I am experiencing a Cyrus-SASL v2.1.23 and PAM authentication issue. I installed linux PAM 1.1.3 on slackware linux 13.1 x86 64bit. On installing cyrus, i am unable to find the PAM authentiaction mechanism.
root@xxxxx:/usr/local/src/cyrus-sasl-2.1.23# saslauthd -v
saslauthd 2.1.23
authentication mechanisms: getpwent rimap shadow ldap
[code]....
How can i get the PAM authentication mechanism runnning .
Pam-mysql can not connect to the database and below are my configurations.
saslfinger -s Output:
root@mailbackup:/# saslfinger -s
saslfinger - postfix Cyrus sasl configuration Tue May 10 10:12:10 EAT 2011
version: 1.0.2
mode: server-side SMTP AUTH
-- basics --
Postfix: 2.7.2
System: Slackware 13.1.0
-- smtpd is linked to --libsasl2.so.2 => /usr/local/lib/libsasl2.so.2 (0x00007f74ebfb7000)
-- active SMTP AUTH and TLS parameters for smtpd --
-- listing of /usr/lib64/sasl2 --
-- listing of /usr/local/lib/sasl2 --
-- content of /usr/lib64/sasl2/smtpd.conf --
-- content of /usr/local/lib/sasl2/smtpd.conf --
-- active services in /etc/postfix/master.cf --
-- mechanisms on localhost --
Slackware 13 64 - full installation
Postfix from slackbuilds dot org
Dovecot from same
has anyone recompiled Postfix using the Slackbuild script, modifying the script to include support for Cyrus-SASL, OpenLDAP, and MySQL in the build, while retaining Dovecot SASL and TLS? If so I would appreciate it if they could post the CCARGS and AUXLIBS commands. I am having some difficulty getting this working.
My problem is to get postfix working with a smarthost, to send mails from home with dynamic IP, and which needs authentication. I did exactly the same with Slackware 12.2 (postfix 2.6.2) and it worked. Now I tried to do with 2.6.2 (actual running version is 2.7.0 with the same problem) on Slackware 13 64bit. Following error message occurs around every minute in the maillog:
[code]...
We have an LDAP server (OpenDirectory on Snow Leopard Server--OpenLDAP essentially) and I am trying to configure our slackware hosts to use that LDAP server as the authentication mechanism instead of NIS/YP as they currently do.How do I change it, and is it just as simple as changing /etc/nsswitch.conf?
View 11 Replies View RelatedNew install of 13.1. Installed Pidgin 2.7.1, compiled for SSL per instructions here: [url] but still no love. Any attempt to connect to MSN returns "Unable to authenticate: Authentication Failure."
View 5 Replies View RelatedI installed freenx-0.7.3-i486-1alien.tgz on the server (with Slack 12.1), all according to instructions. I installed the no machine nxclient 3.4.0-7 on the client (with Slack 12.2). I ran setup and configured. I used the default no-machine keys, not custom ones. Since authentication failed at the beginning, I enabled DBauthentication, and added my user and password, which seemed to allow authentication to occur.
Here is my node.conf:
# node.conf
#
# This file is provided by FreeNX. It should be placed either into
# /etc/nxserver/node.conf (FreeNX style) or /usr/NX/etc/node.conf
# (NoMachine NX style).....
Could someone tell me what is the difference between Cyrus and courier? I am trying to buuld an imap server to serve virtual users and to work with postfix.
View 1 Replies View RelatedI am attempting to enable secure authentication on my homebrew AWS based mail server, by following the very excellent flurdy how-to.However I think the repositories I am attempting to use do not include this software.Oddly enough, an aptitude search finds the packages I want, however even if I copy-paste the name of the software into the install version of the command it turns up nothing.
Code:
root@cloud1:~# aptitude search sasl2-bin
i sasl2-bin - Cyrus SASL - administration programs for SASL users
[code]....
I have successfully installed qmail & cyrus imap but i am not getting any good docs on IMAP configuration & integration with qmail.
View 9 Replies View RelatedI for some reason can't get Cyrus-sasl to work completely. I have to manually start it via saslauthd -a show if I let it start up itself or do a service saslauthd start or restart testsaslauthd will fail. I need help getting this fixed. I tried setting /etc/sysconfig/saslauthd to shadow instead of Pam but still no luck. Also when I try to login my postfix server I get an error stating that my username or password is incorrect even though it is right and I can receive mail from dovecot.
View 2 Replies View RelatedI am running cyrus 2.1 on OpenSusu 11.0. A couple of days ago I tried to install ispCP and it ending up trash my email. I restored everything in /etc/postfix where ispCP had changed a load of files, but unfortunately that did not correct all of my problems. I have several domains with multiple users, most of which deliver to a few local address.
joe@domain1 delivers to joe
admin@domain1 delivers to joe
fred@domain2 delivers to fred
admin@domain2 delivers to fred
all of the email intended for local user is delivered to a single user (e.g. larry).Email that is redirected to an external user (e.g. mike@linuxquestions.org) works fine. Email to non-existent users fails, as expect. I tried deleting the mail box for one of the users and re-creating it, but the problem continues. I have looked through many HOWTOs, web pages and man-pages, but I cannot find any configuration options that addresses this kind of thing.
I'm new to CentOS, having always used Slackware in the past. I'm trying to get Cyrus 2.3.7 IMAP working with Procmail 3.22, and having a slight issue. My current setup in sendmail.mc is as follows:
[code]...
i can't get cyrus mailbox created. what i get is only error:
cm user.test.test
createmailbox: Permission denied
if i try user without "lastname":
cm user.test
createmailbox: System I/O error
here's maillog message:
Jan 4 13:08:09 pigeon imap[21695]: login: host.domain.com [127.0.0.1] cyrus plaintext User logged in
Jan 4 13:09:12 pigeon imap[21695]: IOERROR: creating directory /mail/imap: Permission denied
[code].....
