pam not working on centos?

Jason Gerfen jason.gerfen at scl.utah.edu
Mon Feb 4 15:06:00 UTC 2008


Well lets see, perhaps you should go visit the web site for the
pam_mysql module and read the installation instructions. You should have
a ./configure --enable-ssl options to acquire the correct header files.
Please don't post back until you have done that.

rupert wrote:
> i check the configure script again, and it seems it cant find the md5.h file,
> does that mean I cant use DIGEST-MD5 then?
> i set the -includedir=/usr/include, but that didnt help
> /usr/include/openssl/md5.h
> /usr/include/pppd/md5.h
> 
> how can I include that right header?
> 
> thx
> 
> On Mon, Feb 4, 2008 at 2:09 PM, Jason Gerfen <jason.gerfen at scl.utah.edu> wrote:
>> As I said before. I have never used this module but provided some
>>  insight into the workings and what the error message *might entail and
>>  possible solutions to resolving it.
>>
>>  Because I have never used this module myself you will want to read the
>>  manual for the installation/configuration/administration of this
>>  authentication module as I have provided as much information as I knew
>>  about.
>>
>>
>>
>>  rupert wrote:
>>  > I had to compile the module, because there isnt a rpm for centOS51. or
>>  > I didnt find it
>>  >
>>  > Most of the stuff works on my cyrus murder, I cant login with imtest
>>  > and mupdatetest, but i cant
>>  > get the forntend/backend/mupdate to talk to eaech other.
>>  > And I can only use imtest with the TLS certifikate, because I use
>>  > PLAIN as mech, but when the deamon tries to autocreate a mailbox
>>  > it says "no worthy mechs found" in the logfiles :(
>>  >
>>  > thx so far
>>  > On Mon, Feb 4, 2008 at 1:35 PM, Jason Gerfen <jason.gerfen at scl.utah.edu> wrote:
>>  >> Check the mysql server to ensure it will allow that host/username
>>  >>  combination.
>>  >>
>>  >>
>>  >>
>>  >>  rupert wrote:
>>  >>  > ok, I missed the part about the /lib64 folder where i should put the .so file.
>>  >>  >
>>  >>  > Right now my salsauthentification ist working on one host, but when I
>>  >>  > try to connect to
>>  >>  > mysql server on the first from a second host, pam wont connect.
>>  >>  > But I can login with mysql --host=server1.
>>  >>  >
>>  >>  > Feb  3 11:20:39 backend-A1 saslauthd[9312]: pam_mysql - MySQL error
>>  >>  > (Can't connect to MySQL server on 'server1' (13))
>>  >>  > Feb  3 11:20:39 backend-A1 unix_chkpwd[9896]: password check failed
>>  >>  > for user (cyrus)
>>  >>  > Feb  3 11:20:39 backend-A1 saslauthd[9312]: pam_unix_auth(imap:auth):
>>  >>  > authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=
>>  >>  > user=cyrus
>>  >>  >
>>  >>  > thx
>>  >>  >
>>  >>  > rupert
>>  >>  >
>>  >>  > On Sat, Feb 2, 2008 at 5:48 PM, Rupert <rupertt at gmail.com> wrote:
>>  >>  >> Jason Gerfen schrieb:
>>  >>  >>
>>  >>  >>> Ensure your openssl libraries are being linked against with the
>>  >>  >>  > pam_mysql module or configure it to not use SSL. A good way to test is
>>  >>  >>  > to run the 'ldd' command on the pam_mysql module and even the 'nm'
>>  >>  >>  > command to ensure the proper functions are used and were built during
>>  >>  >>  > compile.
>>  >>  >>  >
>>  >>  >>  >
>>  >>  >>  how can i make sure everything is in there?
>>  >>  >>  the make runs fine, and in the config.h I is written that it uses SSL.
>>  >>  >>  Can you provide me the right include pathes for centOS like
>>  >>  >>  --with-mysql=/usr/whereever ?
>>  >>  >>  Im new to the RPM base.
>>  >>  >>
>>  >>  >>
>>  >>  >>  thx
>>  >>  >>
>>  >>  >>
>>  >>  >>
>>  >>  >>  > rupert wrote:
>>  >>  >>  >
>>  >>  >>  >> Hello,
>>  >>  >>  >> i installed a complete cyrus murder setup in a VMware machine and now
>>  >>  >>  >> im transferring my configuration to a real 64Bit machine, i donwloaded
>>  >>  >>  >> pam_mysql and compiled it,
>>  >>  >>  >> when I try to login with cyradmin or imtest i always get some errors
>>  >>  >>  >> and there isnt even a query executed in mysql.
>>  >>  >>  >> How can i fix this?
>>  >>  >>  >>
>>  >>  >>  >>
>>  >>  >>  >> badlogin: localhost.localdomain [127.0.0.1] PLAIN [SASL(-16):
>>  >>  >>  >> encryption needed to use mechanism: security flags do not match
>>  >>  >>  >> required]
>>  >>  >>  >>
>>  >>  >>  >> badlogin:host1 [127.0.0.1] plaintext cyrus at fbla1host1 SASL(-13):
>>  >>  >>  >> authentication failure: checkpass failed
>>  >>  >>  >>
>>  >>  >>  >> Feb  1 17:29:11 frontend-A1 mupdate[2048]: No worthy mechs found
>>  >>  >>  >>
>>  >>  >>  >>
>>  >>  >>  >> thx a lot
>>  >>  >>  >>
>>  >>  >>  >> _______________________________________________
>>  >>  >>  >> Pam-list mailing list
>>  >>  >>  >> Pam-list at redhat.com
>>  >>  >>  >> https://www.redhat.com/mailman/listinfo/pam-list
>>  >>  >>  >>
>>  >>  >>  >
>>  >>  >>  >
>>  >>  >>  >
>>  >>  >>
>>  >>  >>
>>  >>  >>
>>  >>  >
>>  >>  > _______________________________________________
>>  >>  > Pam-list mailing list
>>  >>  > Pam-list at redhat.com
>>  >>  > https://www.redhat.com/mailman/listinfo/pam-list
>>  >>
>>  >>
>>  >>
>>  >> --
>>  >>  Jason Gerfen
>>  >>
>>  >>  "I practice my religion
>>  >>   while stepping on your
>>  >>   toes..."
>>  >>  ~The Ditty Bops
>>  >>
>>  >>  _______________________________________________
>>  >>
>>  >>
>>  >> Pam-list mailing list
>>  >>  Pam-list at redhat.com
>>  >>  https://www.redhat.com/mailman/listinfo/pam-list
>>  >>
>>  >
>>  > _______________________________________________
>>  > Pam-list mailing list
>>  > Pam-list at redhat.com
>>  > https://www.redhat.com/mailman/listinfo/pam-list
>>
>>
>>  --
>>  Jason Gerfen
>>
>>  "I practice my religion
>>   while stepping on your
>>   toes..."
>>  ~The Ditty Bops
>>
>>  _______________________________________________
>>  Pam-list mailing list
>>  Pam-list at redhat.com
>>  https://www.redhat.com/mailman/listinfo/pam-list
>>
> 
> _______________________________________________
> Pam-list mailing list
> Pam-list at redhat.com
> https://www.redhat.com/mailman/listinfo/pam-list


-- 
Jason Gerfen

"I practice my religion
 while stepping on your
 toes..."
~The Ditty Bops




More information about the Pam-list mailing list