Scalix Forums

I'm trying to use pam_ldap for authentication.
I'm reading the sxpampasswd and om_debug man files and I'm testing it with pamcheck but it's not working:

[root@scalix pam.d]# sxpampasswd "Eyal Marantenboim" -vvv
pam_start_om("pamcheck", "Eyal Marantenboim")
pam_start_om: User not known to the underlying authentication module

Password not changed: User not known to the underlying authentication module


pamcheck:
password required om_om2authid
password required om_debug file=stderr verbosity=3
password required pam_ldap
password required om_debug


any ideas?

Let's start by checking for the user's existence...

can you post the output of ?

Thanks,
Florian.

[root@scalix ~]# omshowu -n "Eyal Marantenboim"
Authentication ID: eyalm
User Name : Eyal Marantenboim /CN=Eyal Marantenboim
MailNode : scalix,cardon
Internet Address : "Eyal Marantenboim" <eyalm@cardonhealthcare.com>="Eyal Marantenboim" <eyalm@10.1.1.25>
System Login : 60535
Password : set
Admin Capabilities : YES
Mailbox Admin Capabilities : NO
Language : AMERICAN
Virtual Vault : Enabled (default)
Mail Account: Unlocked
Last Signon : 04.28.06 11:17:38
Receipt of mail : ENABLED
Service level : 0
Excluded from Tidying : NO
User Class : Full

did you try a similar setup for authentication? (i.e. with sxpamauth as a test). this is usually simpler than password change, to begin with.

-- f.

[root@scalix ~]# sxpamauth -vvv "Eyal Marantenboim"
pam_start_om("pamcheck", "Eyal Marantenboim")
pam_start_om: User not known to the underlying authentication module

Not authenticated: User not known to the underlying authentication module

not sure - could it be that the pam_ldap module you're using requires the use of a option so that it doesn't look up the user in the /etc/passwd file. some linux-based pam modules (like pam_smb) do that. if that's the case, the error informatoin provided by the module would be correct.

if you just replace pam_ldap with om_auth and authenticate against the scalix-internal password - does this properly?

thx,
Florian.

changed pam_ldap with om_ldap so my pamcheck file looks like:

password required om_om2authid
password required om_debug file=stderr verbosity=3
password required om_auth
password required om_debug

[root@scalix pam.d]# sxpamauth -vvv "Eyal Marantenboim"
pam_start_om("pamcheck", "Eyal Marantenboim")
pam_start_om: User not known to the underlying authentication module

Not authenticated: User not known to the underlying authentication module



maybe my pamcheck file is bad?

yes, if you want to test sxpamauth, then

auth required <blahblah>

entries in the pamcheck file are relevant. the password entries are relevant for password change and the sxpampasswd command.

-- f

added auth required om_auth to pamcheck
but still the same msg..

[root@scalix pam.d]# sxpamauth -vvv "Eyal Marantenboim"
pam_start_om("pamcheck", "Eyal Marantenboim")
pam_start_om: User not known to the underlying authentication module

Not authenticated: User not known to the underlying authentication module

please post your full pamcheck file...

-- f.

actually, this might be a bug in sxpamauth, please try

sxpamauth -vvv Marantenboim

i.e. use only the lastname, provided it is unique...

-- F.

I have a user the I added with omaddu (nladmin).
that is the only user that seems to be working:




[/code]

pamcheck:
auth required om_auth
password required om_om2authid
password required om_debug file=stderr verbosity=3
password required om_auth
password required om_debug

does that user have a valid scalix password?

try setting it:

ommodu -n Marantenboim -p mypass

and try authenticating with mypass

-- f