PAM not playing nicely with vsftpd and pam_exec.so

Jason Gerfen jason.gerfen at utah.edu
Thu Dec 25 07:09:53 UTC 2014


You could always that directive to common-session and try.


On Dec 24, 2014, at 11:01 PM, "Chip" <jeffschips at gmail.com<mailto:jeffschips at gmail.com>> wrote:


I've researched this feature extensively and need help. PAM is a difficult authentication program for me to thoroughly understand although I'm learning.

Running Debian Wheezy.

Have pam setup to trigger off an email when users login using sshd -- that works fine.  No problem using this command in the /etc/pam.d/sshd file:

session    optional     pam_exec.so /usr/local/bin/notify.sh

However, I need it to work with vsftpd and getting it to work with sshd was just a test.  However, I can't get it to work with vsftpd, the contents of /etc/pam.d/vsftpd are:

auth    required        pam_listfile.so item=user sense=deny file=/etc/ftpusers onerr=succeed
@include common-account
@include common-session
@include common-auth
session    optional     pam_exec.so /usr/local/bin/notify-login.sh

What am I missing here?  Is pam even designed to work with vsftpd?  Running the following command indicates it's hooked into vsftpd, but pam_exec.so doesn't seem to want to play nicely with vsftpd.

$ ldd /{,usr/}{bin,sbin}/* | grep -B 5 libpam | grep '^/'
/bin/login:
/bin/su:
/sbin/mkhomedir_helper:
/sbin/pam_tally2:
/usr/bin/chfn:
/usr/bin/chsh:
/usr/bin/c_rehash:
/usr/bin/crontab:
/usr/bin/passwd:
/usr/sbin/aspell-autobuildhash:
/usr/sbin/atd:
/usr/sbin/chpasswd:
/usr/sbin/cron:
/usr/sbin/newusers:
/usr/sbin/sshd:
/usr/sbin/vsftpd:


_______________________________________________
Pam-list mailing list
Pam-list at redhat.com<mailto:Pam-list at redhat.com>
https://www.redhat.com/mailman/listinfo/pam-list
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/pam-list/attachments/20141225/8bc39ae5/attachment.htm>


More information about the Pam-list mailing list