ProFTPD module mod_ident

RFC1413 Identification Support

The mod_ident module is ProFTPD's module for performing lookups of authenticated user IDs, as per RFC 1413.

This module is contained in the mod_ident.c file for ProFTPD 1.3.x, and is compiled by default. See the installation section for more details.

The most current version of mod_ident can be found in the ProFTPD source distribution:



Syntax: IdentLookups on|off
Default: IdentLookups on
Context: server config, <VirtualHost>, <Global>
Module: mod_ident
Compatibility: 1.3.2rc1

The IdentLookups directive enables or disables the module's lookup of an "authenticated" user identity using RFC1413.

Normally, when a client initially connects to ProFTPD, the mod_ident will attempt to use the ident protocol (RFC1413) to identify the remote username. This behavior can be disabled via this directive:

  IdentLookups off
Not that this lookup can cause delays (and reports of "slow logins") when clients connect to ProFTPD.


The mod_ident module is compiled into proftpd by default. To build a proftpd which does not include the mod_ident module, use:
  $ ./configure --disable-ident ...
Note that the mod_ident module can also be built as a shared module, rather than be statically linked into proftpd:
  $ ./configure --enable-dso --with-shared=mod_ident ...

The mod_ident module supports trace logging, via the module-specific log channels:

Thus for trace logging, to aid in debugging, you would use the following in your proftpd.conf:
  TraceLog /path/to/ftpd/trace.log
  Trace ident:20
This trace logging can generate large files; it is intended for debugging use only, and should be removed from any production configuration.

© Copyright 2008-2016 TJ Saunders
All Rights Reserved