Re: Murder without Kerberos?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Thu, Jul 06, 2006 at 04:38:24PM -0400, Patrick Radtke wrote:

> I haven't tried it with 2.3.6, but PLAIN should work.

The result seems to be the same as with MD5: ordinary user connections
work fine, but admin stuff that goes through to the backends fails.
PLAIN would not work at all until I enabled TLS.

> I would suggest starting with
> sasl_mech_list: PLAIN
> 
> in all your imapd.conf files (make sure it says only PLAIN).
> 
> and make sure there is no
>  force_sasl_client_mech
> lines anywhere.
> 
> Then make sure you can use imtest (with -m PLAIN and -t ""  (for  
> tls)) to connect to backends, and then see if the backends will  
> communicate correctly.

Similar results: here, frontend is the proxy authentication ID and
fred@xxxxxxxx is an ordinary user. ms1.srv.tile is a backend store:

imtest -t '' -m plain -u fred@xxxxxxxx -a frontend ms1.srv.tile

	Gave the password for 'frontend'.

	Connects OK, the backend logs that fred@xxxxxxxx has logged
	in, and an IMAP LIST command shows fred's mailboxes.

imtest -t '' -m plain -u admin -a frontend ms1.srv.tile

	Gave the password for 'frontend'.

	Connects and logs in OK. Backend logs that admin has logged in,
	but IMAP LIST does not show anything.

imtest -t '' -m plain -u admin -a admin ms1.srv.tile

	Gave the password for 'admin'.

	Connects OK, backend logs that admin has logged in, and
	IMAP LIST shows all mailboxes on the server.

So it looks as if the backend will not accept proxied admin accounts.

I am still stuck!

Andrew
-- 
-----------------------------------------------------------------------
|                 From Andrew Findlay, Skills 1st Ltd                 |
| Consultant in large-scale systems, networks, and directory services |
|     http://www.skills-1st.co.uk/                +44 1628 782565     |
-----------------------------------------------------------------------
----
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

[Index of Archives]     [Cyrus SASL]     [Squirrel Mail]     [Asterisk PBX]     [Video For Linux]     [Photo]     [Yosemite News]     [gtk]     [KDE]     [Gimp on Windows]     [Steve's Art]

  Powered by Linux