"If a user tries to log in using a name in this file, they will be denied before they are asked for a password." - Yeah, that is the problem. The user can now see that the username is not valid. We really need an option here to prompt for password before failing.
-- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to vsftpd in ubuntu. https://bugs.launchpad.net/bugs/672328 Title: vsftpd: discloses whether usernames are valid or not -- Ubuntu-server-bugs mailing list [email protected] Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
