Re: [hylafax-users] Problem authenticating through PAM

[Klaus Rörig <hylafax@xxxxxxxxxxxxxxxxxxxxx>]

Hello,

I've got a similar problem: I try to auth against a MySql database.
But I cannot login into Hylafax-Server with my accounts in MySql.

MySql table:
+-----------+------------------+------+-----+---------+-------+
| Field     | Type             | Null | Key | Default | Extra |
+-----------+------------------+------+-----+---------+-------+
| username  | varchar(8)       | NO   | PRI |         |       |
| password  | varchar(8)       | NO   |     |         |       |
+-----------+------------------+------+-----+---------+-------+

/etc/pam.d/hylafax:
auth required pam_mysql.so user=hylafax passwd=XXXX host=localhost
db=hylafax table=users usercolumn=username passwdcolumn=password crypt=0
verbose=10 debug=1
account required pam_mysql.so user=hylafax passwd=XXXX host=localhost
db=hylafax table=users usercolumn=username passwdcolumn=password crypt=0
verbose=10 debug=1
session required pam_mysql.so user=hylafax passwd=XXXX host=localhost
db=hylafax table=users usercolumn=username passwdcolumn=password crypt=0
verbose=10 debug=1

This is what appears in my logfile when I try to login:
Aug 14 12:03:09 fax-neu HylaFAX[24354]: pam_mysql - option verbose is
set to "10"
Aug 14 12:03:09 fax-neu HylaFAX[24354]: pam_mysql - option debug is set
to "1"
Aug 14 12:03:09 fax-neu HylaFAX[24354]: pam_mysql - pam_mysql_close_db()
called.
Aug 14 12:03:09 fax-neu HylaFAX[24354]: pam_mysql -
pam_sm_authenticate() called.
Aug 14 12:03:09 fax-neu HylaFAX[24354]: pam_mysql - pam_mysql_open_db()
called.
Aug 14 12:03:09 fax-neu HylaFAX[24354]: pam_mysql - pam_mysql_open_db()
returning 0.
Aug 14 12:03:09 fax-neu HylaFAX[24354]: pam_mysql -
pam_mysql_check_passwd() called.
Aug 14 12:03:09 fax-neu HylaFAX[24354]: pam_mysql -
pam_mysql_format_string() called
Aug 14 12:03:09 fax-neu HylaFAX[24354]: pam_mysql -
pam_mysql_quick_escape() called.
Aug 14 12:03:09 fax-neu HylaFAX[24354]: pam_mysql - SELECT password FROM
users WHERE username = 'root'
Aug 14 12:03:09 fax-neu HylaFAX[24354]: pam_mysql -
pam_mysql_check_passwd() returning 6.
Aug 14 12:03:09 fax-neu HylaFAX[24354]: pam_mysql - pam_mysql_sql_log()
called.
Aug 14 12:03:09 fax-neu HylaFAX[24354]: pam_mysql - pam_mysql_sql_log()
returning 0.
Aug 14 12:03:09 fax-neu HylaFAX[24354]: pam_mysql - pam_mysql_converse()
called.
Aug 14 12:03:09 fax-neu HylaFAX[24354]: CAUGHT SIGNAL 11

My distrib is SuSE Linux Enterprise Server 10

Any ideas what's going wrong. Google doesn't know.

Klaus

Jeffrey Esquivel S. schrieb:
> Hi,
> 
> I installed a HylaFax server on a Debian 4.0 ("etch") computer and
> followed the instructions from the handbook and everything worked just
> fine.
> 
> My problem started when I wanted to change the authentication method
> from hosts.hfaxd to PAM.
> 
> I did as the handbook said and it didn't worked (I got a "530 Login
> Failed" error, with the correct username/password). Then, just in
> case, I tried changing /etc/pam.d/hylafax to only have the line "auth
> required pam_permit.so" and it kept failing with the same error
> message.
> 
> I looked all over the Internet and the people who had my same problem
> never got to a solution (or if they did, they never posted it back
> :-). After about 4 hours of trying everything that came to my mind
> plus what I found on the internet, I gave up, and just when I started
> searching for something else, I got to this page[0] in German (which
> is kind of a problem, since I don't speak German :-). After some web
> translation, I realized that it said my problem could be caused
> because hfaxd was running as user uucp, which doesn't have permissions
> to read /etc/shadow. So I tested with chmod o+r /etc/shadow, and guess
> what? It worked! In the end, the solution I implemented (because I
> can't leave /etc/shadow readable for everyone!) was to join the user
> uucp to the group shadow (which has read access to /etc/shadow).
> 
> Now, my question is: Is this supposed to work this way or is it some
> kind of problem specific to Debian or my setup? Is there other, more
> elegant way, to enable PAM auth for HylaFax? Is the solution to this
> issue documented somewhere (which means I am a terrible Googler :-)?
> 
> Thanks for your time,
> 
> [0] http://www.hylafax.org/content/User_talk:Atlantex
> 



____________________ HylaFAX(tm) Users Mailing List _______________________
  To subscribe/unsubscribe, click http://lists.hylafax.org/cgi-bin/lsg2.cgi
 On UNIX: mail -s unsubscribe hylafax-users-request@xxxxxxxxxxx < /dev/null
  *To learn about commercial HylaFAX(tm) support, mail sales@xxxxxxxxx*