Our Products:   CompleteFTP  edtFTPnet/Free  edtFTPnet/PRO  edtFTPj/Free  edtFTPj/PRO
0 votes
3.9k views
in CompleteFTP by (160 points)
Is there way to set a Network folder with Path = \\someUNC\path to connect as an Active Directory acct that is not the account that logged on? Sort of like impersonate as this specific AD acct instead of the acct that logged on?

2 Answers

0 votes
by (51.6k points)
No there isn't at the moment, but we could potentially add this feature.

Do you want to enter the username/password as part of the folder configuration?

This would mean that the credentials would have to be stored in the configuration file. They could be obfuscated, but since the server needs to be able to read them it would also be possible for an attacker who gets access to the configuration file to read them. Is this acceptable to you?

- Hans (EnterpriseDT)
0 votes
by (160 points)
Yes having the option for setting Active Directory user/pass as part of the folder config would be very useful. Storing the obfuscated credentials in a config file would not be desireable but if they pass compliance standards then that's all that matters. The issue we're trying to solve is login to the FTP site with non-Windows user/pass (versus Active Directory user/pass) and upload a file to a network share. However we don't want to give the CompleteFTP service acct permissions to the network share because that too would be exploitable considering the mutitude of network shares it would be granted.

BTW we are not yet customers and are evaluating the software. I am impressed with the quick, expert response to requests for features and forum posts.

Categories

...