Ну, можно сказать вот и все :) .

Здесь комментировал некоторые параметры конфига, можно взять за основу его Установка FTP сервера – proftp.

Так как писал используется системный passwd, поэтому создаем нового пользователя:

$ useradd user1 -s /usr/sbin/nologin -d /home/user1/

Некоторые из опций:

-d домашняя директория

-s шелл

-g (главная группа пользователя)

Задаем пароль:

$ passwd user1

Проверяем работу нашего ftp-сервера:

$ ftp server.by
Connected to server.by.
220 FTP Server ready.
Name (server.by:ceval): user1
331 Password required for user1
Password:
230 User server logged in.
Remote system type is UNIX.
Using binary mode to transfer files.
ftp>

ADSI Edit: ADSI Edit is a Microsoft Management Console (MMC) snap-in that acts as a low-level editor for the Active Directory.

Add Users: This 32-bit administrative tool for Windows 2000 uses a comma-delimited file to create, write, and delete user accounts.

Add Users to a Group: The UsrToGrp tool adds users to a local or global group according to information in a user-specified input text file.

AuditPol: AuditPol is a command-line tool that enables the user to modify the audit policy of the local computer or of any remote computer.

AutoExNT Service: AutoExNT Service allows you to start a batch file, Autoexnt.bat, at boot time without having to log onto the computer on which it will run.

Apimon: API Monitor - Monitors the API calls made by a process.

Appsec: Application Security Hotfix - Sets user permissions on a file-by-file basis to lock down accessible applications.

Associate: This command-line tool enables you to register or unregister a file name extension with the registry.

Batch File Wait: Sleep causes the computer to wait for a specified amount of time.

Browser Monitor: Browser Monitor is a GUI tool that monitors the status of browsers on selected domains. Browsers are shown on a per-domain and per-transport basis.

Browser Status: BrowStat is a general purpose, character-based browser diagnostic tool. Use BrowStat to find out whether a browser is running and to find active Microsoft Windows for Workgroups (WFW) browsers in Windows 2000 and Windows NT domains.

ChgPrint: Change Printer Utility - This tool assists network-administrators in managing printer shares. mains.

Clipstor: This GUI tool manages multiple Clipboard text buffers. It allows you to retrieve text from the Clipboard and store it in one of its buffers, and paste any of its buffers to the Clipboard, with your mouse.

Clusrest: Cluster Quorum Restore Utility - Restores the quorum disk of a cluster, which is not done by a restore process using NtBackup.

CompReg: A Win32 character-based/command-line "Registry DIFF" that enables you to compare any two local or remote registry keys in Windows 2000, Windows NT, and Windows 95/98.

Ctrlist: Counter List - Lists all objects and counters installed in the system for the given language ID.

Cluster Verification Utility - Verifies that two-node cluster systems are set up properly.

CustCon: Console Key Customizer - Custcon.exe is a Windows 2000 GUI tool that is used to customize the extended line editing keys when using Cmd.exe (Ntconsole). To enable new key settings, click the "Use Extended Edit Keys" checkbox.

Defptr: Default Printer - Using this tool you can easily change your default printer, switching between available network or local printers.

Delprof: User Profile Deletion Utility - This tool deletes user profiles on computers running Windows 2000.

Delrp: Delete File and Reparse Points - Deletes a file or directory and any associated NTFS reparse points.

Delsrv - Unregisters a service with the service control manager.

Dependency Walker: Dependency Walker is a graphical Win32 development tool that scans any Win32 module (.exe, .dll, .ocx, .cpl, .scr, and .sys, among others) and builds a hierarchical tree diagram of all dependent modules.

Dflayout: Compound File Layout User Tool - This layout tool for document files enables you to optimize compound files for improved performance over low-bandwidth networks, such as the Internet.

DH: Display Heap - Displays information about heap usage in a user-mode process or pool usage in kernel-mode memory.

DHCPCMD: DHCP Administrator's Tool - This command-line tool provides an auxiliary method of administering Dynamic Host Configuration Protocol (DHCP) servers.

Dhcpexim: DHCP Database Export Import Tool - Exports a DHCP database and server configuration from a server running Windows NT 4.0 Server or Windows 2000 Server for import into a destination DHCP server running Windows 2000. (This is a new link, thanks to reader Khan)

DHCPLOC: DHCP Server Locator Utility - DHCP Server Locator Utility displays the DHCP servers active on the subnet. If it detects any unauthorized DHCP servers, it beeps and sends out alert messages.

DHCPOBJS: DHCP Objects - DHCP Objects allows you to automate DHCP Server configuration. It also provides enhanced capabilites over the Dhcpcmd tool, such as the ability to remove a DHCP lease.

Diruse: Directory Disk Usage - Displays information about a disk and the contents of its partition table.

DSACLS: This tool facilitates management of access-control lists for directory services.

DSASTAT: This diagnostic tool compares and detects differences between naming contexts on domain controllers.

Diskmap: Displays information about a disk and the contents of its partition table.

Diskpart: Diskpart Command Line Utility - Enables storage configuration from a script, remote session, or other command prompt.

