Re: [webmin-l] Usermin can't login on macOS - takes forever to login

Hi,

This is a follow-up from my previous message: 
I finally found out how to login with Usermin on macOS (usermin 1.791 on macOS 10.14.6, perl 5.28 with Authen::PAM from macports)

It took me some time to debug this but modifying "miniserv.pl" by commenting out the the $pamh->pam_authenticate(); at line 145, works!

# check if the PAM authentication can be used by opening a
# PAM handle
...
$pam_username = "test";
$pam_password = "test";
			
#$pamh->pam_authenticate();  # <========= Login WORKS when not used
$use_pam = 1; # HACK set use_pam on macOS to allow login, since pam a

If you don't comment out the line (testing $pamh->pam_authenticate() ) then the login will spin forever (tried on Firefox 72 and Safari).

Here's my /etc/pam.d/usermin which works too:

# login: auth account password session
auth			sufficient		pam_opendirectory.so try_first_pass
auth			required		pam_deny.so
account		required		pam_permit.so
password		required		pam_deny.so
session		required		pam_permit.so

Anyone had this issue on Linux ?

Cheers,

Gilles

> On 31 Jul 2019, at 14:32, Gilles Celli <[email protected]> wrote:
> 
> Hi,
> 
> I've some login problems with Usermin on macOS, Webmin works fine however.
> 
> I've succesfully installed Webmin 1.770 on macOS 10.13 (High Sierra) with macports.org perl5.28 and its required modules (Net::SSLEeay & Authen::PAM).
> Login works and for administering Postfix with dovecot (again from macports) works great.
> 
> However, I installed Usermin but login seems impossible, Firefox or Safari take forever trying to login, when entering username & password.
> Checking /usr/usermin/miniserv.errors the PAM Authentication is enabled:
> 
> #cat  /usr/usermin/miniserv.errors
> [31/Jul/2019:12:04:03 +0200] miniserv.pl started
> [31/Jul/2019:12:04:03 +0200] Using MD5 module Digest::MD5
> [31/Jul/2019:12:04:03 +0200] Using SHA512 module Crypt::SHA
> [31/Jul/2019:12:04:03 +0200] PAM authentication enabled
> 
> For PAM-Authentication to work I needed to tweak /etc/pam.d/usermin to:
> 
> auth       required       pam_opendirectory.so try_first_pass
> account    required       pam_nologin.so
> account    required       pam_opendirectory.so
> password   required       pam_opendirectory.so
> 
> Note: We must use "pam_opendirectory.so" instead of the old "pam_securityserver.so" which is no longer used on recent macOS versions (check the ".so" modules /usr/lib/pam/),
> as described here in the outdated pam.d section for Mac OS X: 
> http://www.webmin.com/udownload.html
> 
> I've tried several other pam.d configs and also tried on Mac OS X 10.9.5 but with no success...
> 
> Does somebody know what I'm doing wrong ?
> 
> Any help is greatly appreciated.
> 
> gilles



-
Forwarded by the Webmin mailing list at [email protected]
To remove yourself from this list, go to
http://lists.sourceforge.net/lists/listinfo/webadmin-list