[Bug 672328] Re: vsftpd: discloses whether usernames are valid or not

[Mark Hobley]

I just tried this out. To achieve whitelisting:

userlist_enable=YES
userlist_deny = NO

ftp the server:

ftp neptune
Connected to neptune.markhobley.yi.org.
220 Welcome to Mark Hobley's File Transfer Protocol Server.
Name (neptune:test): test
530 Permission denied. <--- It should ask for a password here
Login failed.
ftp>

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to vsftpd in ubuntu.
https://bugs.launchpad.net/bugs/672328

Title:
  vsftpd: discloses whether usernames are valid or not