pamusb breaks vsftpd system auth

[mcdope]

By default vsftpd (at least on Ubuntu) uses normal user accounts configured in the system, and all the PAM modules configured in common-auth.

For some reason pamusb causes a crash in vsftpd and prevents successful authentication. I had to create copy of /etc/pam.d/common-auth not containing pamusb and include that copy instead of common-auth in vsftpd pam config.

[mcdope]

Can't reproduce crash so far, however - returning "denied" definitely prevents password auth of system users.

[mcdope]

This could actually point to pam.c:73. Guess we should return PAM_IGNORE or maybe PAM_AUTHINFO_UNAVAIL instead of PAM_AUTH_ERR in case we aren't sure about remoteness...

edit In #51 we introduced the 0 state for being local which is used for unknown remoteness and return as PAM_AUTH_ERR

[mcdope]

interesting... even with PAM_IGNORE returned vsftpd won't continue with pam_unix...

[mcdope]

Hmpf... This simply shouldn't happen with a sufficient module.

That PAM_IGNORE didn't changed anything isn't that surprising actually since sufficient translates to [success=done new_authtok_reqd=done default=ignore].

But nonetheless - pam should just continue with pam_unix... Guess this need some serious debugging galore...

[mcdope]

Note for myself: recheck - maybe the fix for #115 also fixed this. not exactly likely, but still...