[Dovecot] Logging "issue" with PAM authentication

Steve Johnson maillist at sjohnson.info
Wed Jul 7 23:14:34 EEST 2004


Great, thanks a lot, solved the problem. No more annoying logs every 2-5
seconds :)

Steve Johnson

On Wed, 2004-07-07 at 14:39, Ray Miller wrote:
> On Wed, Jul 07, 2004 at 02:21:04PM -0400, Steve Johnson wrote:
> > 
> > I've tried with just the following:
> > 
> > auth        sufficient    /lib/security/$ISA/pam_ldap.so use_first_pass
> > password    sufficient    /lib/security/$ISA/pam_ldap.so use_authtok
> > session     optional      /lib/security/$ISA/pam_ldap.so
> > [...]
> > In both of these situations, users can't authenticate. Is there
> > something I'm doing wrong? I'm not that familiar with pam, so it's a
> > very plausible cause! :)
> 
> I'm fairly sure you don't need the password line, but that's not
> likely to be causing your problem - more likely it's the use_first_pass
> option.  Try:
> 
> auth	 required	/lib/security/$ISA/pam_ldap.so
> account	 required	/lib/security/$ISA/pam_ldap.so
> password required	/lib/security/$ISA/pam_deny.so
> session  required	/lib/security/$ISA/pam_ldap.so



More information about the dovecot mailing list