I have added ssl_enable=YES to vsftpd.conf to enable secure connection as per this tutorial:
Now, how can create exception for a particular user so that plain FTP connection is allowed for that user only?
1 Answer
The user gets only known and authenticated after the TLS handshake is done - protecting the login is one of the reasons to use TLS in the first place. And because the user is not known before TLS is started it is also not possible to disable TLS for a specific user. One can only make the use of TLS optional, i.e. offer both. To have this force_local_logins_ssl and force_local_data_ssl have to be set to NO.