I think setting up an LDAP server for authentication would be the best way to go. Either switch the internet users to LDAP and integrate that with the FTP server or switch the Postfix authentication to LDAP and leave the other users as local. Whichever is easier.