Re: Cyrus-imapd 2.0.9 all users accept the cyrus password & noothers!

2001-01-03 Thread David L. Parsley
Lawrence Greenfield wrote: [snip] > This is exactly the problem. A future version of Cyrus SASL will > probably discontinue the PAM password method is favor of forcing > people to use pwcheck. Ofc, pwcheck could/would be made to use PAM? That might clean things up a bit and make PAM more reliab

Re: Cyrus-imapd 2.0.9 all users accept the cyrus password & noothers!

2000-12-31 Thread GOMBAS Gabor
On Sun, Dec 31, 2000 at 01:24:46AM -0500, Andy Hubbell, Jr. wrote: > Pam is working beautifully now! ;) Though cyradm asks me for my password > twice before authenticating me, is this normal? You are probably missing a "try_first_pass" parameter in the PAM configuration file. Gabor -- Gabor

Re: Cyrus-imapd 2.0.9 all users accept the cyrus password & noothers!

2000-12-31 Thread Ross Golder
GOMBAS Gabor wrote: > > On Thu, Dec 28, 2000 at 02:45:22PM -0500, Todd Nemanich wrote: > > > I'm not exactly sure if this is the reason, but PAM does not allow any > > user except root to check another user's password. > > Not true. Any user can use PAM to check any password _if_ that user has

Re: Cyrus-imapd 2.0.9 all users accept the cyrus password & noothers!

2000-12-31 Thread Andy Hubbell, Jr.
Sorry folks, I was just confused & marginally mis-configured... Pam is working beautifully now! ;) Though cyradm asks me for my password twice before authenticating me, is this normal? Andy H. At 10:49 AM 12/29/2000 +0100, you wrote: >On Thu, Dec 28, 2000 at 07:27:06PM -0600, [EMAIL PROTECT

Re: Cyrus-imapd 2.0.9 all users accept the cyrus password & noothers!

2000-12-30 Thread GOMBAS Gabor
On Thu, Dec 28, 2000 at 07:27:06PM -0600, [EMAIL PROTECTED] wrote: > Linux PAM has an annoying feature, by the way, where it authenticates the > invoking user rather than the requested user, when invoked by a non- root > user. Hmm, what version of Linux-PAM are you using? I'm using 0.72 (not a m

Re: Cyrus-imapd 2.0.9 all users accept the cyrus password & noothers!

2000-12-30 Thread GOMBAS Gabor
On Thu, Dec 28, 2000 at 02:45:22PM -0500, Todd Nemanich wrote: > I'm not exactly sure if this is the reason, but PAM does not allow any > user except root to check another user's password. Not true. Any user can use PAM to check any password _if_ that user has access to the database containing t

RE: Cyrus-imapd 2.0.9 all users accept the cyrus password & noothers!

2000-12-28 Thread Mobeen Azhar
D]]On Behalf Of Ken Murchison Sent: Thursday, December 28, 2000 2:35 PM To: Lawrence Greenfield Cc: [EMAIL PROTECTED] Subject: Re: Cyrus-imapd 2.0.9 all users accept the cyrus password & noothers! Lawrence Greenfield wrote: > >Date: Thu, 28 Dec 2000 14:45:22 -0500 >From: Tod

Re: Cyrus-imapd 2.0.9 all users accept the cyrus password & noothers!

2000-12-28 Thread mills
Amos Gouaux writes: > >Perhaps if configure enables PAM support, it could print a warning >message that for local passwd/shadow access, pwcheck should be used? It's a little more complicated than that. I don't know if this is part of the design of PAM, but most programs that do authentication th

Re: Cyrus-imapd 2.0.9 all users accept the cyrus password & noothers!

2000-12-28 Thread Amos Gouaux
> On Thu, 28 Dec 2000 14:58:58 -0500, > Lawrence Greenfield <[EMAIL PROTECTED]> (lg) writes: lg> This is exactly the problem. A future version of Cyrus SASL will lg> probably discontinue the PAM password method is favor of forcing lg> people to use pwcheck. Then what about things you co

Re: Cyrus-imapd 2.0.9 all users accept the cyrus password & noothers!

2000-12-28 Thread Ilya
ROTECTED]> To: <[EMAIL PROTECTED]>; "Todd Nemanich" <[EMAIL PROTECTED]> Sent: Thursday, December 28, 2000 2:58 PM Subject: Re: Cyrus-imapd 2.0.9 all users accept the cyrus password & noothers! >Date: Thu, 28 Dec 2000 14:45:22 -0500 >From: Todd Nem

Re: Cyrus-imapd 2.0.9 all users accept the cyrus password & noothers!

2000-12-28 Thread Walter Wong
Ken Murchison <[EMAIL PROTECTED]> writes: > I know there are lots of other people using PAM, and I for one would > hate to see support for it taken out of SASL. The idea is to simplify the case where you are given a plaintext password and need to authenticate with it. PAM support isn't really bei

Re: Cyrus-imapd 2.0.9 all users accept the cyrus password & noothers!

2000-12-28 Thread Ken Murchison
Lawrence Greenfield wrote: > >Date: Thu, 28 Dec 2000 14:45:22 -0500 >From: Todd Nemanich <[EMAIL PROTECTED]> >Organization: Bay Mountain, Inc. > >"David L. Parsley" wrote: >> >> Me too! I thought maybe I'd done something dumb, and haven't gone back >> to try this a

Re: Cyrus-imapd 2.0.9 all users accept the cyrus password & noothers!

2000-12-28 Thread Todd Nemanich
"David L. Parsley" wrote: > > Me too! I thought maybe I'd done something dumb, and haven't gone back > to try this again. This happened to me with 2.0.7. Using PAM, I could > only log in supplying the password for cyrus. I switched to sasldb and > it worked fine. > > Still, I wonder if this

Re: Cyrus-imapd 2.0.9 all users accept the cyrus password & noothers!

2000-12-28 Thread Lawrence Greenfield
Date: Thu, 28 Dec 2000 14:45:22 -0500 From: Todd Nemanich <[EMAIL PROTECTED]> Organization: Bay Mountain, Inc. "David L. Parsley" wrote: > > Me too! I thought maybe I'd done something dumb, and haven't gone back > to try this again. This happened to me with 2.0.7. Using P

Re: Cyrus-imapd 2.0.9 all users accept the cyrus password & noothers!

2000-12-28 Thread David L. Parsley
Me too! I thought maybe I'd done something dumb, and haven't gone back to try this again. This happened to me with 2.0.7. Using PAM, I could only log in supplying the password for cyrus. I switched to sasldb and it worked fine. Still, I wonder if this is a bug or just a common misconfiguratio