Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 1 May 2001 11:40:32 -0300 (ADT)
From:      "Marc G. Fournier" <marc.fournier@acadiau.ca>
To:        Cyrus Info Mailing List <info-cyrus@andrew.cmu.edu>
Cc:        <cyrus-sasl@andrew.cmu.edu>, <freebsd-questions@freebsd.org>
Subject:   Cyrus IMAPd using PAM authentication under FreeBSD ...
Message-ID:  <20010501112808.L86517-100000@atelier.acadiau.ca>

next in thread | raw e-mail | index | archive | help

Okay, I'm at a loss here, and hope someone has an idea of what I'm missing
...

I installed cyrus-imapd and cyrus-sasl from ports under FreeBSD, that all
appears to work great as long as I don't try and set sasl_pwcheck_method
to PAM ... as soon as I set that, it fails.

I'm trying to use the pam_smb_auth module, v1.9.8 ...

Using it for ftpd, in /etc/pam.conf, it works great:

==========
May  1 11:31:05 new-relay ftpd[45475]: unable to resolve symbol: pam_sm_authenticate
May  1 11:31:05 new-relay ftpd[45475]: unable to resolve symbol: pam_sm_setcred
May  1 11:31:05 new-relay ftpd[45475]: auth_pam: Module is unknown
==========

and

==========
demeter# ftp new-relay
Connected to new-relay.acadiau.ca.
220 new-relay.acadiau.ca FTP server (Version 6.00LS) ready.
Name (new-relay:root): marc
331 Password required for marc.
Password:
230 User marc logged in.
Remote system type is UNIX.
Using binary mode to transfer files.
ftp>
==========

but if I try pop3:

==========
demeter# telnet new-relay pop3
Trying 131.162.200.78...
Connected to new-relay.acadiau.ca.
Escape character is '^]'.
+OK new-relay.acadiau.ca Cyrus POP3 v2.0.13 server ready
user marc
+OK Name is a valid mailbox
pass XXXXXXXXX
-ERR Invalid login

===========

with the backend reporting, again:

===========
May  1 11:32:33 new-relay pop3d[44673]: unable to resolve symbol: pam_sm_authenticate
May  1 11:32:33 new-relay pop3d[44673]: unable to resolve symbol: pam_sm_setcred
===========

both passwords I type in are the exact same, ftpd works, pop3 fails ... so
I know that the pam module itself is working ... so the only thing I can
think of is that *something* in the cyrus-imapd port is causing the
failure ...

cyrus-imap version is: cyrus-imapd-2.0.13

configure is set as:

./configure \
	--with-cyrus-prefix=/usr/local/cyrus \
	--with-cyrus-group=cyrus \
	--with-sasl=/usr/local \
	--with-dbdir=/usr/local \
	--with-auth=unix \
	--with-com_err \
	--with-ucdsnmp=no \
	--prefix=/usr/local i386--freebsd4.3

A bug, maybe, in 2.0.13?

My pam.conf file looks like the following, in case I'm doing something
obvious in there?

====================
login   auth    sufficient      pam_skey.so
login   auth    requisite       pam_cleartext_pass_ok.so
login   auth    required        pam_unix.so                     try_first_pass

ftpd    auth    required        pam_smb_auth.so use_first_pass

imap    auth    required        pam_smb_auth.so                 nolocal

sieve   auth    sufficient      pam_unix.so
sieve   auth    required        pam_smb_auth.so use_first_pass

pop     auth    required        pam_smb_auth.so

sshd    auth    sufficient      pam_skey.so
sshd    auth    required        pam_unix.so                     try_first_pass
sshd    session required        pam_permit.so
csshd   auth    required        pam_skey.so

xserver auth    required        pam_permit.so

xdm     auth    required        pam_unix.so
xdm     account required        pam_unix.so                     try_first_pass
xdm     session required        pam_deny.so
xdm     password required       pam_deny.so

imap    auth    required        pam_unix.so                     try_first_pass
pop3    auth    required        pam_unix.so                     try_first_pass

other   auth    required        pam_unix.so                     try_first_pass
other   account required        pam_unix.so                     try_first_pass
====================

Marc G. Fournier                                 marc.fournier@acadiau.ca
Senior Systems Administrator                            Acadia University

  "These are my opinions, which are not necessarily shared by my employer"


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010501112808.L86517-100000>