DiskProbe: DiskProbe is a sector editor for Windows 2000. It allows a user with local Administrator rights to directly edit, save and copy data on the physical hard drive that is not accessible in any other way.

DiskUse: DiskUse is a command-line tool that scans directories on a hard disk and reports on space used by each user.

Dmdiag: Disk Manager Diagnostics - Saves disk volume configuration to a text file and writes a signature to a disk partition.

DNSCMD: DNS Server Troubleshooting Tool - Dnscmd.exe is a command line tool designed to assist administrators in DNS management.

DomMon: Domain Monitor - Domain Monitor monitors the status of servers in a domain and the secure channel status to the domain controller and to domain controllers in trusted domains.

Drivers: List Loaded Drivers - Displays information on installed device drivers, their files, and their code.

Drmapsrv: Drive Share Hotfix - Automatically configures NET SHARE and NET USE client drives for Terminal Services server access. Note: This download includes only the hotfix for the utility, not the tool itself.

Dumpel: Dump Event Log - Dumps an event log to a tab-separated text file.

Dumpfsmos.cmd: Dump FSMO Roles - Dumps the Flexible Single Master Operations roles.

Dureg: Registry Size Estimator - Shows how much data is stored in the registry, or in any registry subtree, key, or subkey.

DxDiag: DirectX Diagnostic Tool - This tool presents information about the components and drivers of the Microsoft DirectX application programming interface installed on your system.

Efsinfo: Encrypting File System Information - Displays information about encrypted files on NTFS partitions.

Exctrlst: Extensible Performance Counter List - Displays information on extensible performance counter DLLs installed on a computer.

Extract.exe: Extract Cabinet - Extracts files from cabinet (.cab) files.

ExeType: Finding the Executable Type - ExeType is a command-line application that identifies the operating system environment and processor required to run a particular executable file.

Expand: File Expansion Utility - This command-line tool enables you to expand files that have been compressed by Compress.exe .

FAZAM 2000: Reduced-Functionality Version - Extends Group Policy management functionality of Windows 2000.

File Compress: This command-line tool can compress one or more files.

FileVer: This command-line tool examines the version resource structure of a file or a directory of files on either a local or remote computer and displays information on the versions of executable files such as .exe files and dynamic-link libraries DLLs.

FindGrp: Find Group - This tool finds all direct and indirect group memberships for a specified user in a domain.

FlopLock: Lock Floppy Disk Drives - FloppyLock is a service that controls access to the floppy drives of a computer.

ForFiles: This command-line tool can be used in a batch file to select files in a folder or tree for batch processing.

FreeDisk: This command-line tool checks a disk drive for free space, returning a 0 if the specified amount of free space is available and a 1 if it is not.

FtEdit: FT Registry Information Editor - FTEdit is a GUI tool that allows you to create, edit, and delete fault tolerance sets for disk drives and partitions of local and remote computers.

GetFlags: Global Flags Editor - GFlags is a GUI tool that enables a developer or system administrator to edit the NtGlobalFlag settings for Windows 2000.

Getmac: GetMAC - Gets a computer's MAC (Ethernet) layer address and binding order.

Getsid: Get Security ID - Compares the security IDs of two user accounts.

GetType: GetType.exe is a command-line tool that allows you to detect what type of Windows software (workstation, server or domain controller) is installed on a computer.

Global: This command-line tool displays members of global groups on remote servers or domains.

GrpCpy: Group Copy - This GUI tool enables users to copy the usernames in an existing group to another group in the same or another domain or on a computer running Windows 2000.

Gpotool: Group Policy Verification Tool - Allows administrators to check Group Policy object integrity and monitor policy replication.

Gpresult: Group Policy Results - Displays information about the result Group Policy has had on the current computer and logged-on user.

Guid2obj: GUID to Object - Maps a GUID to a distinguished name.

Heapmon: Enables user to view system heap information.

Hlscan: Hard link display tool - Displays hard links on an NTFS volume or in specified files or directories of the volume.

Ifmember: Checks whether the current user is a member of a specified group.

IIS Migration Wizard: Migrates Web server configuration settings.

Installation Monitor: Tracks changes made by setup programs in the registry, .INI files, and other child processes.

IntBind: Interrupt Affinity Tool - The Interrupt Affinity Tool is used on multiprocessor systems to affinitize interrupts of disk or network adapters to one or more processors.

Inuse: File-In-Use Replace Utility - Performs on-the-fly replacement of files currently in use by the operating system.

Ipsecpol: Internet Protocol Security Policies Tool - Configures Internet Protocol Security (IPSec) policies in the Directory Service, or in a local or remote registry.

Kerbtray: Kerberos Tray - Displays ticket information for a given computer running the Kerberos protocol.

KernProf: Kernel Profiler - This command-line tool provides counters for and profiles of various functions of the Windows 2000 kernel.

Kill: Task Killing Utility - Use this command-line tool to end one or more tasks or processes. Use TLIST to find out the PID.

Klist: Kerberos List - Views and deletes the Kerberos tickets granted to the current logon session.

KSetup: Kerberos Setup - KSetup is a command-line tool for configuring Windows 2000 Professional to use an MIT-based Kerberos realm instead of a Windows 2000 domain.

