Re: PAM SASL auth works locally but not with hostname
Rick van Rein <[email protected]> Wed, 5 Jul 2023 06:21:36 +0000
| Newsgroups | gmane.comp.security.cyrus.sasl |
|---|---|
| Message-ID | <[email protected]> |
Hi, >I have been trying to figure this out for a long time now. I am trying to = authenticate as a user on the system, and testsaslauthd works locally, but = only as the plain username, not with the hostname appended. If I set the cl= ient to login without the hostname, cyrus receives it as *user@net* which d= oes not work either. I am not sure how to get PAM to accept a hostname, or = SASL to authenticate with only the username. Whether or how the hostname is used depends on the authentication mechanism= . Some mechanisms may think of it as a host, others as a domain, and yet o= thers may not have a place to pass it. Using the saslpasswd2 tool, you sho= uld set the host as a realm, not as part of the username; but even that may= depend on the mechanism you are using; they simply have variable token for= ms with variable data content. -Rick ------------------------------------------ Cyrus: SASL Permalink: https://cyrus.topicbox.com/groups/sasl/Ta1b3aca3b45dc3a1-M89362a= c0b82b297e0a42a70e Delivery options: https://cyrus.topicbox.com/groups/sasl/subscription