[tpop3d-discuss]tpop3d with auth-pam-enable "No account present for user" error

Fri, 01 Apr 2005 19:22:07 +0300

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
 <meta content="text/html;charset=windows-1251"
 http-equiv="Content-Type">
 <title></title>
</head>
<body bgcolor="#ffffff" text="#000000">
<meta content="text/html;charset=windows-1251" http-equiv="Content-Type">
<title></title>
We have Solaris 9 4/04 server which is ldap client to another server. 
Tpop3d frequently write the following messages to syslog when mail
client connect: 
 
Apr  1 18:37:04 maria tpop3d[1359]: [ID 896952 mail.debug]
pam_unix_auth: entering pam_sm_authenticate() 
Apr  1 18:37:04 maria tpop3d[1359]: [ID 702911 mail.error]
auth_pam_new_user_pass: pam_authenticate(userbox): No account present
for user 
Apr  1 18:37:04 maria tpop3d[21899]: [ID 702911 mail.debug]
connection_sendresponse: client [15]10.128.10.166/inside.mts.by: sent
`-ERR Lies! Try again!' 
Apr  1 18:37:04 maria tpop3d[21899]: [ID 702911 mail.error]
connection_do: client `[15]10.128.10.166/inside.mts.by': username
`userbox': 1 authentication failures 
 
 
After some attempts
mail client connect and authenticate with this user, and tpop3d send
the folowing: 
 
 
Apr  1 16:25:19 maria tpop3d[21899]: [ID 702911 mail.info]
authcontext_new_user_pass: began session for `userbox' with pam; uid
350, gid 6 
Apr  1 16:25:19 maria tpop3d[21899]: [ID 702911 mail.info] fork_child:
[8]userbox(10.128.10.166): began session for `userbox' with pam; child
PID is 23675 
Apr  1 16:25:19 maria tpop3d[23675]: [ID 702911 mail.info]
connections_post_select: client [8]userbox(10.128.10.166): finished
session for `userbox' with pam 
Apr  1 16:25:19 maria tpop3d[23675]: [ID 702911 mail.info]
connections_post_select: client [8]userbox(10.128.10.166):
disconnected; 43/212 bytes read/written 
 
But why its happen with anyone user in our network. I mean anyone user
can get message "Lies! Try again!"  even if his password is write and
has account 
in /var/mail directory ??? 
 
Here is our /usr/local/etc/tpop3d.conf 
listen-address: 10.128.10.1 
max-children: 1024 
log-facility: mail 
timeout-seconds: 300 
mailbox: bsd:/var/mail/$(user) 
auth-pam-enable: yes 
auth-pam-mail-group: mail 
 
/etc/pam.conf 
# 
#ident  "@(#)pam.conf   1.20    02/01/23 SMI" 
# 
# Copyright 1996-2002 Sun Microsystems, Inc.  All rights reserved. 
# Use is subject to license terms. 
# 
# PAM configuration 
# 
# Unless explicitly defined, all services use the modules 
# defined in the "other" section. 
# 
# Modules are defined with relative pathnames, i.e., they are 
# relative to /usr/lib/security/$ISA. Absolute path names, as 
# present in this file in previous releases are still acceptable. 
# 
# Authentication management 
# 
# login service (explicit because of pam_dial_auth) 
# 
login   auth requisite          pam_authtok_get.so.1 
login   auth required           pam_dhkeys.so.1 
login   auth required           pam_unix_auth.so.1 debug 
login   auth required           pam_dial_auth.so.1 
# 
# rlogin service (explicit because of pam_rhost_auth) 
# 
rlogin  auth sufficient         pam_rhosts_auth.so.1 
rlogin  auth requisite          pam_authtok_get.so.1 
rlogin  auth required           pam_dhkeys.so.1 
rlogin  auth required           pam_unix_auth.so.1 
# 
# rsh service (explicit because of pam_rhost_auth, 
# and pam_unix_auth for meaningful pam_setcred) 
# 
rsh     auth sufficient         pam_rhosts_auth.so.1 
rsh     auth required           pam_unix_auth.so.1 
# 
# PPP service (explicit because of pam_dial_auth) 
# 
ppp     auth requisite          pam_authtok_get.so.1 
ppp     auth required           pam_dhkeys.so.1 
ppp     auth required           pam_unix_auth.so.1 
ppp     auth required           pam_dial_auth.so.1 
# 
# Default definitions for Authentication management 
# Used when service name is not explicitly mentioned for authenctication 
# 
other   auth requisite          pam_authtok_get.so.1 
other   auth required           pam_dhkeys.so.1 
other   auth required           pam_unix_auth.so.1 debug 
# 
# passwd command (explicit because of a different authentication module) 
# 
passwd  auth required           pam_passwd_auth.so.1 
# 
# cron service (explicit because of non-usage of pam_roles.so.1) 
# 
cron    account required        pam_projects.so.1 
cron    account required        pam_unix_account.so.1 
# 
# Default definition for Account management 
# Used when service name is not explicitly mentioned for account
management 
# 
other   account requisite       pam_roles.so.1 
other   account required        pam_projects.so.1 
other   account required        pam_unix_account.so.1 
# 
# Default definition for Session management 
# Used when service name is not explicitly mentioned for session
management 
# 
other   session required        pam_unix_session.so.1 
# 
# Default definition for  Password management 
# Used when service name is not explicitly mentioned for password
management 
# 
other   password required       pam_dhkeys.so.1 
other   password requisite      pam_authtok_get.so.1 
other   password requisite      pam_authtok_check.so.1 
other   password required       pam_authtok_store.so.1 
# 
# Support for Kerberos V5 authentication (uncomment to use Kerberos) 
# 
#rlogin         auth optional           pam_krb5.so.1 try_first_pass 
#login          auth optional           pam_krb5.so.1 try_first_pass 
#other          auth optional           pam_krb5.so.1 try_first_pass 
#cron           account optional        pam_krb5.so.1 
#other          account optional        pam_krb5.so.1 
#other          session optional        pam_krb5.so.1 
#other          password optional       pam_krb5.so.1 try_first_pass 
# 
# QPopper POP3 
# 
pop3    auth requisite          pam_authtok_get.so.1 
pop3    auth required           pam_unix_auth.so.1 
pop3    account requisite       pam_roles.so.1 
pop3    account required        pam_projects.so.1 
pop3    account required        pam_unix_account.so.1 
pop3    password requisite      pam_authtok_get.so.1 
pop3    password requisite      pam_authtok_check.so.1 
pop3    password required       pam_authtok_store.so.1 
pop3    session required        pam_unix_session.so.1 
# 
# IMAP probably 
# 
imap    auth    requisite          pam_authtok_get.so.1 
imap    auth    required        pam_unix_auth.so.1 
imap    password requisite      pam_authtok_get.so.1 
imap    password requisite      pam_authtok_check.so.1 
imap    password required       pam_authtok_store.so.1 
imap    session required        pam_unix_session.so.1 
 
</body>
</html>