From: xyon <xy...@in...> - 2007-04-07 00:38:37
|
Figured I'd chime in and let everyone know of my progress. I used Moriyoshi's patch for custom queries in pam_mysql (linked below). Even though I still cannot match against the Scalix %u (username) value, I can match on the %p (password) value, so things are at least moving in the proper direction. I've tried everything with the "%u" value (TRIM, LOWER, etc), and yet it still refuses to match when coming from Scalix. So this problem all along wasn't a pam_mysql thing, but a Scalix thing. Although this has been a great learning experience for me, I apologize if I've caused any undue frustration. Here is the patch in case anyone is interested. It works great!: http://sourceforge.net/tracker/index.php?func=3Ddetail&aid=3D522843&group_i= d=3D5741&atid=3D305741 Thank you to Gary and Moriyoshi for all your patience and help during this process. You guys are great. Have a wonderful weekend everyone! On Fri, 2007-04-06 at 14:49 -0400, xyon wrote: > On Sat, 2007-04-07 at 02:12 +0900, Moriyoshi Koizumi wrote: > > Xyon, > >=20 > > xyon wrote: > > > Is pam_mysql very picky about config file syntax? Perhaps my syntax i= s > > > off by one character or something, although it would likely error out > > > wouldn't it? Is "verbose=3D1" the most verbose I can get? > >=20 > > If you doubt the pam_mysql's config file, then list all the settings in > > pam_mysql lines of the PAM config file, which should accurately > > configures pam_mysql. > >=20 > > "verbose" is an on / off setting. > >=20 > > > Perhaps an strace would provide some insight, but I'm not sure which > > > process should be strace'd. > >=20 > > strace (or ltrace) pam_mysql with pamtester. That's exactly what I was > > doing. > >=20 > > # ltrace pamtester <service_name> <user_name> authenticate >=20 > Ah perfect. This is quite the handy tool, nicely done! There was an rpm > repo that had it, relieving me of building my own rpm: > http://ftp.belnet.be >=20 > Perhaps I was wrong about cups. Some tweaking of the pam file rendered > it working. Pamtester works like a champ, even with the scalix config > file. This does in fact appear to be a Scalix problem, unfortunately. >=20 > I don't know if it's including something extra in the query or what. > There are people who have gotten it to work with kerberos via pam, so I > don't see why it won't with pam_mysql. >=20 >=20 > >=20 > ------------------------------------------------------------------------- > Take Surveys. Earn Cash. Influence the Future of IT > Join SourceForge.net's Techsay panel and you'll get the chance to share y= our > opinions on IT & business topics through brief surveys-and earn cash > http://www.techsay.com/default.php?page=3Djoin.php&p=3Dsourceforge&CID=3D= DEVDEV > _______________________________________________ Pam-mysql-general mailing= list Pam...@li... https://lists.sourceforge.net= /lists/listinfo/pam-mysql-general --=20 xyon ------------------------------------------------------------------------- "They who can give up essential liberty to obtain a little temporary safety deserve neither liberty nor safety." --Benjamin Franklin ------------------------------------------------------------------------- |