Re: pam + ldap smtp authentication

On Thu, Apr 01, 2004 at 04:03:44PM -0800, Nadeem Bitar wrote:
> Anyone have postfix --> saslauthd ---> pam ----> ldap working with jamm?
> 
> I am having problems with the pam-->ldap part and would appreciate any
> hint.  

This setup works:

/usr/lib/sasl/smtpd.conf :
pwcheck_method: pam

/etc/pam.d/smtp :
auth sufficient /lib/security/pam_ldap.so
account sufficient /lib/security/pam_ldap.so
auth       sufficient     /lib/security/pam_stack.so service=system-auth
account    sufficient     /lib/security/pam_stack.so service=system-auth


important bits from /etc/ldap.conf :
# Your LDAP server. Must be resolvable without using LDAP.
host localhost
# The distinguished name of the search base.
base o=hosting,dc=mailhosting,dc=simkin
SASL_SECPROPS
pam_login_attribute mail


This is with smtpd running non-chroot with a config like:

199.175.137.211:26 inet n  -       n       -       -  smtpd
    -o content_filter=
    -o local_recipient_maps=
    -o relay_recipient_maps=
    -o smtpd_restriction_classes=
    -o smtpd_client_restrictions=
    -o smtpd_helo_restrictions=
    -o smtpd_sender_restrictions=
    -o smtpd_recipient_restrictions=permit_sasl_authenticated,reject
    -o strict_rfc821_envelopes=no
    -o smtpd_sasl_auth_enable=yes
    -o broken_sasl_auth_clients=yes
    -o smtpd_tls_auth_only=yes
    -o smtpd_sasl_security_options=noanonymous
    -o smtpd_use_tls=yes
    -o smtpd_tls_key_file=/etc/postfix/key.pem
    -o smtpd_tls_cert_file=/etc/postfix/cert.pem
    -o smtpd_tls_CAfile=/etc/postfix/CAcert.pem
    -o smtpd_tls_received_header=yes
    -o tls_random_source=dev:/dev/urandom
    -o smtpd_tls_loglevel=1

Hope this helps.

-- 
99 percent of lawyers give the rest a bad name



-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click