FTP broken after recent updates on 10.4 server

[Brett Dikeman]

Greetings all,

I've got a 10.4.10 Server which predominantly handles file sharing,
with a few light FTP users.  It pulls authentication from Active
Directory.

After applying the post-10.4.10 security updates, FTP broke and no
amount of futzing has fixed it.  Googling has led me down a few stray
paths; for example, it is not the problem with the botched security
update released back in May which changed which FTP daemon was
launched on startup.

-The FTP server is set to show users the FTP root and mounts, but when
a local user attempts login, regardless of whether their home
directory exists, I get:
FTP LOGIN FAILED (cannot chdir)

If they are a local user and NOT a member of the com.apple.allservices
group, then I get:
ACL Check failed for (username).

-If an AD user attempts login, I get:
FTP LOGIN REFUSED (bad shell or username in
/Library/FTPServer/Configuration/ftpusers)

(I tried adding a user to ftpusers.  No difference.  I've been
wondering if the problem is that they don't have a shell defined.)

This is driving me batty.  Everything was working smooth as silk until
the system was rebooted last week after applying security updates.

Any suggestions?

Thanks!
Brett