[Imap-uw] Re: Authentication with PAM

[Jean-Luc Wasmer]

Mark Crispin wrote:

>> no but I have nss_ldap which works fine.
>
> The user must be defined in /etc/passwd.  Each user must have a UNIX 
> UID assigned.

As Sven said, if Imap uses getpwnam or any of the standard Posix 
password database access function, nsswitch and nss_ldap will return the 
users from the LDAP.
'getent passwd' shows all my local and ldap users.


>> Do I need a special switch to enable PAM when I build the software?
>
>
> It depends upon what command you used to build the software.  Some 
> builds, such as "make lnp", "make lrh", automatically build with PAM.  
> Which build command did you use?

I use pkgsrc and it doesn't provide any switch for PAM.
I edited imap-2004e/src/osdep/unix/Makefile to replace 'PASSWDTYPE=std' 
by 'PASSWDTYPE=pam'.
Looking at pkgsrc's makefile
(http://cvsweb.netbsd.org/bsdweb.cgi/pkgsrc/mail/imap-uw/Makefile?rev=1.100&content-type=text/x-cvsweb-markup)
I would say imap-uw is built with:
neb
EXTRAAUTHENTICATORS="gss"
SPECIALAUTHENTICATORS="ssl"
SSLTYPE="unix"

I've just noticed imap-2004e/Makefile also defines the PASSWDTYPE variable.
Maybe I should change that one too?
I there a way to see that is supported? Imapd greets me with:
OK [CAPABILITY IMAP4REV1 LITERAL+ SASL-IR LOGIN-REFERRALS STARTTLS AUTH=LOGIN]

Jean-Luc