Re: PAM SASL auth works locally but not with hostname

Rick van Rein <[email protected]> Wed, 5 Jul 2023 06:21:36 +0000
Newsgroups gmane.comp.security.cyrus.sasl
Message-ID <[email protected]>
Hi,

>I have been trying to figure this out for a long time now. I am trying to =
authenticate as a user on the system, and testsaslauthd works locally, but =
only as the plain username, not with the hostname appended. If I set the cl=
ient to login without the hostname, cyrus receives it as *user@net* which d=
oes not work either. I am not sure how to get PAM to accept a hostname, or =
SASL to authenticate with only the username.

Whether or how the hostname is used depends on the authentication mechanism=
.  Some mechanisms may think of it as a host, others as a domain, and yet o=
thers may not have a place to pass it.  Using the saslpasswd2 tool, you sho=
uld set the host as a realm, not as part of the username; but even that may=
 depend on the mechanism you are using; they simply have variable token for=
ms with variable data content.

-Rick

------------------------------------------
Cyrus: SASL
Permalink: https://cyrus.topicbox.com/groups/sasl/Ta1b3aca3b45dc3a1-M89362a=
c0b82b297e0a42a70e
Delivery options: https://cyrus.topicbox.com/groups/sasl/subscription