Bug 163026

Summary: FTP-Login fails with proftpd
Product: [Fedora] Fedora Reporter: Oliver Voelker <oliver.voelker>
Component: proftpdAssignee: Matthias Saou <matthias>
Status: CLOSED ERRATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: medium Docs Contact:
Priority: medium    
Version: 4CC: tmraz
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2005-08-03 08:51:58 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
/var/log/messages pam-failures
none
correct file /etc/pam.d/ftp
none
pam configuration for vsftpd none

Description Oliver Voelker 2005-07-12 11:14:55 UTC 
From Bugzilla Helper:
User-Agent: Mozilla/5.0 (X11; U; Linux i686; de-DE; rv:1.7.8) Gecko/20050524 Fedora/1.0.4-4 Firefox/1.0.4

Description of problem:
The login via FTP fails on x86_64 systems because of a wrong path in /etc/pam.d/ftp
It links to the 32-bit versions of the pam-libraries.

The result in /var/log/messages is attached.
Changing the path in /etc/pam.d/ftp enabled correct login to the FTP-Service.

Version-Release number of selected component (if applicable):
pam-0.79--8

How reproducible:
Always

Steps to Reproduce:
1. Install proftpd + pam on a x86_64 system
2. login failes
  

Actual Results:  login fails

Expected Results:  succesful login

Additional info:
Comment 1 Oliver Voelker 2005-07-12 11:16:19 UTC 
Created attachment 116648 [details]
/var/log/messages pam-failures
Comment 2 Oliver Voelker 2005-07-12 11:17:22 UTC 
Created attachment 116649 [details]
correct file /etc/pam.d/ftp
Comment 3 Tomas Mraz 2005-07-13 08:44:14 UTC 
The /etc/pam.d/ftp is owned by the proftpd package not pam.

Even your provided ftp file is not right. The correct solution is to remove the
paths completely leaving only the module filenames there. However the file is
wrong also by other means - it uses pam_pwdb but this is not setup by default in
Fedora Core so if you want to use system accounts for logging into the ftp the
/etc/pam.d/ftp should be changed similarly to the /etc/pam.d/vsftpd of the
vsftpd daemon.
Comment 4 Tomas Mraz 2005-07-13 08:45:21 UTC 
Created attachment 116694 [details]
pam configuration for vsftpd
Comment 5 Matthias Saou 2005-07-13 09:24:30 UTC 
Looks like the pam file provided inside the proftpd sources is 64bit
incompatible and got obsolete by now too. I'll test a new proftpd build with a
pam.d file based on the vsftpd one (basically the same, but using the
/etc/ftpusers it always has), and if all goes well, I'll release a new Extras build.
Comment 6 Matthias Saou 2005-08-02 15:09:11 UTC 
The fixed packages are waiting to be signed and be pushed :

http://buildsys.fedoraproject.org/logs/4/305-proftpd-1.2.10-6.fc4/

Things now work for me, but I've only been able to test on i386, so confirmation
that the new pam.d file makes things work on x86_64 would be nice.
Comment 7 Oliver Voelker 2005-08-03 08:16:46 UTC 
the fixes are working on x86_64