Tools

Allow only selected LDAP users to access Serv-U

Use groups to allow some LDAP users access Serv-U, but not others.

First published date

6/15/2023 7:09 PM

Last published date

6/15/2023 7:09 PM

Overview

You want to enable access to Serv-U for some LDAP users, but not for others. For example, you want Molly.Weasel@SERVUDC.LAB and Dolly.Cat@SERVUDC.LAB to be able to log in to Serv-U. However, you do not want to give access to Smalley.Dog@SERVUDC.LAB.

Serv-U-KB1.png

Product section

Serv-U Managed File Transfer & Serv-U FTP Server

Resolution

  1. Create or identify a group, and give membership to all LDAP users who should be able to access Serv-U. For example, create an LDAP group called SERVUDC.LAB\Special Groups\Users\Serv-U-Enabled, and make all the Serv-U enabled users members of the group.Serv-U-KB2.png
  2. In the LDAP Server’s Search Filter, add criteria to filter the searched users by membership in the Serv-U-enabled group. For example:
    (&(objectclass=user)(userPrincipalName=$LoginID)(memberOf=CN=Serv-U-Enabled,CN=Users,DC=SERVUDC,DC=LAB))Serv-U-KB3.png
  3. Test a few users to verify that members of the group can log in and others cannot. Serv-U-KB4.png

Note: This article describes only one possible type of filtering. LDAP allows you to  combine a variety of positive or negative criteria. For example, you can use !(memberOf=…) to block users that belong to a group.