Postfix SASL Authentication using PAM_Python

Posted by Christian Joudrey on Server Fault See other posts from Server Fault or by Christian Joudrey
Published on 2010-12-02T18:16:04Z Indexed on 2011/03/12 8:12 UTC
Read the original article Hit count: 505

Filed under:
|
|

Cross-post from: http://stackoverflow.com/questions/4337995/postfix-sasl-authentication-using-pam-python

Hey guys,

I just set up a Postfix server in Ubuntu and I want to add SASL authentication using PAM_Python.

I've compiled pam_python.so and made sure that it is in /lib/security.

I've also added created the /etc/pam.d/smtp file and added:

auth required pam_python.so test.py

The test.py file has been placed in /lib/security and contains:

#
# Duplicates pam_permit.c
#
DEFAULT_USER = "nobody"

def pam_sm_authenticate(pamh, flags, argv):
  try:
    user = pamh.get_user(None)
  except pamh.exception, e:
    return e.pam_result
  if user == None:
    pam.user = DEFAULT_USER
  return pamh.PAM_SUCCESS

def pam_sm_setcred(pamh, flags, argv):
  return pamh.PAM_SUCCESS

def pam_sm_acct_mgmt(pamh, flags, argv):
  return pamh.PAM_SUCCESS

def pam_sm_open_session(pamh, flags, argv):
  return pamh.PAM_SUCCESS

def pam_sm_close_session(pamh, flags, argv):
  return pamh.PAM_SUCCESS

def pam_sm_chauthtok(pamh, flags, argv):
  return pamh.PAM_SUCCESS

When I test the authentication using auth plain amltbXkAamltbXkAcmVhbC1zZWNyZXQ= I get the following response:

535 5.7.8 Error: authentication failed: no mechanism available

In the postfix logs I have this:

Dec  2 00:37:19 duo postfix/smtpd[16487]: warning: SASL authentication problem: unknown password verifier 
Dec  2 00:37:19 duo postfix/smtpd[16487]: warning: SASL authentication failure: Password verification failed
Dec  2 00:37:19 duo postfix/smtpd[16487]: warning: localhost.localdomain[127.0.0.1]: SASL plain authentication failed: no mechanism available

Any ideas?

tl;dr Anyone have step by step instructions on how to set up PAM_Python with Postfix?

  • Christian

© Server Fault or respective owner

Related posts about postfix

Related posts about pam