Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 92777 - cyrus-sasl-2.1.20 pam_mysql authentication fails
Summary: cyrus-sasl-2.1.20 pam_mysql authentication fails
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: x86 Linux
: High blocker (vote)
Assignee: Net-Mail Packages
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2005-05-16 03:45 UTC by Markus Flaig
Modified: 2005-05-16 08:55 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Markus Flaig 2005-05-16 03:45:44 UTC
i am using a virtual mailserver setup exactly the way it is described on the virtual mailserver howto on gentoo.org. what happens is, that when i emerge cyrus-sasl in a version greater than 2.1.18-r2 the pam_mysql authentication fails with the following entry in /var/log/messages.

--
May 16 12:11:59 perceptor saslauthd[2814]: DEBUG: auth_pam: pam_authenticate failed: Permission denied
May 16 12:11:59 perceptor saslauthd[2814]: do_auth         : auth failure: [user=yps] [service=smtp] [realm=schanzengeeks.net] [mech=pam] [reason=PAM auth error]
May 16 12:11:59 perceptor postfix/smtpd[27843]: warning: SASL authentication failure: Password verification failed
May 16 12:11:59 perceptor postfix/smtpd[27843]: warning: c215236.adsl.hansenet.de[213.39.215.236]: SASL PLAIN authentication failed
--

this perfectly works when i use cyrus-sasl-2.1.18-r2 because pam_mysql is a valid use flag and sets up cyrus-sasl to authenticate properly.

however, i really would like this getting fixed, either in the way the documentation gets changed so it will work with the latest cyrus sasl or cyrus sasl gets some backports so pam_mysql will work.

i have set this bug to be a blocker, because it really _blocks_ everything about mysql authentication / virtual mailserver setup as stated in the howto. i am not the first person falling in this pit...

Reproducible: Always
Steps to Reproduce:
1.follow the virtual mailserver howto on gentoo.org (yes, exactly what is written there)
2.emerge cyrus-sasl
3.try to authenticate via sql...

Actual Results:  
well, cyrus-sasl-2.1.20 gets installed what somehow forces pam_mysql to not work.

Expected Results:  
proper mysql authentication as stated in the documentation.

perceptor postfix # emerge info
Portage 2.0.51.19 (default-linux/x86/2005.0/2.4, gcc-3.3.5-20050130,
glibc-2.3.4.20041102-r1, 2.4.30-grsec-2.1.5 i686)
=================================================================
System uname: 2.4.30-grsec-2.1.5 i686 Intel(R) Pentium(R) 4 CPU 2.80GHz
Gentoo Base System version 1.4.16
Python:              dev-lang/python-2.3.5 [2.3.5 (#1, May  9 2005, 00:30:52)]
dev-lang/python:     2.3.5
sys-apps/sandbox:    [Not Present]
sys-devel/autoconf:  2.59-r6, 2.13
sys-devel/automake:  1.9.5, 1.7.9-r1, 1.8.5-r3, 1.5, 1.4_p6, 1.6.3
sys-devel/binutils:  2.15.92.0.2-r7
sys-devel/libtool:   1.5.16
virtual/os-headers:  2.4.22-r1
ACCEPT_KEYWORDS="x86"
AUTOCLEAN="yes"
CFLAGS="-O2 -march=pentium4 -fomit-frame-pointer -pipe -fstack-protector"
CHOST="i686-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/kde/2/share/config /usr/kde/3/share/config
/usr/share/config /var/qmail/control"
CONFIG_PROTECT_MASK="/etc/gconf /etc/terminfo /etc/env.d"
CXXFLAGS="-O2 -march=pentium4 -fomit-frame-pointer -pipe -fstack-protector"
DISTDIR="/usr/portage/distfiles"
FEATURES="autoaddcvs autoconfig ccache distlocks sandbox sfperms strict"
GENTOO_MIRRORS="http://ftp.snt.utwente.nl/pub/os/linux/gentoo"
MAKEOPTS="-j2"
PKGDIR="/usr/portage/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
SYNC="rsync://rsync.gentoo.org/gentoo-portage"
USE="x86 apm avi berkdb bitmap-fonts crypt emboss encode foomaticdb fortran gd
gd-external gdbm gif gpm gtk2 imagemagick imap imlib ipv6 jpeg libg++ libwww mad
maildir memlimit mikmod mp3 mpeg mysql ncurses nls oggvorbis opengl pam
pam-mysql pdflib perl png python quicktime readline sasl sdl spell ssl svga tcpd
tiff truetype truetype-fonts type1-fonts vhost vhosts xml xml2 xmms xv zlib
userland_GNU kernel_linux elibc_glibc"
Unset:  ASFLAGS, CBUILD, CTARGET, LANG, LC_ALL, LDFLAGS, LINGUAS, PORTDIR_OVERLAY
Comment 1 Markus Flaig 2005-05-16 03:56:07 UTC
sorry guys,

i found the solution for this bug myself. 

when emerging cyrus-sasl it wants to replace /etc/conf.d/saslauthd with the default settings.

default settings do not contain the valid string

SASLAUTHD_OPTS="${SASLAUTH_MECH} -a pam -r"

they contain 

SASLAUTHD_OPTS="${SASLAUTH_MECH} -a pam"

this stopped the whole thing from working.

cheers,
toskala
Comment 2 Alex Howells (RETIRED) gentoo-dev 2005-05-16 08:52:50 UTC
Bug is not meant to be assigned to 'Developer Relations', reopening so I can put it elsewhere, then I'll close as it was self-resolved.
Comment 3 Alex Howells (RETIRED) gentoo-dev 2005-05-16 08:55:05 UTC
Closing the bug again :)