PAM would not work on 4.02 (was Re: [Exim] exim-4.00: TLS wo…

Top Page
Delete this message
Reply to this message
Author: Toshio Kumagai
Date:  
To: exim-users
Subject: PAM would not work on 4.02 (was Re: [Exim] exim-4.00: TLS would not work)
Hi all,

    I got exim-4.02 started with OpenSSL-0.9.6c/shared libray.
    But now, PAM would not work :-(


  system:
    OS: Solaris8/x86 + MU7
    gcc: 3.0.4
    MUA: Netscape Communicator 4.79


  error messages:
    Authentication failed for ginger (Kumasan.ORG) [192.168.1.3] \
        : 535 Incorrect authentication data (set_id=*******)
    Authentication failed for ginger (Kumasan.ORG) [192.168.1.3] \
        : 535 Incorrect authentication data (set_id=*******)


  PAM reference in 3.35 exim.conf:
    plain:
      driver = plaintext
      public_name = PLAIN
      server_condition = "${if pam{$2:$3}{1}{0}}"
      server_set_id = $2


    This have been working well for me on 3.xx, and
    convert exim.conf by convert4r4.
    But 4.02 cannot authenticate the sender (myself).
    What's wrong this time ??


###

Toshio Kumagai wrote:
>
> Hi Philip,
>
>         Thank you for your response.
>         I'll read OpenSSL (ver. 0.9.6c, with shared library)
>         manual again.

>
> Regards.
>
> ###
>
> Philip Hazel wrote:
> >
> > On Sat, 2 Mar 2002, Toshio Kumagai wrote:
> >
> > > Hi all,
> > >
> > >       exim-3/TLS worked well for me but exim-4.00 says:

> > >
> > > 2002-03-02 22:10:18 TLS error on connection from ginger (Kumasan.ORG)
> > [192.168.1.3] (SSL_CTX_use_certificate_file): error:0200100D:system
> > library:fopen:Permission denied
> >
> > That means that, when Exim called the function SSL_CTX_use_certificate_file(),
> > an error return was given by the OpenSSL library. The text of the error
> > comes from the library error text function. You need to consult the
> > OpenSSL documentation to find out what 0200100D means. The text suggests
> > that there is a permissions problem.
> >
> > The TLS code has changed very little between Exim 3 and Exim 4.
> >
> > --
> > Philip Hazel            University of Cambridge Computing Service,
> > ph10@???      Cambridge, England. Phone: +44 1223 334714.

>
> --
>                         *** Save Solaris x86 ***
>   Toshio Kumagai        TK2959 / TK127-AP
>                         Toshio_Kumagai@???, Japan

>
> --
>
> ## List details at http://www.exim.org/mailman/listinfo/exim-users Exim details at http://www.exim.org/ ##


--
            *** Save Solaris x86 ***
  Toshio Kumagai    TK2959 / TK127-AP
            Toshio_Kumagai@???, Japan