---
name: "pam_ftp"
section: "8"
platform: "linux"
package: "pam"
version: "1.7.3-1"
release: "Arch Linux 2026-11-01"
platforms: ["linux"]
url: "https://new.carta.tech/pam_ftp"
---

# pam\_ftp(8)

PAM module for anonymous access module

## NAME

pam\_ftp - PAM module for anonymous access module

## SYNOPSIS

**pam\_ftp.so** \[debug\] \[ignore\] \[users=*XXX,YYY,*...\]

## DESCRIPTION

pam\_ftp is a PAM module which provides a pluggable anonymous ftp mode of access.

This module intercepts the user's name and password. If the name is *ftp* or *anonymous*, the user's password is broken up at the *@* delimiter into a *PAM\_RUSER* and a *PAM\_RHOST* part; these pam-items being set accordingly. The username (*PAM\_USER*) is set to *ftp*. In this case the module succeeds. Alternatively, the module sets the *PAM\_AUTHTOK* item with the entered password and fails.

This module is not safe and easily spoofable.

## OPTIONS

debug

Print debug information.

ignore

Pay no attention to the email address of the user (if supplied).

ftp=XXX,YYY,...

Instead of *ftp* or *anonymous*, provide anonymous login to the comma separated list of users: *XXX,YYY,...*. Should the applicant enter one of these usernames the returned username is set to the first in the list: *XXX*.

## MODULE TYPES PROVIDED

Only the **auth** module type is provided.

## RETURN VALUES

PAM\_SUCCESS

The authentication was successful.

PAM\_USER\_UNKNOWN

User not known.

## EXAMPLES

Add the following line to /etc/pam.d/ftpd to handle ftp style anonymous login:

```
#
# ftpd; add ftp-specifics. These lines enable anonymous ftp over
#       standard UN*X access (the listfile entry blocks access to
#       users listed in /etc/ftpusers)
#
auth    sufficient  pam_ftp.so
auth    required    pam_unix.so use_first_pass
auth    required    pam_listfile.so \
           onerr=succeed item=user sense=deny file=/etc/ftpusers
```

## SEE ALSO

[**pam.conf**(5)](/pam.conf/5.md), [**pam.d**(5)](/pam.d/5.md), [**pam**(8)](/pam/8.md)

## AUTHOR

pam\_ftp was written by Andrew G. Morgan \<morgan@kernel.org\>.