[exim] exim4 + saslauthd + pam_access doesn't work

Top Page
Delete this message
Reply to this message
Author: David Purton
Date:  
To: exim-users
Subject: [exim] exim4 + saslauthd + pam_access doesn't work
Hi,

I'm running debian, but not exactly sure at which point in the chain
things are going wrong. POsted to d-u, without success, so thought I'd
try here too:

I'm trying to get auth working with exim4 using saslauthd and pam.

I have this is my exim4 config:

plain_saslauthd_server:
driver = plaintext
public_name = PLAIN
server_condition = ${if saslauthd{{$2}{$3}{exim4}}{1}{0}}
server_set_id = $2
server_prompts = :
server_advertise_condition = ${if eq{$tls_cipher}{}{}{*}}

login_saslauthd_server:
driver = plaintext
public_name = LOGIN
server_prompts = "Username:: : Password::"
server_condition = ${if saslauthd{{$1}{$2}{exim4}}{1}{0}}
server_set_id = $1
server_advertise_condition = ${if eq{$tls_cipher}{}{}{*}}


This appears to be working ok.

But as soon as I put anything to do with pam_access in my pam
configuration for exim4, I get this in my auth.log:

Feb 23 10:45:02 vetinari pam_access[4654]: couldn't get the tty name
Feb 23 10:45:02 vetinari saslauthd[4654]: DEBUG: auth_pam: pam_acct_mgmt failed:
+Critical error - immediate abort
Feb 23 10:45:02 vetinari saslauthd[4654]: do_auth         : auth failure:
+[user=dcpurton] [service=exim4] [realm=] [mech=pam] [reason=PAM acct error]



If I don't use pam_access, then it all works fine.

I want to use pam_access, because I want to restrict the ability to use
auth for remote relaying to a subset of users on the system.

Any clues on how to fix this?


cheers

dc


-- 
David Purton
Haese & Harris Publications
Phone: +61 8 8355 9444    Email: david@???
Fax:   +61 8 8355 9471    Web:   http://www.haeseandharris.com.au/