diff -urNad proftpd-dfsg-1.3.0~/modules/mod_auth_unix.c proftpd-dfsg-1.3.0/modules/mod_auth_unix.c

--- proftpd-dfsg-1.3.0~/modules/mod_auth_unix.c	2005-07-03 20:52:02.000000000 +0200

+++ proftpd-dfsg-1.3.0/modules/mod_auth_unix.c	2007-01-18 12:23:58.000000000 +0100

@@ -669,8 +669,9 @@

 #ifdef COMSEC

   if (iscomsec()) {

-    if (strcmp(bigcrypt((char *) pw, (char *) cpw), cpw) != 0)

-      return ERROR(cmd);

+    if (strcmp(bigcrypt((char *) pw, (char *) cpw), cpw) != 0) {

+      return DECLINED(cmd);

+    }

   } else {

 #endif /* COMSEC */

@@ -719,8 +720,9 @@

   }

   PRIVS_RELINQUISH

-  if (res != SIASUCCESS)

-    return ERROR(cmd);

+  if (res != SIASUCCESS) {

+    return DECLINED(cmd);

+  }

 #else /* !PR_USE_SIA */

@@ -750,11 +752,12 @@

      * other than HANDLED at the moment.

      */

-    if (MODRET_ISHANDLED(mr) && MODRET_HASDATA(mr)) {

+    if (MODRET_ISHANDLED(mr) &&

+        MODRET_HASDATA(mr)) {

       pwent = mr->data;

-      if ((token = cygwin_logon_user((const struct passwd *) pwent,

-          pw)) == INVALID_HANDLE_VALUE) {

+      token = cygwin_logon_user((const struct passwd *) pwent, pw);

+      if (token == INVALID_HANDLE_VALUE) {

         pr_log_pri(PR_LOG_NOTICE, "error authenticating Cygwin user: %s",

           strerror(errno));

         return ERROR(cmd);

@@ -762,14 +765,16 @@

       cygwin_set_impersonation_token(token);

-    } else

+    } else {

       return DECLINED(cmd);

+    }

   } else

 # endif /* CYGWIN */

-  if (strcmp(crypt(pw, cpw), cpw) != 0)

-    return ERROR(cmd);

+  if (strcmp(crypt(pw, cpw), cpw) != 0) {

+    return DECLINED(cmd);

+  }

 #endif /* PR_USE_SIA */

 #ifdef COMSEC