RE: pam_authz_search $tty

["Lakshmi Narasimhan, Premkumar (RIS-ORL)" <Premkumar.Narasimhan [at] lexisnexis.com>]

Hi Arthur,

I am using VFTPD for FTP service. Still I am not able to figure out how the 
PAM_TTY is set from the service. I would appreciate if you can provide some 
pointers.

Thanks,
Prem

-----Original Message-----
From: Lakshmi Narasimhan, Premkumar (RIS-ORL) 
Sent: Wednesday, March 30, 2016 4:15 PM
To: 'Arthur de Jong'; nss-pam-ldapd-users@lists.arthurdejong.org
Subject: RE: pam_authz_search $tty

Thanks Arthur for providing more insight. I will investigate further.

Thanks,
Prem

-----Original Message-----
From: Arthur de Jong [arthur [at] arthurdejong.org]
Sent: Wednesday, March 30, 2016 3:52 PM
To: Lakshmi Narasimhan, Premkumar (RIS-ORL); 
nss-pam-ldapd-users@lists.arthurdejong.org
Subject: Re: pam_authz_search $tty

On Tue, 2016-03-29 at 21:47 +0000, Lakshmi Narasimhan, Premkumar (RIS-
ORL) wrote:
> I have question on PAM_AUTHZ_SEARCH variable references  $tty. I am 
> always getting tty=ftp if I connect FTP or FTPS.  Is there a way I can 
> differentiate if the user is connected via SSL?

The $service, $ruser, $rhost and $tty paramters are generally set by the 
application that is calling the PAM stack. This means that your FTP server 
should probably set another value for tty (PAM_TTY).

Kind regards,

--
-- arthur - arthur@arthurdejong.org - http://arthurdejong.org/ --



---------------------------------------- The information contained in this 
e-mail message is intended only for the personal and confidential use of the 
recipient(s) named above. This message may be an attorney-client communication 
and/or work product and as such is privileged and confidential. If the reader 
of this message is not the intended recipient or an agent responsible for 
delivering it to the intended recipient, you are hereby notified that you have 
received this document in error and that any review, dissemination, 
distribution, or copying of this message is strictly prohibited. If you have 
received this communication in error, please notify us immediately by e-mail, 
and delete the original message.  
-- 
To unsubscribe send an email to
nss-pam-ldapd-users-unsubscribe@lists.arthurdejong.org or see
http://lists.arthurdejong.org/nss-pam-ldapd-users/