Date: 05 Mar 2002 16:46:54 -0700 From: John-David Childs <freebsd@nterprise.net> To: freebsd-questions@freebsd.org Subject: pw EXPIRE field not honored by FTP/PAM (again)? Message-ID: <1015372014.14115.188.camel@lohr>
next in thread | raw e-mail | index | archive | help
PR bin/20952 seems to have reared its ugly head again. I'm using
password *and* account expire on an FTP server...but neither the
standard ftpd NOR proftpd honor an expired account, even though
sshd/login do.
Relevant entries in /etc/pam.conf
# If the user can authenticate with S/Key, that's sufficient; allow
# clear password. Try kerberos, then try plain unix password.
login auth sufficient pam_skey.so
login auth requisite pam_cleartext_pass_ok.so
#login auth sufficient pam_kerberosIV.so
try_first_pass
login auth required pam_unix.so
try_first_pass
login account required pam_unix.so
login password required pam_permit.so
login session required pam_permit.so
# Same requirement for ftpd as login
ftpd auth sufficient pam_skey.so
ftpd auth requisite pam_cleartext_pass_ok.so
#ftpd auth sufficient pam_kerberosIV.so
try_first_pass
ftpd auth required pam_unix.so
try_first_pass
THE NEXT THREE LINES are the only diff to /etc/pam.conf version 1.6.2.13
(RELENG_4 and RELEASE-4-5-0). I was trying to set ftpd up *exactly* as
login. I've tried with and without these lines:
ftpd account required pam_unix.so
ftpd password required pam_permit.so
ftpd session required pam_permit.so
I've also tried adding "ftp" (in addition to "ftpd") lines in
/etc/pam.conf (for proftpd, even though the ports version changes
mod_pam.c to use "ftpd").
Heres the user I'm testing with:
taliacyn:/usr/local/libexec>pw usershow xfertest -P
Login Name: xfertest #100 Group: users
#100
Full Name: Xfertest
Home: /home/xfertest Class:
Shell: /bin/sh Office: [None]
Work Phone: [None] Home Phone: [None]
Acc Expire: Tue Mar 5 2002 00:00:00 Pwd Expire: Mon Mar 4 2002
15:45:19
Before I submit a PR, I want to double-check with this list that I'm not
doing something wrong...and/or that someone else can verify this report.
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1015372014.14115.188.camel>