KTPass: Kerberos Keytab Setup - KtPass is a configuration tool for MIT Kerberos interoperability that allows an Administrator to configure a non-Windows 2000 Kerberos service as a security principal in the Windows 2000 Active Directory.

Leakyapp: This GUI testing tool appropriates system memory to see how other applications or the system as a whole runs in low-memory situations.

LDP: Active Directory Administration Tool - Ldp is a graphical tool that allows users to perform Lightweight Directory Access Protocol (LDAP) operations, such as connect, bind, search, modify, add, and delete, against any LDAP-compatible directory, such as the Active Directory.

Link Check Wizard: Link Check Wizard scans all of the link (shortcut) files on your system, and checks to see if the shortcut points to an existing application or document.

LINKD: This command-line tool links an NTFS directory to a target object.

LIST: Text Display and Search Tool - This simple text display and search tool lists the contents of a file. Unlike other text display tools, List is a good tool for looking at large text or log files because it does not read the whole file into memory when you open it.

LOCAL: This command-line tool displays members of local groups on remote servers or domains.

LogEvent: Event Logging Utility - This tool enables you to make entries to the Event Log on either a local or remote computer from the command prompt or a batch file.

LogOff: The LogOff tool is used to log a user off from the command prompt.

LogTime: This command-line tool logs the start or finish of command-line programs from a batch file. This can be useful for timing and tracking batch jobs such as mail-address imports.

MemSnap: Memory Profiling Tool - This memory profiling tool takes a snapshot of the memory resources being consumed by all running processes and writes this information to a log file.

MoveTree: Active Directory Object Manager - Movetree.exe is a command line tool that allows administrators to move Active Directory objects such as organizational units, users or computers between domains in a single forest.

MUNGE: This command-line tool provides a convenient way to search for and replace strings in a file or files.

NETAFX: Network Configuration Tool - This tool can be used to configure a variety of network parameters from the command prompt.

NetCons: Net Connections - This GUI tool monitors and displays current net connections, taking the place of the Windows command-line command net use.

NetCmd: NetCmd.exe is a command-line tool that opens a command prompt. It automatically maps a UNC path to a drive letter. You can point to any folder in Windows Explorer (or any common file dialog) and open up a command prompt at that location.

Netdiag: Network Connectivity Tester - Helps isolate networking and connectivity problems.

NetDom: Windows 2000 Domain Manager - This tool enables administrators to manage Windows 2000 domains and trust relationships from the command line.

Netsvc: Command-line Service Controller - You can use NetSvc to remotely start, stop, and query the status of services from the command line.

NetWatch - Net Watch shows which users are connected to shared folders. It also enables you to disconnect users and un-share folders. It can now simultaneously monitor multiple computers.

auth methods = winbind
name resolve order = hosts bcast lmhosts
case sensitive = no
dns proxy = no
server string = samba
password server = *
realm = ДОМЕН
client use spnego = yes
client signing = yes
local master = no
domain master = no
preferred master = no
workgroup = Workgroup (можно названия домена)
debug level = 2
security = ads
unix charset = UTF-8
dos charset = 866
max log size = 50
os level = 0
#wins server = IP_вашего_wins_сервера
follow symlinks = yes
winbind separator = \
winbind enum groups = yes
winbind enum users = yes
winbind use default domain = yes
#======================= Share Definitions =======================
[For all]
# комментарий к шаре
comment = Shares for all
# путь к шаре на диске
path = /home/for_all
# список тех, кому разрешён доступ на чтение
read list = "@DOMEN\Domain Users"
# список тех, кому разрешён доступ на запись
write list = "@DOMEN\Domain Users"
admin users = "@DOMEN\Domain Admins", DOMEN\ceval
# Доступ к шаре тока на чтение
read only = No
# маска для создаваемых файлов
create mask = 0660
# маска для создаваемых директорий
directory mask = 0770
# наследовать владельца (вышестоящей директории)
inherit owner = yes
# наследовать ACL
inherit acls = yes
# наследовать права
inherit permissions = yes
#позволяет редактору прав из винды корректно обрабатывать наследуемые права
map acl inherit = yes
# блокировки
locking = no
vfs objects = full_audit
full_audit:facility = local5
full_audit:priority = notice
full_audit:prefix = share=%S; id=%U; ip=%I -->
full_audit:success = unlink rmdir mkdir write rename write aio_write pwrite
full_audit:failure = unlink rmdir mkdir write rename write aio_write pwrite
full_audit:priority = INFO
[printers]
......

Для автоматического монтирования прописываем в файле /etc/fstab запись такого вида для раздела с параметром acl:

UUID         /share ext3 acl 1 2

После перезагрузки системы можно будет использовать ACL на данной файловой системе. Для проверки того установлен ли флаг acls для файловой системы, используйте команду mount без параметров:

$ mount
mount
.. ..
/dev/sda6 on /share type ext3 (rw,acl)

У этого метода есть один(возможно и не один :) ) недостаток, любой пользователь обладающий определенным уровенем доступа, может удалить параметр ACL из файла /etc/fstab и в результате файловая система после перезагрузки системы будет без поддержки ACL.