Bug 462204

Summary:	net-ftp/ftpbase: /etc/pam.d/ftp assumes the existence of pam_listfile.so which is not installed by sys-freebsd/freebsd-pam-modules
Product:	Gentoo/Alt	Reporter:	Dmitri Bogomolov <4glitch>
Component:	FreeBSD	Assignee:	Gentoo/BSD Team <bsd+disabled>
Status:	RESOLVED FIXED
Severity:	minor
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	FreeBSD
Whiteboard:
Package list:		Runtime testing required:	---

Description Dmitri Bogomolov 2013-03-18 14:00:07 UTC

There is a line in /etc/pam.d/ftp:

  auth     required  pam_listfile.so item=user sense=deny file=/etc/ftpusers onerr=succeed

which causes a warning in log like this:

  proftpd: in openpam_dynamic(): /lib/security/pam_listfile.so: No such file or directory

/lib/security/pam_listfile.so comes from sys-libs/pam on Linux. There is a  /lib/security/pam_ftpusers.so on FreeBSD which comes from sys-freebsd/freebsd-pam-modules with other syntax. This line probably should be:

  auth     required  pam_ftpusers.so no_warn disallow

It works for me, but in that case I get another warnings:

  proftpd: in openpam_dispatch(): pam_ftpusers.so: no pam_sm_authenticate()
  proftpd: in openpam_check_error_code(): pam_sm_authenticate(): unexpected return value 4

Reproducible: Always

Comment 1 Naohiro Aota gentoo-dev

2013-11-30 13:36:38 UTC

Using "account" instead of "auth" is correct. I've just added the fix into the tree.

+  30 Nov 2013; Naohiro Aota <naota@gentoo.org> ftpbase-0.01-r2.ebuild:
+  Use pam_ftpusers on FreeBSD. #462204