packages: proftpd/ftp.pamd - more accurate comments on PAM configuration; s...

[gotar]

Author: gotar                        Date: Sun Jun  7 19:32:34 2009 GMT
Module: packages                      Tag: HEAD
---- Log message:
- more accurate comments on PAM configuration; system-auth for session with
  DefaultRoot would cause:
  pam_succeed_if(ftp:session): error retrieving information about user 0

---- Files affected:
packages/proftpd:
   ftp.pamd (1.10 -> 1.11) 

---- Diffs:

================================================================
Index: packages/proftpd/ftp.pamd
diff -u packages/proftpd/ftp.pamd:1.10 packages/proftpd/ftp.pamd:1.11
--- packages/proftpd/ftp.pamd:1.10	Sun Jun  7 19:25:09 2009
+++ packages/proftpd/ftp.pamd	Sun Jun  7 21:32:29 2009
@@ -3,8 +3,12 @@
 auth		required	pam_listfile.so item=user sense=deny file=/etc/security/blacklist.ftp onerr=succeed
 #auth		required	pam_shells.so
 auth		include		system-auth
+# above line in chroot()ed environment (when using DefaultRoot) causes:
+#	pam_env(ftp:setcred): Unable to open config file: /etc/security/pam_env.conf: No such file or directory
+#	pam_tally(ftp:setcred): pam_get_uid; no such user
+# only with pam_unix in session component
 account		required	pam_nologin.so
 account		include		system-auth
 session		required	pam_limits.so
-# causes errors in chroot()ed environment (when using DefaultRoot)
 session		required	pam_unix.so
+# on logout: PAM audit_log_acct_message() failed: Operation not permitted
================================================================

---- CVS-web:
    http://cvs.pld-linux.org/cgi-bin/cvsweb.cgi/packages/proftpd/ftp.pamd?r1=1.10&r2=1.11&f=u