<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>tom's blog &#187; pam auth</title>
	<atom:link href="http://tom.knaupp.com/tag/pam-auth/feed/" rel="self" type="application/rss+xml" />
	<link>http://tom.knaupp.com</link>
	<description>free software, security and a bunch of my strange thoughts</description>
	<lastBuildDate>Tue, 23 Mar 2010 22:38:01 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0.1</generator>
		<item>
		<title>PAM-Authentication &amp; MySQL (v5) / b1gMail</title>
		<link>http://tom.knaupp.com/2007/03/15/pam-authentication-mysql-v5/</link>
		<comments>http://tom.knaupp.com/2007/03/15/pam-authentication-mysql-v5/#comments</comments>
		<pubDate>Thu, 15 Mar 2007 15:46:23 +0000</pubDate>
		<dc:creator>tom</dc:creator>
				<category><![CDATA[Mailserver]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[mysql]]></category>
		<category><![CDATA[old_password]]></category>
		<category><![CDATA[pam auth]]></category>
		<category><![CDATA[pam authentication]]></category>

		<guid isPermaLink="false">http://tom.knaupp.com/?p=29</guid>
		<description><![CDATA[Enviroment: SuSE Linux 10.1 pam-0.99.3.0-29.3, pam-modules-10.1-7 postfix-2.2.9-10 mysql-5.0.18-20.8, mysql-client-5.0.18-16 I was trying to implement SASL-authentication via PAM (which is using a mysql-backend) in a postfix installation. Output from maillog: postfix/smtpd: warning: SASL authentication failure: Password verification failed postfix/smtpd: warning: [x.x.x.x]: SASL PLAIN authentication failed Checking the syslog: saslauthd: pam_b1gmail: cannot connect to mysql database (Access [...]]]></description>
			<content:encoded><![CDATA[<p>Enviroment:</p>
<ul>
<li>SuSE Linux 10.1
<ul>
<li>pam-0.99.3.0-29.3, pam-modules-10.1-7</li>
</ul>
<ul>
<li>postfix-2.2.9-10</li>
</ul>
<ul>
<li>mysql-5.0.18-20.8, mysql-client-5.0.18-16</li>
</ul>
</li>
</ul>
<p>I was trying to implement SASL-authentication via PAM (which is using a mysql-backend) in a postfix installation.<br />
Output from maillog:<br />
<br />
<code>postfix/smtpd: warning: SASL authentication failure: Password verification failed<br />
postfix/smtpd: warning: [x.x.x.x]: SASL PLAIN authentication failed</code><br />
<br />
Checking the syslog:<br />
<br />
<code>saslauthd: pam_b1gmail: cannot connect to mysql database<br />
(Access denied for user 'xx'@'localhost' (using password: YES))<br />
saslauthd: DEBUG: auth_pam: pam_authenticate failed: Permission denied<br />
saslauthd: do_auth : auth failure: [user=xx] [service=smtp]<br />
[realm=domain.tld] [mech=pam] [reason=PAM auth error]</code><br />
<br />
Reason:<br />
The PAM module is using a deprecated way to connect to the MySQL-DB.<br />
<br />
Solution:<br />
Set the MySQL-Password to OLD_PASSWORD:<br />
<br />
<code>SET PASSWORD FOR user'@'localhost' = OLD_PASSWORD('password');</code></p>
]]></content:encoded>
			<wfw:commentRss>http://tom.knaupp.com/2007/03/15/pam-authentication-mysql-v5/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
