Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 17 May 2002 17:40:31 -0400
From:      "Eric L. Howard" <elh@outreachnetworks.com>
To:        FreeBSD Stable List <freebsd-stable@FreeBSD.ORG>
Subject:   Re: ftpd issues?
Message-ID:  <20020517174031.B23987@outreachnetworks.com>
In-Reply-To: <20020517074603.A98560@blackhelicopters.org>; from mwlucas@blackhelicopters.org on Fri, May 17, 2002 at 07:46:03AM -0400
References:  <20020516144322.C16254@outreachnetworks.com> <20020517074603.A98560@blackhelicopters.org>

next in thread | previous in thread | raw e-mail | index | archive | help
At a certain time, now past, Michael Lucas spake thusly:
> Eric,
> 
> I don't think anything changed with ftpd in 4.5-p4.

I'm not so sure just yet, I'm looking further...and I got an email from
someone experiencing the same problem.  He loaded up another ftp daemon
because of time limits for debugging.

> You might start ftpd with -d flag, and then add a line like this to
> /etc/syslog.conf:
> 
> ftp.*			/var/log/ftpd
> 
> This should give you a better idea of what's wrong, or where
> authentication failing.

Yeah..that didn't give me any info...but I played around w/ the pam config a
bit more.  The default for ftpd in /etc/pam.conf looks like (and _doesn't_
work for me):

ftpd  auth    sufficient      pam_skey.so
ftpd  auth    requisite       pam_cleartext_pass_ok.so
#ftpd   auth    sufficient      pam_kerberosIV.so       try_first_pass
ftpd  auth    required        pam_unix.so             try_first_pass

I worked up the following - and it works for me...:
ftpd    auth    sufficient      pam_skey.so
#ftpd   auth    requisite       pam_cleartext_pass_ok.so
#ftpd   auth    sufficient      pam_kerberosIV.so       try_first_pass
ftpd    auth    required        pam_unix.so             try_first_pass

In fact..multiple combinations of the immediate above work...as long as the
pam_cleartext_pass_ok.so module is not included.  I have yet to play w/ the
control for pam_cleartext_pass_ok.so.

> ==ml
> 
> (sheesh... fix problems for a guy back in 1997, and he keeps coming
> around years later... ;-)

hey!...all that BGP stuff was so new to me back then! I've since broken
and fixed much bigger networks :-)

       ~elh

-- 
Eric L. Howard           e l h @ o u t r e a c h n e t w o r k s . c o m
------------------------------------------------------------------------
www.OutreachNetworks.com                                    313.297.9900
------------------------------------------------------------------------
                    Advocate of the Theocratic Rule

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020517174031.B23987>