Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 19 May 2009 13:44:22 -0400
From:      alexus <alexus@gmail.com>
To:        Nikos Vassiliadis <nvass9573@gmx.com>
Cc:        "freebsd-questions@freebsd.org" <freebsd-questions@freebsd.org>
Subject:   Re: proftpd TLS
Message-ID:  <6ae50c2d0905191044r4767b9a6pb824e4c70cbdffa6@mail.gmail.com>
In-Reply-To: <4A115183.8080100@gmx.com>
References:  <6ae50c2d0905171301y2d92a7b1mc3598295de12ecc2@mail.gmail.com> <4A115183.8080100@gmx.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, May 18, 2009 at 8:16 AM, Nikos Vassiliadis <nvass9573@gmx.com> wrote:
> alexus wrote:
>>
>> i just enable TLS for my proftpd and in tls.log I'm getting following
>> messages
>>
>> mod_tls/2.2.1[45739]: error locking passphrase into memory: Operation
>> not permitted
>> mod_tls/2.2.1[45739]: TLS/TLS-C requested, starting TLS handshake
>
> From the error message, I can suspect that proftpd tries to
> use mlock(2) to lock some page in physical memory. That's
> typical behavior with programs dealing with sensitive data,
> as passwords. The mlock system call can only by used by the
> superuser. Is proftpd running with superuser privileges?
>
> Nikos
>

i start it as a root, but it switchs to non-root

nobody 52346  0.0  0.1 11820  4208  ??  SsJ  Sun06PM   0:00.66
proftpd: (accepting connections) (proftpd)

-- 
http://alexus.org/



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?6ae50c2d0905191044r4767b9a6pb824e4c70cbdffa6>