SASL AUTH problem

[Josep M.-5]

Hello.

I try the following:

testsaslauthd -f /var/spool/postfix/var/run/saslauthd/mux -u test -p
passwordgood           (pass OK) This is OK
testsaslauthd -f /var/spool/postfix/var/run/saslauthd/mux -u test -p
passwordgoodXXXXX      (pass OK) This should FAIL

The password is "passwordgood" but "passwordgoodXXXXX" is accepted
too!!!!!

But....for example "passwoCCrdgood" is NOT accepted


debianet:/home/krasher# cat /etc/default/saslauthd
START=yes
MECHANISMS="pam"
MECH_OPTIONS=""
THREADS=5
OPTIONS="-c -m /var/spool/postfix/var/run/saslauthd"

debianet:/home/krasher# cat /usr/lib/sasl2/smtpd.conf
pwcheck_method: saslauthd
mech_list: LOGIN PLAIN
log_level: 5


debianet:/home/krasher/testing-smtp/new/commands/cat /etc/pam.d/smtp
@include common-auth
@include common-session
@include common-account
@include common-password


I use debian etch, what more can I look? I don't have saslauthd.conf
file in the computer

Thanks in advance
Josep




--
To UNSUBSCRIBE, email to debian-user-REQUEST@...
with a subject of "unsubscribe". Trouble? Contact listmaster@...

[Till Wimmer-4]

Hi Josep,

looks to me like sasl PALINTEXT only checks matching on the first 8 characters...

Till

Josep M. wrote:

> Hello.
>
> I try the following:
>
> testsaslauthd -f /var/spool/postfix/var/run/saslauthd/mux -u test -p
> passwordgood           (pass OK) This is OK
> testsaslauthd -f /var/spool/postfix/var/run/saslauthd/mux -u test -p
> passwordgoodXXXXX      (pass OK) This should FAIL
>
> The password is "passwordgood" but "passwordgoodXXXXX" is accepted
> too!!!!!
>
> But....for example "passwoCCrdgood" is NOT accepted
>
>
> debianet:/home/krasher# cat /etc/default/saslauthd
> START=yes
> MECHANISMS="pam"
> MECH_OPTIONS=""
> THREADS=5
> OPTIONS="-c -m /var/spool/postfix/var/run/saslauthd"
>
> debianet:/home/krasher# cat /usr/lib/sasl2/smtpd.conf
> pwcheck_method: saslauthd
> mech_list: LOGIN PLAIN
> log_level: 5
>
>
> debianet:/home/krasher/testing-smtp/new/commands/cat /etc/pam.d/smtp
> @include common-auth
> @include common-session
> @include common-account
> @include common-password
>
>
> I use debian etch, what more can I look? I don't have saslauthd.conf
> file in the computer
>
> Thanks in advance
> Josep
>
>
>
>

--
To UNSUBSCRIBE, email to debian-user-REQUEST@...
with a subject of "unsubscribe". Trouble? Contact listmaster@...

[Josep M.-5]

Hello Till.

Finally the bug was in chpasswd command inclosed in debian etch, that
accepts only 8 characters.

Thanks for all help.
Josep



El vie, 16-05-2008 a las 20:15 +0200, Till Wimmer escribió:

> Hi Josep,
>
> looks to me like sasl PALINTEXT only checks matching on the first 8 characters...
>
> Till
>
> Josep M. wrote:
> > Hello.
> >
> > I try the following:
> >
> > testsaslauthd -f /var/spool/postfix/var/run/saslauthd/mux -u test -p
> > passwordgood           (pass OK) This is OK
> > testsaslauthd -f /var/spool/postfix/var/run/saslauthd/mux -u test -p
> > passwordgoodXXXXX      (pass OK) This should FAIL
> >
> > The password is "passwordgood" but "passwordgoodXXXXX" is accepted
> > too!!!!!
> >
> > But....for example "passwoCCrdgood" is NOT accepted
> >
> >
> > debianet:/home/krasher# cat /etc/default/saslauthd
> > START=yes
> > MECHANISMS="pam"
> > MECH_OPTIONS=""
> > THREADS=5
> > OPTIONS="-c -m /var/spool/postfix/var/run/saslauthd"
> >
> > debianet:/home/krasher# cat /usr/lib/sasl2/smtpd.conf
> > pwcheck_method: saslauthd
> > mech_list: LOGIN PLAIN
> > log_level: 5
> >
> >
> > debianet:/home/krasher/testing-smtp/new/commands/cat /etc/pam.d/smtp
> > @include common-auth
> > @include common-session
> > @include common-account
> > @include common-password
> >
> >
> > I use debian etch, what more can I look? I don't have saslauthd.conf
> > file in the computer
> >
> > Thanks in advance
> > Josep
> >
> >
> >
> >
>
>

--
To UNSUBSCRIBE, email to debian-user-REQUEST@...
with a subject of "unsubscribe". Trouble? Contact listmaster@...