On Fri, Jul 10, 2009 at 3:17 PM, Eugene Vilensky<evilensky@xxxxxxxxx> wrote:
> Hi folks,
> I can't seem to log into my system via
> vsftpd. All other services using PAM are fine...Am I missing something simple?
> ftp> user
> (username) user
> 331 Please specify the password.
> Password:
> 530 Login incorrect.
>
>
> # getenforce
> Permissive
> here is the event in /var/log/audit/audit.log:
> type=USER_AUTH msg=audit(1247235151.569:9781): user pid=21052 uid=0 auid=0
> subj=root:system_r:ftpd_t:s0 msg='PAM: authentication acct="user" :
> exe="/usr/sbin/vsftpd" (hostname=hostname, addr=1.2.3.4, terminal=ftp
> res=failed)'
> cat /etc/pam.d/vsftpd
> #%PAM-1.0
> session optional pam_keyinit.so force revoke
> auth required pam_listfile.so item=user sense=deny
> file=/etc/vsftpd/ftpusers onerr=succeed
> auth required pam_shells.so
> auth include system-auth
> account include system-auth
> session include system-auth
> session required pam_loginuid.so
> # grep local /etc/vsftpd/vsftpd.conf
> local_enable=YES
> local_umask=022
> chroot_local_user=YES
> # getsebool -a | grep ftp
> allow_ftpd_anon_write --> off
> allow_ftpd_full_access --> off
> allow_ftpd_use_cifs --> off
> allow_ftpd_use_nfs --> off
> allow_tftp_anon_write --> off
> ftp_home_dir --> on
> ftpd_disable_trans --> off
> ftpd_is_daemon --> on
> httpd_enable_ftp_server --> off
> tftpd_disable_trans --> off
>
>
> _______________________________________________
> CentOS mailing list
> CentOS@xxxxxxxxxx
> http://lists.centos.org/mailman/listinfo/centos
>
>
Is the user's shell listed in /etc/shells?
_______________________________________________
CentOS mailing list
CentOS@xxxxxxxxxx
http://lists.centos.org/mailman/listinfo/centos
