[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

SASL and PAM issue

  I have written my own PAM module and having some issues specifically
getting it to work properly with Cyrus-SASL 1.5.28.  I am trying to
use cyrus-sasl with sendmail for SMTP auth.  Here's the issue

I have pam_alakazam.c (my PAM module).  In the code you can see the
following in pam_sm_authenticate():

   incryptpw = crypt((char *)password, realcryptpw);
   if(strcmp(incryptpw, realcryptpw) == 0) {
     D(("Authentication successful"));

In my PAM debug log, I'm getting the message "Authentication
successful" when I enter in a correct user/pass pair (using smtptest).
 However, sendmail is giving me  an authentication failure (-13).  I
do not get this same error if I change the pam config so that sendmail
uses pam_pwdb.so instead.  However, I cannot figure out why, if SASL
is receiving a PAM_SUCCESS return code from pam_sm_authenticate, and
it's not calling any of the other functions in pam_alakazam, it would
return a fail code.

I am thinking that I could just be missing something simple in my module.

Perhaps someone more experienced with PAM/SASL than myself, can shed
some light on this problem.  What additional conditions must be met
for SASL to return success to sendmail?

My /etc/pam.d/smtp looks like this:

auth        required      /lib/security/pam_alakazam.so
account     required      /lib/security/pam_alakazam.so
session     required      /lib/security/pam_alakazam.so

Any help would be greatly appreciated.

Jason DiCioccio

[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]