[exim] Re: Server side PLAIN and LOGIN Auth against PAM

Top Page
Delete this message
Reply to this message
Author: Andreas Metzler
Date:  
To: exim-users
Subject: [exim] Re: Server side PLAIN and LOGIN Auth against PAM
On 2023-10-20 Mihamina RKTMB via Exim-users <exim-users@???> wrote:
> Hi all,


> Running Archlinux, I installed exim 4.96.2.


> I want to implement server side PLAIN and LOGIN auth against PAM.

[...]
> I think there is a problem with my "server_condition" in each authenticator,
> bu tI cannot figure out what is the problem
> Would you help, please?


When I tested this ages ago for Debian I ended up with this conclusion:
| On Debian systems the PAM modules run as the same user as the calling
| program, so they cannot do anything you could not do yourself, and in
| particular cannot access /etc/shadow unless the user is in group shadow.
| - If you want to use /etc/shadow for Exim's SMTP AUTH you will need to
| run exim as group shadow. [...] We suggest using saslauthd instead.


Using dovecot as AUTH proxy should also work.

cu Andreas

--
## subscription configuration (requires account):
## https://lists.exim.org/mailman3/postorius/lists/exim-users.lists.exim.org/
## unsubscribe (doesn't require an account):
## exim-users-unsubscribe@???
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/