| View previous topic :: View next topic |
| Author |
Message |
Fred Krogh
Veteran
Joined: 07 Feb 2005
Posts: 1036
Location: Tujunga, CA
|
 Posted: Sat Jul 19, 2008 7:52 pm Post subject: vsftpd not checking passwords? |
 |
|
I have vdftpd set up with "anonymous_enable=NO" and "local_enable=YES". If I ftp to the machine, and type a random string for the user and a random password, it will not login. However with a valid user name, any password is accepted. This does not seem ideal to me. Any suggestions? Thanks,
Fred |
|
| Back to top |
|
 |
bunder
Bodhisattva
Joined: 10 Apr 2004
Posts: 5956
|
| Posted: Sun Jul 20, 2008 2:18 am Post subject: |
|
|
what are the contents of /etc/pam.d/ftp and /etc/pam.d/system-auth?
cheers
edit: and is vsftpd set to use pam?
_________________
| Neddyseagoon wrote: | | The problem with leaving is that you can only do it once and it reduces your influence. |
banned from #gentoo since sept 2017 |
|
| Back to top |
|
|
Fred Krogh
Veteran
Joined: 07 Feb 2005
Posts: 1036
Location: Tujunga, CA
|
| Posted: Sun Jul 20, 2008 4:47 am Post subject: |
|
|
There is no file ftp in /etc/pam.d, and system-auth contains | Quote: | auth required pam_env.so
auth optional pam_gnome_keyring.so
auth sufficient pam_unix.so try_first_pass likeauth nullok
account required pam_unix.so
password required pam_cracklib.so difok=2 minlen=8 dcredit=2 ocredit=2 try_first_pass retry=3
password sufficient pam_gnome_keyring.so
password required pam_unix.so try_first_pass use_authtok nullok md5 shadow
session required pam_limits.so
session optional pam_gnome_keyring.so auto_start
session required pam_env.so
session required pam_unix.so |
I don't know how to tell if vsftpd is set up to use pam, but there is no[/code] mention in vsftpd.conf of pam or of vsftpd in the above. Thanks for looking.
Fred |
|
| Back to top |
|
|
|
Networking & Security
