Re: [Exim] PAM

Top Page
Delete this message
Reply to this message
Author: Philip Hazel
Date:  
To: Pawel Wilk
CC: exim-users
Subject: Re: [Exim] PAM
On Sat, 17 Mar 2001, Pawel Wilk wrote:

> ///////////////// I've enabled PAM authenticator:


Presumably you are running a version of Exim with PAM support included.

> (btw it seems exim even doesn't try to talk to PAM)


Well, it does say "Running PAM authentication". The very next line in
the source is a call to pam_start(). The text "Authentication failure"
is the text passed back by the PAM library.

Is this the usual problem of PAM requiring a root caller? Exim is not
running as root when receiving a message.

> ///////////////// EXTENDED LOG:
>
> mar 17 03:30:37 xxxxx exim: SMTP<< AUTH LOGIN
> mar 17 03:30:37 xxxxx exim:
> mar 17 03:30:37 xxxxx exim:
> mar 17 03:30:37 xxxxx exim: Running PAM authentication for user "my_user"
> mar 17 03:30:37 xxxxx exim: PAM error: Authentication failure
> mar 17 03:30:37 xxxxx exim: login authenticator:
> mar 17 03:30:37 xxxxx exim:   $1 = my_user
> mar 17 03:30:37 xxxxx exim:   $2 = ***********
> mar 17 03:30:37 xxxxx exim: expanded string: 0
> mar 17 03:30:37 xxxxx exim:
> mar 17 03:30:37 xxxxx exim: LOG: 0 MAIN REJECT
> mar 17 03:30:37 xxxxx exim:   Authentication failed for gw-int1
>                               (SIEFCA) [x.x.x.x]: 535 Incorrect
>                               authentication data
> Mar 17 03:30:37 xxxxx exim[31558]: 2001-03-17 03:30:37 Authentication
>                                    failed for xxxxx (SIEFCA) [x.x.x.x]: 
>                                    535 Incorrect authentication data


-- 
Philip Hazel            University of Cambridge Computing Service,
ph10@???      Cambridge, England. Phone: +44 1223 334714.