Community Packages

Please read this before reporting a bug:
https://wiki.archlinux.org/title/Bug_reporting_guidelines

Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.

REPEAT: Do NOT report bugs for outdated packages!
Tasklist

FS#59498 - [opensmtpd] PAM auth not working

Attached to Project: Community Packages
Opened by ipp (n8V8r) - Tuesday, 31 July 2018, 18:20 GMT
Last edited by Doug Newgard (Scimmia) - Thursday, 02 August 2018, 16:12 GMT
Task Type Bug Report
Category Packages
Status Closed
Assigned To No-one
Architecture All
Severity High
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 1
Private No

Details

Description: It appears that whilst [ --with-auth-pam \] is present in 6.0.3p1-2 (https://git.archlinux.org/svntogit/community.git/tree/trunk/PKGBUILD?h=packages/opensmtpd) the PAM authentication seems be working.

Likely reason is that the service name as parameter is absent from the string. Looking at [ configure ] in the upstream source package the syntax reads [ --with-auth-pam=SERVICE Enable PAM authentication support (default=smtpd) ]


Additional info:
* package version(s) 6.0.3p1-2
* config and/or log files etc.


Steps to reproduce:

1. pacman -S openspmtd
2. touch /etc/pam.d/smtpd | printf "auth required pam_unix.so nullok \naccount required pam_unix.so" | tee /etc/pam.d/smtpd > /dev/null
3. make all necessary configuration settings for opensmtpd (there are none though pertaining to PAM)
4. systemctl start smtpd
5. configure mail client with connection details of MTA and governing authentication method (normal password)
5. log into the MTA with a mail client

Expected but not happening : mail client pops up password request for logging into the MTA

Not expected but happening : mail client does not pop password request for logging into the MTA and connects to MTA regardless

Monitoring the MTA logs during the login period of the mail client the absence of PAM authentication is apparent.

This task depends upon

Closed by  Doug Newgard (Scimmia)
Thursday, 02 August 2018, 16:12 GMT
Reason for closing:  Not a bug
Comment by ipp (n8V8r) - Tuesday, 31 July 2018, 18:25 GMT
Correction of the inital report

- the PAM authentication seems be working | + the PAM authentication seems not to be working
Comment by loqs (loqs) - Tuesday, 31 July 2018, 23:42 GMT
From configure line 17439 if a service name is not set smtpd will be used
# Check for PAM libs
PAM_MSG="no"
USE_PAM_SERVICE=smtpd

# Check whether --with-auth-pam was given.
if test "${with_auth_pam+set}" = set; then :
withval=$with_auth_pam;
if test "x$withval" != "xno"; then
if test -n "$withval" -a "x${withval}" != "xyes"; then
USE_PAM_SERVICE=$withval
fi

configure summary
OpenSMTPD has been configured with the following options:
User binaries: /usr/bin
System binaries: /usr/bin
Configuration files: /etc/smtpd
mail.local program: /usr/lib/smtpd/opensmtpd/mail.local
encrypt program: /usr/lib/smtpd/opensmtpd/encrypt
Manual pages: /usr/share/man/manX
smtpd.sock dir: /run
smtpd.pid dir: /var/run/
Privilege separation chroot path: /var/empty
Manpage format: doc
Package libexecdir: /usr/lib/smtpd/opensmtpd
PAM support: yes
BSD Auth support: no

which would indicate  FS#50806  has been resolved (ldd shows smtpd is linked to libpam.so.0)
Comment by ipp (n8V8r) - Wednesday, 01 August 2018, 09:31 GMT
Thank you for the feedback. I did not see that part.

That invalidates what I thought being the reason. Suppose I would have to look up other avenues of why it is not working.

Loading...