configuring mod_radius with proftpd.  I believe ubuntu supports it out of the box as the debian version does so you will not have to compile the radius module in manually.

Additionally I highly recommend enabling the following config options:
DefaultRoot ~
(to disallow users to browse around the filesystem)

(for faster response times when connecting)
UseReverseDNS off
IdentLookups off
PassivePorts 37400 37900
(to support passive FTP then if the box is behind a firewall forward ports 37400 through 37900 that way ftp-ssl in passive mode will work in SSL mode)

also enable tls for proftpd with this option:
  <IfModule mod_tls.c>
    TLSEngine on
    TLSLog /var/log/tls.log
    TLSProtocol SSLv23

    # Are clients required to use FTP over TLS when talking to this server?
    TLSRequired off

    # Server's certificate
    TLSRSACertificateFile /etc/ssl/yourservername.com.pem
    TLSRSACertificateKeyFile /etc/ssl/yourservername.com.key.pem

    # CA the server trusts
    TLSCACertificateFile /etc/proftpd/root.crt

    # Authenticate clients that want to use FTP over TLS?
    TLSVerifyClient off
  </IfModule>


0
 
rwaldicottCommented:
another one is jscape secure ftp server

http://www.jscape.com/secureftpserver/

doesn't support radius authentication out of the box, but has a pluggable authentication API so you can develop your own.  also includes support for all protocols ftp, ftps, sftp etc.

0

Featured Post

VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now