[Dovecot] Dovecot+PAM advice please?

S. A. Woltering Ashley.Woltering at ecmwf.int
Mon Sep 14 12:50:21 EEST 2009


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi all,

sorry to bother you with this. I'm trying to set up an experimental
system (which may become production if it ever gets off the ground) and
it's not working.

The short version: I'm trying to get Dovecot 1.2.4 to authenticate
against a customised PAM module. In short, we're using a specialised OTP
radius backend. One of my colleagues has coded up a PAM module for this
backend. The IMAP service is on HP-UX11.23, IA64.

The module is compiles into /usr/lib/security/hpux32 and is called
"pam_cached_radius.so.0.0". The entry in /etc/pam.conf is:
cached-radius   auth required   pam_cached_radius.so.0.0

The PAM module compiles OK, and my colleague's test suite (run, both as
root and as our local "dovecot" user) works fine.

When I use the following options in dovecot.conf:
auth default {
  user = root
  mechanisms = plain
  passdb pam {
    args = cached-radius
  }
  userdb passwd {
  }
}

it fails leaving only the log entry below in syslog.

Sep 14 09:15:15 elrond syslog: load_modules: can not open module
/usr/lib/security/hpux32/pam_cached_radius.so.0.0
Sep 14 09:15:22 elrond syslog: load_modules: can not open module
/usr/lib/security/hpux32/pam_cached_radius.so.0.0

(Always 2 entries).

I appreciate that this probably isn't a dovecot issue per se, but it is
suspicious that our test suite works and divecot can't access the module.

I'd be most grateful if anyone could offer some possible avenues of
investigation.
Thanks,
SAW
- --
Steven-Ashley Woltering, MBCS, Systems Analyst,
ECMWF, Shinfield Park, Reading, RG2 9AX, UK
Tel.: +44 1189 499473 (internal x2473)
Email: Steven.Woltering at ecmwf.int
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.4-svn0 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iD8DBQFKrhHch854NVK99FMRAnUiAJ9nOhLkGPFLGhEnhIwbk5V5RvGfPACghZUc
8HWimxrolkqhBkkjPD4AtQw=
=WmSS
-----END PGP SIGNATURE-----


More information about the dovecot mailing list