[jadmin] PAM Authentication

[Bob Larsen]

I have altered the c2s.xml and commented out all non-plain mechanisms for authentication.  As I was only connecting with SSL, I believe the plain mechanism was being used already.

No change in behavior.

The other two items on the checklist appear to only apply when nusing pam to authenticate against /etc/shadow.  
I am authenticating against winbind.  
I know I can authenticate using kinit (also authenticates against winbind) as a non root user.

Just tot be sure, I modified my init script to run the daemons as root.

Again no change in behavior.

thanks

Bob Larsen
Bryan D Ramey and Associates
bob at bryanramey.com
-----Original Message-----
From: jadmin-bounces at jabber.org [mailto:jadmin-bounces at jabber.org] On Behalf Of Tomasz Sterna
Sent: Saturday, January 19, 2008 4:37 AM
To: Jabber/XMPP server administration list
Subject: Re: [jadmin] PAM Authentication

On Pt, 2008-01-18 at 12:21 -0500, Bob Larsen wrote:
> ./configure --prefix=/path/to/jabberd --enable-pgsql --enable-pam
> Am I correct in interpreting this to mean that authentication is
> compiled for both pam and postgres, and storage is compiled as
> postgres?

Right.


> I configured the c2s.xml as follows:

Have you chacked http://jabberd2.xiaoka.com/wiki/PAM ?
There is a simple checklist there:
1. --enable-pam + c2s running as root
2. --enable-pipe + jabberd-authpipe-pam.pl running as root
3. only <plain/> authentication enabled in c2s.xml

You have other than <plain/> authentication methods enabled.


-- 
  /\_./o__ Tomasz Sterna
 (/^/(_^^' http://www.xiaoka.com/
._.(_.)_   im:smoku at xiaoka.com

_______________________________________________
JAdmin mailing list
JAdmin at jabber.org
http://mail.jabber.org/mailman/listinfo/jadmin
FAQ: http://www.jabber.org/about/jadminfaq.shtml
_______________________________________________

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.