Okay, either I'm losing it, or there is a bug here somewhere :(

I removed the ports I had installed, for FreeBSD, and built fresh from
source, using the following configure settings:

=============[ sasl ]============
#!/bin/tcsh
setenv CFLAGS -I/usr/local/include/db3
#setenv CPPFLAGS -I/usr/local/include/db3
./configure  \
        --with-prefix=/usr/local \
        --with-dbpath=/usr/local/etc/sasldb \
        --with-pwcheck=/usr/local/var/pwcheck \
        --with-pam \
        --disable-krb4 \
        --disable-gssapi \
        --disable-anon \
        --enable-login

==========[ imap ]=================
#!/bin/tcsh
setenv CFLAGS -I/usr/local/include/db3
./configure \
        --prefix=/usr/local \
        --with-cyrus-user=cyrus \
        --with-cyrus-group=cyrus \
        --with-dbdir=/usr/local \
        --with-openssl \
        --with-sasl=/usr/local \
        --without-krb \
        --with-auth=unix \
        --enable-debug \
        --with-perl=/usr/bin/perl

=========================================

Builds clean, installs clean and runs ... as long as I have a passwd in
sasldb file, I'm find, but as soon as I try to use PAM to authenticate to
an NT server, it fails ...

My /etc/imapd.conf file looks like:

=====
configdirectory: /var/spool/imap
partition-default: /var/spool/mail
admins: cyrus
sieveusehomedir: false
sievedir: /var/spool/sieve
hashimapspool: true
sasl_pwcheck_method: PAM
========

If I do an 'saslpasswd -d marc' to remove myself from the sasldb file,
then try and re-connect with pine, I get the following error:

May  7 13:21:00 new-relay imapd[66067]: badlogin: atelier.acadiau.ca[131.162.138.223] 
CRAM-MD5 authentication failure [no secret in database]

now, I know the PAM module/authentication itself is working, as if I use
the same settings, same user and same passwd for ftpd, and it
authenticates fine ... so its as if, even with sasl_pwcheck_method set, it
isn't using PAM properly ...

Am I missing something in my configure?  My imapd.conf file?  Some known
reason why PAM doesn't work with FreeBSD?

Thanks ...

Marc G. Fournier                                 [EMAIL PROTECTED]
Senior Systems Administrator                            Acadia University

  "These are my opinions, which are not necessarily shared by my employer"



Reply via email to