Re: Re: IMAPS with extra authorization.

2010-07-26 Thread Syren Baran
Am Montag, den 26.07.2010, 08:27 -0500 schrieb Dan White: > >But as i said, i just had a quick look at the code. > > I think you'll cause some issues with changing the SASL service name, since > things like the kerberos principal that's used, and the sasl config file > name are influenced by it.

Re: IMAPS with extra authorization.

2010-07-26 Thread Dan White
On 26/07/10 03:27 -0500, Syren Baran wrote: >Am Samstag, den 24.07.2010, 00:43 -0500 schrieb Dan White: >> > >> >Would be a nice and clean solution to set the service name for "imapd -s" >> >to "imaps" and just use a second pam file for that service. >> >> The service name that gets passed to sasla

Re: Re: IMAPS with extra authorization.

2010-07-26 Thread Syren Baran
Am Samstag, den 24.07.2010, 00:43 -0500 schrieb Dan White: > > > >Would be a nice and clean solution to set the service name for "imapd -s" > >to "imaps" and just use a second pam file for that service. > > The service name that gets passed to saslauthd is taken from the > sasl_server_init call ins

Re: IMAPS with extra authorization.

2010-07-23 Thread Dan White
On 22/07/10 06:56 -0500, Syren Baran wrote: >Am Donnerstag, den 22.07.2010, 13:27 +0200 schrieb Josef Karliak: >> Hi, thanks for tip. I used your entries now (I had anything else in >> pam.d's imap config). > >> celer:/etc/pam.d # testsaslauthd -u user -p goodsystempass -s imap 0: OK >> "Success."

Re: Re: Re: Re: IMAPS with extra authorization.

2010-07-22 Thread Syren Baran
Am Donnerstag, den 22.07.2010, 13:27 +0200 schrieb Josef Karliak: > Hi, >thanks for tip. I used your entries now (I had anything else in > pam.d's imap config). > celer:/etc/pam.d # testsaslauthd -u user -p goodsystempass -s imap > 0: OK "Success." If you DONT want this, remove the line "auth

Re: Re: Re: IMAPS with extra authorization.

2010-07-22 Thread Josef Karliak
Hi, thanks for tip. I used your entries now (I had anything else in pam.d's imap config). Command "testsaslauthd" seem to be happy : celer:/etc/pam.d # testsaslauthd -u user -p badimapspass -s imap 0: NO "authentication failed" celer:/etc/pam.d # testsaslauthd -u user -p goodimapspass -s

Re: Re: Re: IMAPS with extra authorization.

2010-07-22 Thread Syren Baran
Am Mittwoch, den 21.07.2010, 21:07 +0200 schrieb Josef Karliak: > Hi, >thanks for tip. >I've rebuilded pwdfile from src and installed it. >File /etc/pam.d/imap is : I just use the following entries: #dont need account account required pam_permit.so #check username/passwd authsuffi

Re: IMAPS with extra authorization.

2010-07-22 Thread Dan White
On 21/07/10 21:07 +0200, Josef Karliak wrote: > All this procedure is because users has weak passwords, so we let them > in the company (using only IMAP), but if anybody want to has IMAPS from > outside of company (from home, etc...) we force him to create strong > password and let IMAPS autho

Re: Re: IMAPS with extra authorization.

2010-07-21 Thread Josef Karliak
Huh, discovered your next mail :) But didn't helped, I'look over internet too. Again...And waith for kicks to the right way :) Thanks. J.K. Cituji Syren Baran : Am Mittwoch, den 21.07.2010, 09:47 +0200 schrieb Josef Karliak: Hi everybody, we need to use another acounts (from extr

Re: Re: IMAPS with extra authorization.

2010-07-21 Thread Josef Karliak
Hi, thanks for tip. I've rebuilded pwdfile from src and installed it. File /etc/pam.d/imap is : #%PAM-1.0 auth includecommon-auth authsufficient pam_pwdfile.so pwdfile /var/spool/imap/imaps_users account includecommon-account password includecommon-password

Re: Re: IMAPS with extra authorization.

2010-07-21 Thread Syren Baran
Am Mittwoch, den 21.07.2010, 09:47 +0200 schrieb Josef Karliak: > Hi everybody, > we need to use another acounts (from extra file) for authorization for > IMAPS (from outside of company). IMAP stays authorized over saslauthd > (pam). How to solve this ? I'm out of the ideas :-/. Try libpam-pwdfile