I have a very small vm installed, for testing purposes, running CentOS 1708, with vsftp configured. i used
to setup ad authentication for the OS part, but did not want ad users to be able to login via FTP client.
Primarily i need the ad authentication for administration purposes via ssh internally, not over the internet, and FTP logins purely via local users.
i noticed that if a user has not logged in on this vm via ssh, he/she cannot login via ftp port 21 using ad credentials, as it fails to create home directory.
which is fine i guess, but i am looking for a way to prevent ad auth via AD completely, only allowed via ssh or terminal
I do not want ad authentication via ftp as that then puts my ad users on the internet at risk of being "hacked" or locked out
any suggestions on how i can accomplish this?