Bug#977107: [Gente-ctu] Bug#977107: proftpd-basic: Cannot login after upgrade from jessie to stretch then to buster

[Francesco P. Lovergine]

On Sun, Dec 13, 2020 at 11:03:07PM -0300, Hostmaster FCEIA-UNR wrote:
>Hello. Sorry for the delay. I was on a trip this weekend.
>
>I´m not using  "AuthUsingAlias", just "AuthAliasOnly".

Yep, I found that both directives give problems.

>I have a near default proftpd.conf and then ( in a file included from 
>conf.d with) 400 users defined by the snippet I already sent (without 
>AuthUsingAlias, as told before).
>
>Well, removing all AuthAliasOnly from the configuration, started to 
>work as expected.
>
>What I still don´t understand is if it is a bug or a configuration error.
>
>Do you still need my proftpd.conf ?
>

No thanks, it is a bug because intended behavior is different, and it
is confirmed by using a simple configuration.  The only strange thing
is that I found the same issue in jessie (latest from LTS security branch)
1.3.5e+r1.3.5-2+deb8u7, so the last working one was probably 1.3.5-1.1+deb8u2? 

Note: Apparently a similar issue as for #4255 has been fixed in 1.3.5c and 
1.3.6rc1, so it is definitively weird.

-- 
Francesco P. Lovergine