vsftpd port not honoring /etc/shells

[H.Wade Minter]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I installed the vsftpd port on my RELENG_4_8 system as a replacement 
for the standard ftpd.  However, it doesn't appear to be honoring 
/etc/shells - a user listed in the passwd file with a shell 
(/sbin/nologin) that does not appear in /etc/shells is still allowed to 
FTP into the system.

I'm guessing this may be a problem with PAM, as I have 
"check_shell=YES" in /usr/local/etc/vsftpd.conf, and the manpage for 
vsftpd.conf says that this setting is only valid for non-PAM builds.  
But I'm stumped as to how to lock down users via /etc/shells in the 
default port build.

Any suggestions would be appreciated.

- --Wade
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (Darwin)

iD8DBQE/R4Hmo4DwsyRGDscRAuXjAJ9dYM8XaMx3JEb+tQPOM+uuhiRZ6QCfSHM7
E0Nxl/fzYqkAbxYlvc4FA/M=
=kF8x
-----END PGP SIGNATURE-----