Re: Cyrus + SASL + PAM + LDAP

Igor Brezac <igor@xxxxxxxxx> · Thu, 4 May 2006 09:14:25 -0400 (EDT)

On Thu, 4 May 2006, Imre Veres wrote:

> sasl_pwcheck_method: auxprop

Change:
sasl_pwcheck_method: saslauthd

-Igor

Thanks for that _really_ fast answer! now I've change that line, the results:

1. I CAN authenticate perfectly with an LDAP user or sasldb user
through imap :-):

# imtest -a testuser -l0 -m login 192.168.1.10

S: * OK gape Cyrus IMAP4 v2.1.18-IPv6-Debian-2.1.18-1ubuntu1 server ready
C: C01 CAPABILITY
S: * CAPABILITY IMAP4 IMAP4rev1 ACL QUOTA LITERAL+ MAILBOX-REFERRALS
NAMESPACE UIDPLUS ID NO_ATOMIC_RENAME UNSELECT CHILDREN MULTIAPPEND
SORT THREAD=ORDEREDSUBJECT THREAD=REFERENCES IDLE ANNOTATEMORE
S: C01 OK Completed
Please enter your password:
C: L01 LOGIN testuser {8}
S: + go ahead
C: <omitted>
S: L01 OK User logged in
Authenticated.
Security strength factor: 0
C: Q01 LOGOUT
Connection closed.

# imtest -a cyrus -l0 -m login 192.168.1.10

S: * OK gape Cyrus IMAP4 v2.1.18-IPv6-Debian-2.1.18-1ubuntu1 server ready
C: C01 CAPABILITY
S: * CAPABILITY IMAP4 IMAP4rev1 ACL QUOTA LITERAL+ MAILBOX-REFERRALS
NAMESPACE UIDPLUS ID NO_ATOMIC_RENAME UNSELECT CHILDREN MULTIAPPEND
SORT THREAD=ORDEREDSUBJECT THREAD=REFERENCES IDLE AUTH=NTLM
AUTH=DIGEST-MD5 AUTH=CRAM-MD5 ANNOTATEMORE
S: C01 OK Completed
Please enter your password:
C: L01 LOGIN cyrus {10}
S: + go ahead
C: <omitted>
S: L01 OK User logged in
Authenticated.
Security strength factor: 0
C: Q01 LOGOUT
Connection closed.

2. I cannot authenticate with cyradm and LMTP:

cyradm --user cyrus localhost
IMAP Password:
            Login failed: authentication failure at
/usr/lib/perl5/Cyrus/IMAP/Admin.pm line 118
cyradm: cannot authenticate to server as user cyrus

Try cyradm --user cyrus --auth login localhost

lmtp logs:

May  4 14:56:11 gape cyrus/lmtpd[7054]: connection from
localhost.localdomain [127.0.0.1]
May  4 14:56:14 gape cyrus/lmtpd[7054]: badlogin: 127.0.0.1 LOGIN
SASL(-13): authentication failure: checkpass failed
May  4 14:56:14 gape postfix/lmtp[7053]: 94BCC1C228:
to=<imre.veres@xxxxxxxxxx>, relay=127.0.0.1[127.0.0.1], delay=27,
status=deferred (Authentication failed: SASL authentication failed;
server 127.0.0.1[127.0.0.1] said: 501 5.5.4 undefined error!)

What username are you sending?

I must use lmtp and cyradm, so what should I check next? (Or is it a
cyrus-imap question?)

Cheers,

Imre Veres

--
Igor