On Wed, Dec 06, 2006, Leonardo Boselli wrote:
> Until a few weeks ago all was fine. now i cannot loger authenticate:
> the reply is:
> 2006-12-06 17:55:24 login authenticator failed for
> dhcfpi011.dicea.unifi.it (ARCHITECTUR) [150.217.9.179]: 535 Incorrect
> authentication data (set_id=gooduser)
> I have this authentication section:
> login:
> driver = plaintext
> public_name = LOGIN
> server_prompts = Username:: : Password::
> server_condition = "${if <these are on one line, split by e-mail only>
> crypteq{$2}{${lookup{$1:2}lsearch{/etc/passwd}{$value}fail}}{yes}{no}}"
> server_set_id = $1
Looks like the exim process can't read passwd or passwords moved to
shadow. Try `exim -be with that lookup line.'
By the way, what if an attacker specifies an unknown user with a
password of "fail"? I'm suspecting you'd turn into an open relay.
--
Unix stuff :: http://tehran.lain.pl
Yet Another RBL :: http://rbl.lain.pl
