pam_ftp(8) — Linux manual page

PAM_FTP(8)                  Linux-PAM Manual                  PAM_FTP(8)

NAME         top

       pam_ftp - PAM module for anonymous access module

SYNOPSIS         top

       pam_ftp.so [debug] [ignore] [users=XXX,YYY,...]

DESCRIPTION         top

       pam_ftp is a PAM module which provides a pluggable anonymous ftp
       mode of access.

       This module intercepts the user's name and password. If the name
       is ftp or anonymous, the user's password is broken up at the @
       delimiter into a PAM_RUSER and a PAM_RHOST part; these pam-items
       being set accordingly. The username (PAM_USER) is set to ftp. In
       this case the module succeeds. Alternatively, the module sets the
       PAM_AUTHTOK item with the entered password and fails.

       This module is not safe and easily spoofable.

OPTIONS         top

       debug
           Print debug information.

       ignore
           Pay no attention to the email address of the user (if
           supplied).

       ftp=XXX,YYY,...
           Instead of ftp or anonymous, provide anonymous login to the
           comma separated list of users: XXX,YYY,.... Should the
           applicant enter one of these usernames the returned username
           is set to the first in the list: XXX.

MODULE TYPES PROVIDED         top

       Only the auth module type is provided.

RETURN VALUES         top

       PAM_SUCCESS
           The authentication was successful.

       PAM_USER_UNKNOWN
           User not known.

EXAMPLES         top

       Add the following line to /etc/pam.d/ftpd to handle ftp style
       anonymous login:

           #
           # ftpd; add ftp-specifics. These lines enable anonymous ftp over
           #       standard UN*X access (the listfile entry blocks access to
           #       users listed in /etc/ftpusers)
           #
           auth    sufficient  pam_ftp.so
           auth    required    pam_unix.so use_first_pass
           auth    required    pam_listfile.so \
                      onerr=succeed item=user sense=deny file=/etc/ftpusers

SEE ALSO         top

       pam.conf(5), pam.d(5), pam(8)

AUTHOR         top

       pam_ftp was written by Andrew G. Morgan <morgan@kernel.org>.

COLOPHON         top

       This page is part of the linux-pam (Pluggable Authentication
       Modules for Linux) project.  Information about the project can be
       found at ⟨http://www.linux-pam.org/⟩.  If you have a bug report
       for this manual page, see ⟨//www.linux-pam.org/⟩.  This page was
       obtained from the project's upstream Git repository
       ⟨https://github.com/linux-pam/linux-pam.git⟩ on 2023-12-22.  (At
       that time, the date of the most recent commit that was found in
       the repository was 2023-12-18.)  If you discover any rendering
       problems in this HTML version of the page, or you believe there
       is a better or more up-to-date source for the page, or you have
       corrections or improvements to the information in this COLOPHON
       (which is not part of the original manual page), send a mail to
       man-pages@man7.org

Linux-PAM Manual               12/22/2023                     PAM_FTP(8)

HTML rendering created 2024-06-26 by Michael Kerrisk, author of The Linux Programming Interface. For details of in-depth Linux/UNIX system programming training courses that I teach, look here. Hosting by jambit GmbH.