The only types of Application Protocols that not provide this 'credential leak' are: SSH and Telnet (or at least, this is what I notice until now). I tried to use also Application Protocol= Console but the 'View Credential' appear in the same way.

Of course, my client not want that the user are able to view the credential using PAM, but use Filezilla with automatic connection to the target system. Subject: PAM 3.3.1 - Service TCP/UPD Filezilla There is a way to configure Filezilla as SERVICE TCP/UDP with sftp connection and with automatic connection (without allow show password or view credential)? If I tried to use an Application Protocol= Console, the connection works properly without any disconnection, but the user have the option of 'View Credential'. If I tried to configure the Application Protocol= TELNET but the port 22, the connection seems to be estabilished but time to time it disconnect the session and reconnect again and this not permit to transfer file properly. I tried a simple connection via Filezilla and I don't have any problem. It seems that PAM not allow SSH TCP service. I tried to configure the service with Application protocol = SSH and during the automatic connection I received the following error:įATAL ERROR: Remote side sent disconnect messageĮrror: FATAL ERROR: Remote side sent disconnect messageĮrror: 'File transfers are not permitted via SSH TCP service.'

I know the OOTB, PAM have embedded sftp during SSH session but my client would like to use his own tool (Filezilla). I would like to know how and if is it possible to configure Filezilla as TCP/UPD Service with autoinjection of credential.

Filezilla port 22 not working