Package: libpam-mysql
Version: 0.6.2-1
Severity: normal

I have an exim4 configuration of local (shell) users and virtual users
residing in a mysql database. exim4 is configured to advertise TLS to
all hosts, authentication goes through saslauthd which invokes pam with
service smtp.
After updating libpam-mysql to 0.6.2-1, saslauthd failed to authenticate
through pam.

errors from /var/log/auth.log:

May  1 13:17:05 alpha saslauthd[904]: pam_mysql - SELECT returned no
result.
May  1 13:17:05 alpha saslauthd[904]: DEBUG: auth_pam: pam_acct_mgmt
failed: Permission denied
May  1 13:17:05 alpha saslauthd[904]: do_auth         : auth failure:
[user=crea] [service=smtp] [realm=] [mech=pam] [reason=PAM acct error]

configuration in /etc/pam.d/smtp:

auth            sufficient      pam_unix.so     nullok
auth            sufficient      pam_mysql.so    host=localhost [...] crypt=1
account         sufficient      pam_mysql.so    [same as above]

even shell users (pam_unix) cannot authenticate now.

Downgrading libpam-mysql to 0.5.0-6 up to 0.5.0-7.1 makes the whole
thing work again.

It was a bit tricky to find out which package caused the problem;
analyzing logfiles and update logs showed that it should be
libpam-mysql package, maybe a combination of packages. The downgrade
issue may place a hint on libpam-mysql.


-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.16-1-686
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)

Versions of packages libpam-mysql depends on:
ii  libc6                         2.3.6-7    GNU C Library: Shared libraries
ii  libmysqlclient15off           5.0.20a-2  mysql database client library
ii  zlib1g                        1:1.2.3-11 compression library - runtime

libpam-mysql recommends no packages.

-- no debconf information


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to