"If a user tries to log in using a name in this file, they will be denied before they are asked for a password." - Yeah, that is the problem. The user can now see that the username is not valid. We really need an option here to prompt for password before failing.
-- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/672328 Title: vsftpd: discloses whether usernames are valid or not -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
