The patch you supplied is not correct. Much more invasive patching is needed for proper behavior.
The attached patch should be the correct one in conformance with the manual page.
Linux PAM developers please review and give OK to commit.
Tomas Mraz
On Út, 2016-05-24 at 21:35 +0000, linux-pam wrote:
#61: pam_ftp 'users=' can only accept one user account ----------------------+------------------------------ Reporter: purecfs | Owner: pam-developers@… Type: defect | Status: new Priority: major | Component: modules Version: | Keywords: pam_ftp Blocked By: | Blocking: ----------------------+------------------------------ While the documentation says that for the pam_ftp module, multiple "anonymous" users can be defined separated by a comma. However, in practice this fails because PAM_USER is changed from the username to the user name list specified causing subsequent modules to fail (like pam_unix).
Here's a fix:
{{{ --- Linux-PAM-1.3.0-orig/modules/pam_ftp/pam_ftp.c 2016-05-24 14:33:39.000000000 -0700 +++ Linux-PAM-1.3.0/modules/pam_ftp/pam_ftp.c 2016-05-24 14:33:56.000000000 -0700 @@ -86,7 +86,6 @@ while (list_copy && (l = strtok_r(x, ",", &sptr))) { x = NULL; if (!strcmp(name, l)) { - *_user = list; anon = 1; } } }}}