[tpop3d-discuss]PAM domains

Rick Stewart rick.stewart at theinternetco.net
Sat, 17 Jul 2004 14:35:51 -0600


I've been using PAM authentication with my users for a while, and
recently implemented domain usernames, so that users log in with their
full email address instead of just the local part.

tpop3d rejects these usernames, and I'm wondering if there's a good
reason. Doing "virtual" domains this way works really well, and not
checking in auth_pam.c whether there was a domain supplied or not
doesn't seem to do any harm.

I'd love to hear your thoughts.

Rick Stewart
The Internet Company

Here's a patch that makes it work for me -- I'd love to see this or
equivalent in the main distro at some point:

diff -u tpop3d-1.5.3-orig/auth_pam.c tpop3d-1.5.3/auth_pam.c
--- tpop3d-1.5.3-orig/auth_pam.c	2003-09-27 09:33:57.000000000 -0600
+++ tpop3d-1.5.3/auth_pam.c	2004-07-17 14:25:12.063241752 -0600
@@ -118,9 +118,6 @@
     static const char *facility;
     int authenticated = 0;
 
-    /* Check the this isn't a virtual-domain user. */
-    if (local_part) return NULL;
-
     /* It is possible to use PAM to authenticate users who do not exist as
      * system users. We support this by defining an auth-pam-mail-user
      * configuration option which is used to obtain the user information