search

wdoekes / pam-imap

pam-imap 0.3.9 - PAM module that authenticates a user login against a remote IMAP(S) server.
GNU General Public License v2.0
7 stars 3 forks source link

Compatibility status #4

Open BarbsHormazabal opened 4 years ago

BarbsHormazabal commented 4 years ago

Hello, I want to authenticate against gmail using this module but it's giving me some problems. Isthis version of PAM-IMAP compatible with the current version of freeradius?

wdoekes commented 4 years ago

I'd love to tell you, but I have absolutely no idea.

But, I have experienced that gmail attempts to do 2nd factor auth sometimes, redirecting the user to a web page, after which I believe the IP is whitelisted for a while. At least, I have experiences that resemble that. Not with pam-imap, which I don't use, but with a custom python imap connection.

BarbsHormazabal commented 4 years ago

I'd love to tell you, but I have absolutely no idea.

But, I have experienced that gmail attempts to do 2nd factor auth sometimes, redirecting the user to a web page, after which I believe the IP is whitelisted for a while. At least, I have experiences that resemble that. Not with pam-imap, which I don't use, but with a custom python imap connection.

Sorry to keep bothering you with this but could you please explain this in further detail? seems that nowadays the only way to authenticate against gmail in freeradius is either python or perl script.

wdoekes commented 4 years ago

Details? No, I don't have any. The aformentioned python imap connection I used, did nothing special either. It simple started working again after a while after attempts to use a browser to log in.

I think you're looking at this with insufficient information. If something doesn't work and you're not getting enough debug information, you need to swap out parts. Gmail doesn't work? Try a local imap server. Freeradius/pam-imap/check_user doesn't work? Try a different client (python 5 lines script). Do all other combinations work? Check if you accidentally have different parameters. Config is exactly the same? Sniff the connection (tcpdump) and see if something is wrong. Does everything appear to be the same, but it still doesn't work? Go back and see if you can increase debug level (tracing) in the used code.

Good luck!

mckaygerhard commented 2 years ago

since 2020 no external aops can login with imap gmail unless it is certified by google, also need some api keys..

ufortunatelly 99% of the open source apps that can get agains imap gmail.. do not work now..