Re: [Proftpd-user] Authentication with mod_sftp via PAM + SSSD not work with error "(Login failed): No such user found" if -DTLS enable

Il giorno mar, 04/07/2023 alle 13.03 +0200, Dario Lesca ha scritto:
> If I run proftpd without -DTLS option SFTP work also for AD users who
> access with our password.

Now also if I disable TLS the AD users cannot connect, while the
connection without TLS on FTP protocol continues to work

This is the output of debug set to 10 during a connection: [1]

The Linux is a Red Hat 8.5 and the proftpd version is 1.3.6e

Let me know if someone have suggest.

Many thanks

Dario

[1] Debug:

 - session requested from client in unknown class
 - performing module session initializations
 - ROOT PRIVS at mod_sftp.c:2050
 - RELINQUISH PRIVS at mod_sftp.c:2053
 - ROOT PRIVS at keys.c:2299
 - RELINQUISH PRIVS at keys.c:2306
 - ROOT PRIVS at keys.c:808
 - RELINQUISH PRIVS at keys.c:815
 - ROOT PRIVS at keys.c:808
 - RELINQUISH PRIVS at keys.c:815
 - ROOT PRIVS at keys.c:2299
 - RELINQUISH PRIVS at keys.c:2306
 - mod_cap/1.1: adding CAP_SETUID and CAP_SETGID capabilities
 - mod_cap/1.1: adding CAP_AUDIT_WRITE capability
 - ROOT PRIVS at mod_tls.c:5089
 - RELINQUISH PRIVS at mod_tls.c:5092
 - mod_ident/1.0: ident lookup disabled
 - ROOT PRIVS at mod_auth.c:215
 - opening scoreboard '/run/proftpd/proftpd.scoreboard'
 - RELINQUISH PRIVS at mod_auth.c:217
 - connected - local  : ::ffff:10.39.17.248:39002
 - connected - remote : 10.39.2.125:51117
 - SSH2 session opened.
 - dispatching LOG_CMD command 'KEXINIT' to mod_log
 - dispatching LOG_CMD command 'ECDH_INIT' to mod_log
 - dispatching LOG_CMD command 'NEWKEYS' to mod_log
 - dispatching LOG_CMD command 'SERVICE_REQUEST' to mod_log
 - dispatching PRE_CMD command 'USER dario.lesca.e' to mod_tls
 - dispatching PRE_CMD command 'USER dario.lesca.e' to mod_core
 - dispatching PRE_CMD command 'USER dario.lesca.e' to mod_delay
 - dispatching PRE_CMD command 'USER dario.lesca.e' to mod_auth
 - dispatching POST_CMD command 'USER dario.lesca.e' to mod_delay
 - dispatching LOG_CMD command 'USER dario.lesca.e' to mod_log
 - dispatching LOG_CMD command 'USER dario.lesca.e' to mod_delay
 - dispatching LOG_CMD command 'USERAUTH_REQUEST dario.lesca.e none' to mod_log
 - dispatching PRE_CMD command 'USER dario.lesca.e' to mod_tls
 - dispatching PRE_CMD command 'USER dario.lesca.e' to mod_core
 - dispatching PRE_CMD command 'USER dario.lesca.e' to mod_delay
 - dispatching PRE_CMD command 'USER dario.lesca.e' to mod_auth
 - dispatching POST_CMD command 'USER dario.lesca.e' to mod_delay
 - dispatching LOG_CMD command 'USER dario.lesca.e' to mod_log
 - dispatching LOG_CMD command 'USER dario.lesca.e' to mod_delay
 - dispatching PRE_CMD command 'PASS (hidden)' to mod_tls
 - dispatching PRE_CMD command 'PASS (hidden)' to mod_core
 - dispatching PRE_CMD command 'PASS (hidden)' to mod_ifsession
 - retrieved UID 1550611901 for user 'dario.lesca.e'
 - retrieved group 'dario.lesca.e' for GID 1550611901
 - retrieved group IDs: 1550611901, 327617107, 1550611240, 1550600513
 - retrieved group names: dario.lesca.e, [email protected], domain users
 - dispatching PRE_CMD command 'PASS (hidden)' to mod_vroot
 - mod_vroot/0.9.5: vroot registered
 - dispatching PRE_CMD command 'PASS (hidden)' to mod_delay
 - dispatching PRE_CMD command 'PASS (hidden)' to mod_auth
 - retrieved UID 1550611901 for user 'dario.lesca.e'
 - ROOT PRIVS at mod_auth_pam.c:348
 - RELINQUISH PRIVS at mod_auth_pam.c:582
 - ROOT PRIVS at mod_auth_unix.c:497
 - mod_auth_unix: getspnam(3) for user 'dario.lesca.e' error: Success
 - RELINQUISH PRIVS at mod_auth_unix.c:589

***
 - USER dario.lesca.e (Login failed): No such user found
***

 - dispatching POST_CMD_ERR command 'PASS (hidden)' to mod_vroot
 - mod_vroot/0.9.5: vroot unregistered
 - dispatching POST_CMD_ERR command 'PASS (hidden)' to mod_delay
 - dispatching LOG_CMD_ERR command 'PASS (hidden)' to mod_log
 - dispatching LOG_CMD_ERR command 'PASS (hidden)' to mod_delay
 - dispatching LOG_CMD_ERR command 'PASS (hidden)' to mod_auth
 - dispatching LOG_CMD command 'USERAUTH_REQUEST dario.lesca.e password' to mod_log
 - mod_sftp/1.0.0: scrubbing 2 passphrases from memory
 - SSH2 session closed.



_______________________________________________
ProFTPD Users List   <[email protected]>
Unsubscribe problems?
http://www.proftpd.org/list-unsub.html