Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 11 Dec 2005 22:17:16 -0500
From:      Louis LeBlanc <FreeBSD@keyslapper.net>
To:        freebsd-questions@freebsd.org
Subject:   Re: courier-authlib-0.58 dumps core at login
Message-ID:  <20051212031716.GA87116@keyslapper.net>
In-Reply-To: <20051212024427.GA27477@keyslapper.net>
References:  <20051212024427.GA27477@keyslapper.net>

next in thread | previous in thread | raw e-mail | index | archive | help

--X1bOJ3K7DJ5YkBrT
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On 12/11/05 09:44 PM, Louis LeBlanc sat at the `puter and typed:
> Hey folks.
>=20
> Is it me, or is the courier-authlib port the absolute worst thing to
> upgrade?  It seems like *every* single time I try to upgrade this
> port, I wind up with nobody being able to log into my courier
> installation.  Usually, it's a simple matter of a simple manual
> restart of the daemon (it shuts down fine at deinstallation, but won't
> start back up when portupgrade is used), sometimes it's a minor config
> tweak.
>=20
> The thing is I keep forgetting this little issue for some stupid
> reason, and this time, I've got the darn thing dumping core every time
> someone tries to log in.
>=20
> The ports/security/courier-authlib-base/ port installs without any
> problems, but it only builds and installs the libauthpam.so module.
> This is fine, I guess, since I've removed all the other modules from
> the authmodulelist config - that's the only one it ever used before
> anyway.
>=20
> So, now I've gone through the whole fiasco of re-installing my entire
> courier-* setup, verifying ALL the configs for authdaemonrc, imapd,
> and imapd-ssl.  Still, authdaemond dumps core anytime someone tries to
> log in.
>=20
> Anyone else see anything wierd with courier-authlib-base-0.58?
>=20
> I have googled for it, and all I get are links to the various copies
> of the ports/UPDATING file.  Of course, it contains all the keywords I
> can come up with, but none are relevant to the recent issue - and the
> current UPDATING file has nothing about the latest courier-authlib
> update.
>=20
> BTW, I'm the only one on the system that can get mail, because I'm
> using mutt.  My Thunderbird and Squirrelmail users cannot log into
> either imap service (imapd with squirrelmail, imapd-ssl remotely).
> So, this is a little annoying, and probably a bit urgent.
>=20
> I have the entire port configuration output if it's of any help.  It
> looks like the config process cycles through 12 times.

Quick followup:

I ran a couple tests with this as follows:  Using authtest, I was able
to see what the encrypted password was on my user account.  I then set
DEBUG=3D2 in the authdaemonrc file, and restarted the authdaemon.  This
routs encrypted passwords to the debug file when a login is attempted.

These passwords do match, but the debug log shows a rejection.

Here's the output to the debug log:
Dec 11 22:08:07 keyslapper imapd: Connection, ip=3D[::1]
Dec 11 22:08:07 keyslapper authdaemond: received auth request, service=3Dim=
ap, authtype=3Dlogin
Dec 11 22:08:07 keyslapper authdaemond: authpam: trying this module
Dec 11 22:08:07 keyslapper authdaemond: authpam: sysusername=3Dleblanc, sys=
userid=3D<null>, sysgroupid=3D1001, homedir=3D/home/leblanc, address=3Dlebl=
anc, fullname=3DLouis LeBlanc, maildir=3D<null>, quota=3D<null>, options=3D=
<null>
Dec 11 22:08:07 keyslapper authdaemond: authpam: clearpasswd=3D<null>, pass=
wd=3D$1$zXwYvUtS$W1234567890ABCdefGHIj/
Dec 11 22:08:07 keyslapper authdaemond: pam_service=3Dimap,
pam_username=3Dleblanc
Dec 11 22:08:07 keyslapper authdaemond: authpam: REJECT - try next
module
Dec 11 22:08:07 keyslapper authdaemond: FAIL, all modules rejected


and the authtest output:
<root># authtest leblanc
Authentication succeeded.

     Authenticated: leblanc  (system username: leblanc)
    Home Directory: /home/leblanc
           Maildir: (none)
             Quota: (none)
Encrypted Password: $1$zXwYvUtS$W1234567890ABCdefGHIj/
Cleartext Password: (none)
           Options: wbnodsn=3D1


Naturally, I changed the encrypted password here, but rest assured I
did check them character by character.

BTW, authdaemond did dump core again.

Thanks again.
Lou
--=20
Louis LeBlanc                          FreeBSD-at-keyslapper-DOT-net
Fully Funded Hobbyist,                   KeySlapper Extrordinaire :)
Please send off-list email to:         leblanc at keyslapper d.t net
Key fingerprint =3D C5E7 4762 F071 CE3B ED51  4FB8 AF85 A2FE 80C8 D9A2

God doesn't play dice.
    -- Albert Einstein

--X1bOJ3K7DJ5YkBrT
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (FreeBSD)

iD8DBQFDnOu8r4Wi/oDI2aIRAlHJAKCNMAzsyLVczDtYKQ4DO9ObhgM+PwCggBsV
7SUx+nBDtzraJ78BPl+0IYg=
=6Brf
-----END PGP SIGNATURE-----

--X1bOJ3K7DJ5YkBrT--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20051212031716.GA87116>