Problem with Jabberd and PAM Auth on Fedora-10

[Derek Atkins]

Hey all,

I'm trying to set up a JabberD service on a fully up to date Fedora 10
system but it's not working.  I did the minimal configuration required
as per the docs I found online (mainly changing the Jabber ID of the
server in sm.xml and c2s.xml, changing the JID of the admin user, and
creating a self-signed certificate with the correct server JID).

I have a local user on the machine, and I can login just fine using gdm
or on the console, but when I try to connect via jabber and authenticate
I get an authentication error.  My log files show:

from /var/log/messages:

Sep  8 14:25:32 xxx jabberd/c2s[2596]: [7] [111.222.333.444, port=42898] connect
Sep  8 14:25:33 xxx jabberd/c2s[2596]: pam: couldn't authenticate: Authentication failure
Sep  8 14:25:33 xxx jabberd/c2s[2596]: [7] [111.222.333.444, port 42898] disconnect jid=unbound, packets: 0

from /var/log/secure:

Sep  8 14:25:33 xxx unix_chkpwd[3886]: check pass; user unknown
Sep  8 14:25:33 xxx unix_chkpwd[3887]: check pass; user unknown
Sep  8 14:25:33 xxx unix_chkpwd[3887]: password check failed for user (derek)
Sep  8 14:25:33 xxx jabberd/c2s[2596]: pam_unix(jabberd:auth): authentication failure; logname= uid=493 euid=493 tty= ruser= rhost=  user=derek

I don't see any SElinux AVCs.

Anyone have any ideas how to debug this?  It clearly looks like
unix_chkpwd isn't working, but it works fine for other applications.
The PAM configuration just forwards off to system-auth.

Any ideas?

Thanks,

-derek
-- 
       Derek Atkins, SB '93 MIT EE, SM '95 MIT Media Laboratory
       Member, MIT Student Information Processing Board  (SIPB)
       URL: http://web.mit.edu/warlord/    PP-ASEL-IA     N1NWH
       warlord-DPNOqEs/LNQ at public.gmane.org                        PGP key available