Problems with VSFTP authenticating agains LDAP



Hi !!!!

I have a computer where I've installed SuSE Linux 10.1 I'm configuring
there vsftpd, launched from xinetd. Right out of the box i was able to
load and download files. Then I've moved to authenticating against my
LDAP server and troubles started.

My /etc/pam.d/vsftpd file has this lines:

#%PAM-1.0
auth required pam_listfile.so item=user sense=deny
file=/etc/ftpusers onerr=succeed
auth sufficient pam_ldap.so
auth required pam_unix.so
auth required pam_shells.so

account sufficient pam_ldap.so
account required pam_unix.so

password sufficient pam_ldap.so
password required pam_unix.so

session sufficient pam_ldap.so
session required pam_unix.so

When I connect to the server I authenticate succesfully, when trying to
upload a file I get:
put yast.schema
local: yast.schema remote: yast.schema
229 Entering Extended Passive Mode (|||29292|)
550 Permission denied

I'm lost with this problem, any help will be appreciated.

.



Relevant Pages

  • root authentication problem with LDAP
    ... I'm using openLDAP to authenticate users in my network, the problem I have is that when the LDAP server is down or unreachable, I cannot login as root, although is a local user, that's a complication to me when I have to work in a server that has lost the connection to the network. ... account sufficient pam_succeed_if.so uid < 500 quiet ... password sufficient pam_unix.so md5 shadow nullok try_first_pass use_authtok ...
    (Fedora)
  • Re: Fedora Core 5 LDAP client authentication problem with Solaris 9 iPlanet LDAP Server
    ... These 3 attributes in /etc/ldap.conf are commented out with a #, hence I do not think they are causing the problem. ... account sufficient pam_succeed_if.so uid < 500 quiet ... password sufficient pam_ldap.so use_authtok ...
    (Fedora)
  • RE: Cant authenticate to LDAP domain with Redhat9
    ... account sufficient /lib/security/pam_ldap.so ... password sufficient /lib/security/pam_unix.so nullok md5 shadow ... Cant authenticate to LDAP domain with Redhat9 ... > unsubscribe mailto:redhat-list-request@redhat.com?subject=unsubscribe ...
    (RedHat)
  • PAM/LDAP authentication
    ... the proper answer back from the LDAP server. ... The only thing that's not working is authentication. ... account sufficient pam_ldap.so ignore_unknown_user ... Mar 16 10:59:54 xxx sshd: Illegal user radu from ...
    (Debian-User)
  • PAM/LDAP authentication
    ... the proper answer back from the LDAP server. ... The only thing that's not working is authentication. ... account sufficient pam_ldap.so ignore_unknown_user ... Mar 16 10:59:54 xxx sshd: Illegal user radu from ...
    (Debian-User)