OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Brian Clark (brianjfusionwerks.com)
Date: Thu Nov 01 2001 - 13:04:56 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Hello,

    Apologize if this is the wrong place, but I know next to nothing about
    PAM and I'm not exactly sure where to ask this. Clue Bats graciously
    accepted. :-)

    I'm using PAM Md5 authentication (?) on SuSE Linux.

    I've installed popa3d <http://www.openwall.com/popa3d/>

    And I've instructed it to use AUTH_PAM in params.h

    /*
     * Choose the password authentication method your system uses:
     *
     * AUTH_PASSWD Use getpwnam(3) only, for *BSD or readable passwd;
     * AUTH_SHADOW Use shadow passwords directly (not via PAM);
     * AUTH_PAM Use PAM in the old-fashioned way;
     * AUTH_PAM_USERPASS Talk to pam_userpass via Linux-PAM binary prompts.
     *
     * Note that there's no built-in password aging support.
     */
    #define AUTH_PASSWD 0
    #define AUTH_SHADOW 0
    #define AUTH_PAM 1
    #define AUTH_PAM_USERPASS 0

    First I used AUTH_MAN_USERPASS, but it failed, so I switched it to
    AUTH_PAM and it appeared to go just fine. I could pop and receive mail.

    Later I noticed this while tailing the log to make sure everything was
    OK:

    Nov 1 14:18:10 cla popa3d[15217]: connect from 123.456.789.10 (123.456.789.10)
    Nov 1 14:18:10 cla PAM-warn[15217]: service: popa3d [on terminal: <unknown>]
    Nov 1 14:18:10 cla PAM-warn[15217]: user: (uid=0) -> foo [remote: ?nobody?nowhere]
    Nov 1 14:18:10 cla PAM-warn[15217]: service: popa3d [on terminal: <unknown>]
    Nov 1 14:18:10 cla PAM-warn[15217]: user: (uid=0) -> foo [remote: ?nobody?nowhere]
    Nov 1 14:18:10 cla popa3d[15217]: Authentication passed for foo
    Nov 1 14:18:10 cla popa3d[15217]: 0 messages (0 bytes) loaded
    Nov 1 14:18:11 cla popa3d[15217]: 0 (0) deleted, 0 (0) left

    I've search the web and the PAM archives, but I can't find anything
    that resembles a solution. I've seen a lot of similar queries without
    any answers. :-\ I know this isn't tied to popa3d, so it has to be
    something I'm just not getting about PAM.

    As I said, I can authenticate and receive mail just fine, but I don't
    feel like it'd be a good idea to ignore those PAM warnings.

    Thank you for any help you can provide.

    -Brian

    _______________________________________________
    Pam-list mailing list
    Pam-listredhat.com
    https://listman.redhat.com/mailman/listinfo/pam-list