PAM not playing nicely with vsftpd and pam_exec.so

Chip <jeffschips@xxxxxxxxx> · Thu, 25 Dec 2014 00:55:38 -0500



    I've researched this feature extensively and need help.
      PAM is a difficult authentication program for me to thoroughly
      understand although I'm learning.
    Running Debian Wheezy.

    
    Have pam setup to trigger off an email when users login
      using sshd -- that works fine.  No problem using this command in
      the /etc/pam.d/sshd file:

    
    session    optional     pam_exec.so
      /usr/local/bin/notify.sh

    
    However, I need it to work with vsftpd and getting it to
      work with sshd was just a test.  However, I can't get it to work
      with vsftpd, the contents of /etc/pam.d/vsftpd are:

    
      auth    required        pam_listfile.so item=user sense=deny
      file=/etc/ftpusers _onerr_=succeed

      @include common-account

      @include common-session

      @include common-auth

      session    optional     pam_exec.so /usr/local/bin/notify-login.sh
    What am I missing here?  Is pam even designed to work
      with vsftpd?  Running the following command indicates it's hooked
      into vsftpd, but pam_exec.so doesn't seem to want to play nicely
      with vsftpd.

    
    $ ldd /{,usr/}{bin,sbin}/* | grep -B 5 libpam | grep
      '^/'

      /bin/login:

      /bin/su:

      /sbin/mkhomedir_helper:

      /sbin/pam_tally2:

      /usr/bin/chfn:

      /usr/bin/chsh:

      /usr/bin/c_rehash:

      /usr/bin/crontab:

      /usr/bin/passwd:

      /usr/sbin/aspell-autobuildhash:

      /usr/sbin/atd:

      /usr/sbin/chpasswd:

      /usr/sbin/cron:

      /usr/sbin/newusers:

      /usr/sbin/sshd:

      /usr/sbin/vsftpd:

      
_______________________________________________
Pam-list mailing list
Pam-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/pam-list