Tag Info

Hot answers tagged

4

PAM does not just do authentication, but authorisation and session services. You probably want to keep it on as it adds quite a bit of flexibility. PAM will be called for a successful pubkey authentication, because session and account services are still checked. PAM can do things SSH cannot. This list is not exhaustive: Deny a user access if SELinux is ...


3

GSSAPI authentication is not handled by PAM. The PAM module for kerberos is used for password authentication of a user, using the kerberos protocol to obtain a valid ticket. There are 3 outcomes of the GSSAPI authentication. Authentication failed because credentials were sent but the credentials were invalid. Authentication succeeded using the credentials ...


2

Jon from the past! I have the answer to all your problems. There's a clue right in your log: saslauthd[8044]: pam_unix(imap:auth): check pass; user unknown Remember how you put the PAM config in /etc/pam.d/smtp and not imap? And your log says imap? Yup, you're trying to auth on the wrong service. I actually found the solution in the Postfix SASL manual, ...


1

It depends on what flavor of pam_ldap we're talking about. You didn't mention an OS, but from the libnss-ldapd I can gather that we're talking about some flavor of Debian. libpam-ldap and libpam-ldapd are two separate beasts and both implement pam_ldap.so. The ldapd flavor has a dependency on nslcd (not libnss-ldapd), which can be used without enabling the ...


1

I assume you have config this module through it's config file /etc/pam_pgsql.conf which accepts debug parameter: database = db user = user [...] debug = 1 There's also a global debug parameter you should append to pam config lines: auth required pam_pgsql.so debug source: [github] Official repo


1

Your sendmail.mc looks ok. Apart from stopping and starting sendmail again (which I would guess you have already done). I would look at the actual configuration file which would be called sendmail.cf. Make sure you see the lines: C{TrustAuthMech}DIGEST-MD5 CRAM-MD5 LOGIN PLAIN and # list of authentication mechanisms O AuthMechanisms=DIGEST-MD5 ...


1

PAM and the files in pam.d integrate multiple low-level authentication schemes into a high-level application programming interface (API). It allows programs that rely on authentication to be written independently of the underlying authentication scheme. Altering these files tells the system to look at Active Directory as part of the authentication process. ...



Only top voted, non community-wiki answers of a minimum length are eligible