Re: pam + ldap smtp authentication

I have a very similar setup but I am still having problems. It looks
like, from the readme, that pam can't authenticate users such as
[email protected]? If that's the case what is the solution.

thanks in advance.

On 木, 2004-04-01 at 16:38 -0800, Alan Hodgson wrote:

> On Thu, Apr 01, 2004 at 04:03:44PM -0800, Nadeem Bitar wrote:
> > Anyone have postfix --> saslauthd ---> pam ----> ldap working with jamm?
> > 
> > I am having problems with the pam-->ldap part and would appreciate any
> > hint.  
> 
> This setup works:
> 
> /usr/lib/sasl/smtpd.conf :
> pwcheck_method: pam
> 
> /etc/pam.d/smtp :
> auth sufficient /lib/security/pam_ldap.so
> account sufficient /lib/security/pam_ldap.so
> auth       sufficient     /lib/security/pam_stack.so service=system-auth
> account    sufficient     /lib/security/pam_stack.so service=system-auth
> 
> 
> important bits from /etc/ldap.conf :
> # Your LDAP server. Must be resolvable without using LDAP.
> host localhost
> # The distinguished name of the search base.
> base o=hosting,dc=mailhosting,dc=simkin
> SASL_SECPROPS
> pam_login_attribute mail
> 
> 
> This is with smtpd running non-chroot with a config like:
> 
> 199.175.137.211:26 inet n  -       n       -       -  smtpd
>     -o content_filter=
>     -o local_recipient_maps=
>     -o relay_recipient_maps=
>     -o smtpd_restriction_classes=
>     -o smtpd_client_restrictions=
>     -o smtpd_helo_restrictions=
>     -o smtpd_sender_restrictions=
>     -o smtpd_recipient_restrictions=permit_sasl_authenticated,reject
>     -o strict_rfc821_envelopes=no
>     -o smtpd_sasl_auth_enable=yes
>     -o broken_sasl_auth_clients=yes
>     -o smtpd_tls_auth_only=yes
>     -o smtpd_sasl_security_options=noanonymous
>     -o smtpd_use_tls=yes
>     -o smtpd_tls_key_file=/etc/postfix/key.pem
>     -o smtpd_tls_cert_file=/etc/postfix/cert.pem
>     -o smtpd_tls_CAfile=/etc/postfix/CAcert.pem
>     -o smtpd_tls_received_header=yes
>     -o tls_random_source=dev:/dev/urandom
>     -o smtpd_tls_loglevel=1
> 
> Hope this helps.
> 
> -- 
> 99 percent of lawyers give the rest a bad name
> 
> 
> 
> -------------------------------------------------------
> This SF.Net email is sponsored by: IBM Linux Tutorials
> Free Linux tutorial presented by Daniel Robbins, President and CEO of
> GenToo technologies. Learn everything from fundamentals to system
> administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
> _______________________________________________
> Jamm-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/jamm-users
-- 



-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id70&alloc_id638&op=click