NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.

Forum Discussion

Zero_G_'s avatar
Zero_G_
Aspirant
Jan 06, 2018
Solved

AD + FTP separate Security ReadyNas 314

Hey

 

I am using my ReadyNAS connected to an Active Directory.

For external users, I want them to be able to download some files via FTP. 

But they should use Credentials to connect to the FTP.

How can I manage this? - Is it possible to handle the credentials via User/Password, without to hand out my Domain Name?

THX a lot - Have a nice day

  • Once the AD is integrated on the NAS, authentications will be based on the Domain users. I think the best way is to create FTP users/group on the domain for the external users.

     

    Local user database on the NAS is unusable as long as it is integrated on the AD. You cannot create users as well.

     

     

    Regards

     

6 Replies

Replies have been turned off for this discussion
  • Marc_V's avatar
    Marc_V
    NETGEAR Employee Retired

    Hi Zero_G_

     

    If I understand you correctly, you would like to have the AD users authenticate on the FTP.

     

    If your NAS is integrated with the AD then the authentication will be against the AD user/password.

     

    However, if your AD user is in a primary group which name contains a space e.g "Domain Users" you may want to reconsider renaming since you might get issues with it because some FTP clients cannot handle this. Issues might be seen after logging in.

     

    I hope this helps.

     

     

    Regards

    • StephenB's avatar
      StephenB
      Guru - Experienced User

      I think the question is whether he can set up local accounts in the NAS for his non-enterprise FTP users, but still use AD authentication for his enterprise users. 

  • Marc_V's avatar
    Marc_V
    NETGEAR Employee Retired

    Once the AD is integrated on the NAS, authentications will be based on the Domain users. I think the best way is to create FTP users/group on the domain for the external users.

     

    Local user database on the NAS is unusable as long as it is integrated on the AD. You cannot create users as well.

     

     

    Regards

     

    • StephenB's avatar
      StephenB
      Guru - Experienced User

      Marc_V wrote:

      I think the best way is to create FTP users/group on the domain for the external users.

       


      Or just set up an FTP server on another device, mounting the NAS data volume (or specific shares) on that server.  That would also let him easily deny FTP access to enterprise users, while maintaining SMB.

  • Marc_V's avatar
    Marc_V
    NETGEAR Employee Retired

    Hi Zero_G_

     


    We’d greatly appreciate hearing your feedback letting us know if the information we provided has helped resolve your issue or if you need further assistance.

    If your issue is now resolved, we encourage you to mark the appropriate reply as the “Accept as Solution” or post what resolved it and mark it as solution so others can be confident in benefiting from the solution.
     
    The Netgear community looks forward to hearing from you and being a helpful resource in the future!
     
    Regards,

    • Zero_G_'s avatar
      Zero_G_
      Aspirant

      Hey

       

      I am really sorry for my late reply!

       

      I will try with external FTP and mounting. - I think,  this will be the best solution for this.

       

      THX a lot for your time!

NETGEAR Academy

Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology! 

Join Us!

ProSupport for Business

Comprehensive support plans for maximum network uptime and business peace of mind.

 

Learn More