Authentication

Hi jamm-users,


the following (debian) configuration for postfix allows me "only" to 
authenticate ALL users (local and virtual) with pam/ldap + sasl (local 
users have to be virtual users).

Does the configuration of jamm and postfix allow to seperate the 
authentication process for local users (authentication over pam/passwd + 
sasl) and  virtual users (authentication over pam/ldap + sasl)?

---------------------------------------------------------------------

/etc/default/saslauthd:

#
START=yes
MECHANISMS="ldap"
#

/etc/postfix/sasl/smtpd.conf:

#
pwcheck_method: saslauthd
mech_list: PLAIN LOGIN
#

/etc/pam_ldap.conf:

#
host 127.0.0.1
base dc=example,dc=com
ldap_version 3
rootbinddn cn=admin,dc=example,dc=come
pam_password crypt

---------------------------------------------------------------------

This howto http://jamm.sourceforge.net/contrib_docs/jamm-sasl-tls.txt 
describes "only" the configuration when ALL users are virtual users, as 
in my config.

---------------------------------------------------------------------

The jamm howto says:

...
Local user information can be accessed from the standard account 
database. A list of valid users can be obtained from /etc/passwd. The 
users' home directory, which can also be obtained from /etc/passwd, 
provides the location of the mailbox. Authentication can be handled by 
standard Unix mechanisms, such as pluggable authentication modules (PAM).
...

the configuration looks like:

/etc/default/saslauthd:

#
START=yes
MECHANISMS="pam"
#

/etc/postfix/sasl/smtpd.conf:

#
pwcheck_method: saslauthd
mech_list: PLAIN LOGIN
#

---------------------------------------------------------------------

The configuration above authenticate local users with pam/passwd + sasl 
but NOT jamm virtual users with pam/xxx + sasl (without sasl, jamm 
virtual users have access to postfix).

Output from auth.log:

... saslauthd[5396]: (pam_unix) check pass; user unknown
... saslauthd[5396]: (pam_unix) authentication failure; logname= uid=0 
euid=0 tty= ruser= rhost=
... saslauthd[5396]: DEBUG: auth_pam: pam_authenticate failed: User not 
known to the underlying authentication module
... saslauthd[5396]: do_auth         : auth failure: [user=virtual] 
[service=smtp] [realm=example.com] [mech=pam] [reason=PAM auth error]


Sorry for my english it is not my native language.

Thanks for informations!

Regards,

Michael


-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now. 
http://productguide.itmanagersjournal.com/