I have a problem when trying to start Cyrus IMAP (on Ubuntu server):
#./master &
[1] 1171
[1]+ Exit 1 ./master
I got a message from /var/log/message:
May 18 16:26:44 ldap master[1146]: process started
May 18 16:26:44 ldap master[1146]: unable to setsocketopt(IP_TOS): Operation not supported
I want to configure SSH key-based authentication and SSH password Authentication in same machine for different user .
View 1 Replies View RelatedOn Ubuntu server 10.10, with a relay smtp server with authentication via postfix; I keep getting 535: Incorrect authentication data. I'm sure my username and password is correct. Heres how I set up postfix: I created a file called smarthosts.conf in my /etc/postfix/ directory that contains the following:
[Code].....
my server uses plain text authentication on port 25. I would like to use security like SSL, but this particular server is unsecured.
If I am running a script, let's say a install script. Is there a way to make Su repeat authentication rather then just returning "Authentication failed" and continuing the script?
View 3 Replies View RelatedI need to make a choice on what authentication protocol I want to use for Authentication and Authorization. I was looking at Radius and then literature suggested that Diameter was a better protocol. Keep in mind I need this on a hetrogeneous setup ( linux & windows together). Diameter seemed like a good fit until I discovered that the open source code no longer seems to be maintained ( C/C++).
I was also looking at Kerberos as an option though there is alot overhead with the server. SSL/TLS or EAP? I am looking for simple but secure and am new at the security protocols.
I have a problem with ldap client authentication in ubuntu. I am using rhel5 as openldap server and I configured ubuntu as client, when I am trying to login the following message is coming."su: Authentication service cannot retrieve authentication info. Sorry"
But when I do search through "ldapsearch" command output is coming without any errors, Can anybody explain what would be problem.
I have a network and am using squid proxy with authentication I want to create another subnet without authentication.
View 1 Replies View RelatedI recently setup an email server on Fedora Core (14). Sendmail is running and I am trying to authenticate from a client pc using imaps. I installed Cyrus-imap and it is running and listening on 993. When I try to login, it doesn't accept authentication even though I verified the user's password is correct. (tested with ssh)Is there something I have to do with Cyrus or on the server to allow connections to email? I have not used Cyrus before. I am attempting to access my mail folders via Sendmail and did not make mailboxes in Cyrus. I did allow imaps through the firewall.
View 1 Replies View RelatedI'm running SUSE linux Server version 11. I want to configure mail server with postfix & cyrus-imap. For that, i have read many documents in Internet by i met issues. I'm running DNS in this server & it's ok Now I cannont send mail through command line.
[Code]....
Recently i configured Postfix with Cyrus-Imap and it all worked fine unless i wanted to allow also AD users to use Squirrelmail.Currently AD users are able to logon to ssh server without any problems.
- wbinfo -u & -g is fine
- testsaslauth - passed
- telnet to localhost 143 + a LOGIN user password - passed
- cyradm shows active mailbox for particular user
imap i pam.d:
#%PAM-1.0
auth include system-auth
account include system-auth
I have been given the task to install slackware 13.1 over windows. I have downloaded and copied slackware 13.1 on to a disk, and rebooted the computer, but i am not getting what all the tutorials have shown. I have been looking for tutorials that specifically instruct me as to how to install slackware 13.1 on to a windows xp. I am not trying to dual run I just simply want to run slackware and slackware only.
View 5 Replies View RelatedI have a couple questions about Xfoward.
1: How much does it affect securty, over a lan network?
2: Will it cause any other security issues?
3: The most important is can I forwad X11 from a 32 bit slackware to a 64bit slackware
Here is the scenario that I�m facing.I have setup a RHEL5 machine with smb, winbind and krb with ads as the security model. Joined the RHEL machine to the domain.I�m able to see users on the active directory and also able to log-in using SSH which automatically creates a home directory for me (using oddjobd).Two things that I�m trying to achieve are:1.Only users from a certain group on the AD should be allowed to ssh into the RHEL machine.2.Once they ssh in, they should not be able to go to any other directory other than their
View 2 Replies View RelatedI want to set up NIS server. and using NIS wants to authenticate AD (Active Directory ) Users.
e.g 1) how to give rights for windows user using NIS.
2) how to manage windows user on Nis Serrver
3) if password change in windows server that should reflect in NIS Server
provide steps of Setting up NIS server.
Im using FEDORA 12 (constantine )....Everything was working fine.....until yesterday when i tried login to my GUI(gdm) it says authentication failure. so i tried logging in from CLI and it didnt worked either...(it didnt say "password incorrect",rather it it simply reset the screen to "login name:",thats weird...right?)
Then i tried to login as root from from CLI (by default Fedora does not support root login to GUI?) and i was able to login.....
Then it said "System powering down in one minute"............. i didnt understand why that happened.....! but it didnt power down in one minute...
I tried changing my user passwd...still no change.....
I've got a server that was running 11.0 and was set up so that a number of other machines could connect to it via ssh without needing a password by using rsa key authentication. This has worked for a couple of years without problem. I have just progressively upgraded 11.0->11.1, 11.1->11.2 and 11.2->11.3 so now I'm running 11.3 and the above authentication is not working.
My logs show the errors gkr-pam: couldn't get the password from user: Conversation error error: ssh_msg_send: write pam_unix2(sshd:auth): conversation failed error: ssh_msg_send: write
when the automated logins are attempted. Are there any configuration changes that need to be made to get this to work again with 11.3?