On Thu, Jun 19, 2008 at 12:57 AM, Phil Pennock <[EMAIL PROTECTED]>
wrote:

> On 2008-06-18 at 17:27 +0300, samer khalil wrote:
> > Yet when i test exim i get the following error:
> >
> > *2008-06-18 17:10:45 login authenticator failed for (samerkPC) [
> > 192.168.1.104]: 435 Unable to authenticate at present (set_id=samerk):
> > Permission denied*
> >
> > Am i missing somehting, do you need me to post more details ?
>
> Running "exim -d+auth" to get debugging information, with enhanced
> details on authentication, would probably be informative.
>
> Since you're using Kerberos and don't mention it, I take it that you've
> created the server principal and put it somewhere that Exim will find it
> (via PAM?)  SMTP uses "smtp/" principals instead of the "host/"
> principals normally used for authentication for PAM sign-in.
>
> Eg, I run "ktutil -k /etc/kerberos/tabs/exim.keytab list" and see
> principals for "smtp/[EMAIL PROTECTED] <http://spodhuis.org/>"
> with various
> ciphers.
>

I did not mention kerberos because it is authenticating fine, in
log/messages i have:
*Jun 18 17:28:06 chill sendmail: pam_krb5[20284]: authentication succeeds
for 'samerk' ([EMAIL PROTECTED] <[EMAIL PROTECTED]>*)*

The problem was in the PAM conf, i had to to point the account to
pam_krb5.so
 instead of pam_unix.so:
*account required /lib/security/pam_krb5.so

*It is kind of weird since it's working with pam_unix.so on a second server.

Thanks,
SK

-----------------------------------------------------------------
Samer Khalil
Computing & Networking Services     American University of Beirut
E-Mail:[EMAIL PROTECTED] <[EMAIL PROTECTED]>  Room:341
Phone:961-1-350000 / Ext:2242





> Regards,
> -Phil
>
-- 
## List details at http://lists.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Reply via email to