Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 28 Sep 1999 22:52:11 -0600
From:      "K. Gunderson" <kgun@iacan.org>
To:        Kenneth Wayne Culver <culverk@wam.umd.edu>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: proftpd and PAM
Message-ID:  <19990928225211.A13162@mark.iacan.org>
In-Reply-To: <Pine.GSO.4.10.9909281019090.15163-100000@rac9.wam.umd.edu>; from Kenneth Wayne Culver on Tue, Sep 28, 1999 at 10:19:48AM -0400
References:  <19990928012500.A11176@mark.iacan.org> <Pine.GSO.4.10.9909281019090.15163-100000@rac9.wam.umd.edu>

next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, Sep 28, 1999 at 10:19:48AM -0400, Kenneth Wayne Culver wrote:
> 
> > On Mon, Sep 27, 1999 at 06:33:58PM +0800, Francis A. Vidal wrote:
> > > hi all,
> > > 
> > > i couldn't get an ordinary user authenticate on FTP using proftpd. i get
> > > error messages in /var/log/messages:
> > > 
> > > 	PAM(username): Authentication failure
> > > 	USER username: incorrect password from localhost.usls.edu \
> > > 		[127.0.0.1] to 127.0.0.1:21
> > > 
> > > what should i add in /etc/pam.conf? i only have the default entries from
> > > the 3.3-RELEASE CD.
> > > 
> > > -- 
> > > francis vidal   university of st. la salle, bacolod city, philippines
> > > . . . . . . .   PGP key available via e-mail / subject: get PGP key
> > > u s l s N E T   tel. nos. (6334).435.2324 / 433.3526
> > 
> > I ditched ProFTP since the bug fest, but I think you need to add the
> > following:
> > 
> > 
> > ftp auth    required	pam_unix.so         try_first_pass
> > ftp account required    pam_unix.so         try_first_pass
> > ftp session required    pam_unix.so         try_first_pass
> > 
> > -- 
> > Ciao--Ken
> > http://www.y2know.org/safari
> > 
> > Failure is not an option, it comes bundled with your Microsoft product.
> > 
> > 
> > To Unsubscribe: send mail to majordomo@FreeBSD.org
> > with "unsubscribe freebsd-questions" in the body of the message
> > 
> The bugs have been fixed with the latest version.
> 
> Kenneth Culver
> 

Well, that depends greatly on who you talk to.  I am optimistic that
ProFTP will eventually get things back under control, but am not trusting it for a
while longer yet.  I'm no security guru, but word from others
who are is that the code is pretty hosed.  So in the meantime I'd rather
be safe than sorry. 

-- 
Ciao--Ken
http://www.y2know.org/safari

Failure is not an option, it comes bundled with your Microsoft product.


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?19990928225211.A13162>