[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Exim PAM SMTP Authentication, help!

Hash: SHA1

A long time ago, in a galaxy far, far way, someone said...

> Hi,
> I'm trying Exim to authenticate users for mail relay using the SMTP
> AUTH interface. I've recompiled the Debian Exim 3.12-10 source package
> with the standard/default settings and only added the TCP Wrappers and
> PAM support. The exim and eximon packages generated successfully and
> installed fine. Only what else should I do know to allow exim to use
> PAM? I've set up the fixed_plain and fixed_login entries in the conf
> file with the server_condition for fixed_login (which is what Outlook
> uses) as follows:

>   server_condition = "\
>   ${if pam {$1:$2}{yes}{no}}"
> The authentication log returns the following error when I try to
> authenticate:

> PAM_unix[24311]: authentication failure; (uid=8) -> **unknown** for exim service
> I've set up an exim config file in the /etc/pam.d/ dir with auth and
> account required. From the above (and the spec.txt file in the exim
> docs) it looks like it expects an exim user with UID 8 to initialise
> the PAM service, but mail is already specified as the UID 8 GID 8 and
> I don't know what'll break if I rename mail to exim. Is it possible to
> create a user alias ? i.e. exim and mail is really the same user, same
> passwd etc ?

The problem isn't the in the name of the user that exim runs as, it's the
UID.  To be able to authenticate against the information in /etc/shadow
exim must run as root.


exim_user = root

in exim.conf, restart exim, and try again.

> Also am I approaching this PAM authentication right?

For the most part.

- -- 
- ----------------------------------------------------------------------
Phil Brutsche				    pbrutsch@tux.creighton.edu

GPG fingerprint: 9BF9 D84C 37D0 4FA7 1F2D  7E5E FD94 D264 50DE 1CFC
GPG key id: 50DE1CFC
GPG public key: http://tux.creighton.edu/~pbrutsch/gpg-public-key.asc
Version: GnuPG v1.0.4 (GNU/Linux)
Comment: For info see http://www.gnupg.org


Reply to: