Re: pam auth problem

2017-08-03 Thread Randy Bush
>> # cat /etc/pam.d/dovecot >> passdb { >> driver = pam >> # args = failure_show_msg=yes >> # args = max_requests=12 >> args = %s >> } > > this info belongs into Dovecot's conf files, not into /etc/pam.d. doh. i misread the wiki page. thanks. > copy or link /etc/pam.d/imap do /etc/pam.d/do

Re: pam auth problem

2017-08-03 Thread Steffen Kaiser
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Thu, 3 Aug 2017, Randy Bush wrote: # cat /etc/pam.d/dovecot passdb { driver = pam # args = failure_show_msg=yes # args = max_requests=12 args = %s } this info belongs into Dovecot's conf files, not into /etc/pam.d. and /etc/pam.d/{imap,po

Re: pam auth problem

2017-08-03 Thread Randy Bush
> do you have a /etc/pam.d/dovecot file, does it define all necessary > settings? probably not, as i do not know what the necessary ones are :) i did as best i could using https://wiki.dovecot.org/PasswordDatabase/PAM as guidance randy

Re: pam auth problem

2017-08-03 Thread Randy Bush
> What is in the pam.d/dovecot file? (Remember to strip passwords if > included) # cat /etc/pam.d/dovecot passdb { driver = pam # args = failure_show_msg=yes # args = max_requests=12 args = %s } and /etc/pam.d/{imap,pop3} were untouched; both as follows # # $FreeBSD: releng/10.3/etc/pam.

Re: pam auth problem

2017-08-03 Thread Steffen Kaiser
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Thu, 3 Aug 2017, Randy Bush wrote: Date: Thu, 03 Aug 2017 22:08:22 +0900 From: Randy Bush To: Remko Lodder Cc: Christian Kivalo , dovecot@dovecot.org Subject: Re: pam auth problem auth: in openpam_parse_chain(): /etc/pam.d/dovecot(1

Re: pam auth problem

2017-08-03 Thread Remko Lodder
What is in the pam.d/dovecot file? (Remember to strip passwords if included) Cheers, Remko Lodder /* sent from my phone and thus brief and to the point *\ Op 3 aug. 2017 om 15:08 heeft Randy Bush het volgende geschreven: >>> auth: in openpam_parse_chain(): /etc/pam.d/dovecot(1): missing or i

Re: pam auth problem

2017-08-03 Thread Randy Bush
>> auth: in openpam_parse_chain(): /etc/pam.d/dovecot(1): missing or invalid >> facility > > I do not think that it has something to do with the dovecot settings > itself but perhaps with the pam facility settings instead? i can believe that. any clues to debug? randy

Re: pam auth problem

2017-08-03 Thread Remko Lodder
Hi Randy, > On 3 Aug 2017, at 08:50, Randy Bush wrote: > > auth: in openpam_parse_chain(): /etc/pam.d/dovecot(1): missing or invalid > facility I do not think that it has something to do with the dovecot settings itself but perhaps with the pam facility settings instead? Cheers Remko sign

Re: pam auth problem

2017-08-02 Thread Randy Bush
>> passdb { >> driver = pam >> } >> passdb { >> driver = pam >> name = pam >> } > Are those two passdb blocks intentional? > > One of them is missing the name parameter. doh. first removed. Aug 3 06:49:23 psg auth: in openpam_parse_chain(): /etc/pam.d/dovecot(1): missing or invalid faci

Re: pam auth problem

2017-08-02 Thread Christian Kivalo
>passdb { > driver = pam >} >passdb { > driver = pam > name = pam >} Are those two passdb blocks intentional? One of them is missing the name parameter. -- Christian Kivalo

pam auth problem

2017-08-02 Thread Randy Bush
# dovecot --version 2.2.31 (65cde28) on freebsd 64 10.3 system converted to dovecot 2 against my will and consuming a lot of time sorting it out. i am glad google does not charge. have spent two hours on this one alone; and undoubtedly it is my st00pidity. so excuse my desperate posting to lazy

Re: [Dovecot] PAM auth problem

2007-03-28 Thread John Robinson
On 28/03/2007 17:32, Taras Savchuk wrote: In FreeBSD pam_group does exactly what I want: Oh, sorry, didn't know you were on *BSD but I suppose I shouldn't have assumed Linux. In Linux-PAM, pam_wheel's documentation is very similar to your pam_group, with the addition of an option: use_uid

Re: [Dovecot] PAM auth problem

2007-03-28 Thread Taras Savchuk
In FreeBSD pam_group does exactly what I want: NAME pam_group -- Group PAM module SYNOPSIS [service-name] module-type control-flag pam_group [arguments] DESCRIPTION The group service module for PAM accepts or rejects users based on their membership in a particular file gro

Re: [Dovecot] PAM auth problem

2007-03-28 Thread John Robinson
On 28/03/2007 16:52, Taras Savchuk wrote: Pam auth don't work when I add pam_group: pam_group grants membership to groups, it can't be used to authenticate. Use pam_wheel or pam_succeed_if, and see http://www.kernel.org/pub/linux/libs/pam/Linux-PAM-html/Linux-PAM_SAG.html Cheers, John.

[Dovecot] PAM auth problem

2007-03-28 Thread Taras Savchuk
Pam auth don't work when I add pam_group: gw# id test2 uid=10001(test2) gid=1(adusers) groups=1(adusers), 1(group1), 10001(group2), 10002(test10) gw# getent passwd test2 test2:*:10001:1:Our AD-Unix Test Account:/home/test2:/bin/sh gw# cat /etc/pam.d/dovecot auth re