Re: Problem testsaslauthd

["Kurt D. Zeilenga" <Kurt@xxxxxxxxxxxx>]

This list is for discussions regarding the standardization of
SASL and work of the IETF SASL working group.  Questions
(and answers) regarding the use of any particular SASL
implementation should be directed appropriate support forums
for that implementation.  For Cyrus SASL, that forum would be
the <cyrus-sasl@xxxxxxxxxxxxxxxxxxxx> list (to subscribe, send
"subscribe cyrus-sasl" to <majordomo@xxxxxxxxxxxxxxxxxxxx>).

Regards, Kurt (SASL WG co-chair)

At 04:31 AM 5/18/2006, Paco Martinez Rodriguez wrote:

>Hi
>
>My Server has installed postfix+sasl+winbindd+samba with SuSE 10.0
>
>I have problems executing “testsaslauthd –u USER –p PASS –s smtp”. 
>
>Output is  0: NO "authentication failed"
>
>In sasl log files appears 
>
>DEBUG: auth_pam: pam_acct_mgmt failed: Permission denied
>
>May 18 12:57:06 saslauthd[31381]: do_auth         : auth failure: [user=USER] [service=smtp] [realm=] [mech=pam] [reason=PAM acct error]
>
>However in winbind log appears:
>
>Verify  user `USER`
>
>User ‘USER’ granted access
>
>Wbinfo –u, wbinfo –g, wbinfo –t executes ok
>
>File /etc/pam.d/smtp is
>
>auth      sufficient     /lib/security/pam_winbind.so debug
>
>account   sufficient     /lib/security/pam_winbind.so debug
>
>File /etc/sysconfig/saslauthd is
>
>SASLAUTHD_AUTHMECH="pam”
>
>SASLAUTHD_FLAGS="-d -V -n0"
>
>And /etc/samba/smb.conf is
>
>[global]
>
>        workgroup = GROUP 
>
>        winbind separator = _
>
>        idmap uid = 10000-20000
>
>        idmap gid = 10000-20000
>
>        winbind enum users = yes
>
>        winbind enum groups = yes
>
>        password server = 192.168.1.1
>
>        realm = 192.168.1.1
>
>        interfaces = eth1
>
>        auth methods = winbind
>
>        template shell = /bin/false
>
>        winbind use default domain = yes
>
>        encrypt passwords = Yes
>
>        wins server = 192.168.1.1
>
>Thanks !!