----------------------------------------
> CC: info-cyrus@xxxxxxxxxxxxxxxxxxxx
> From: wes@xxxxxxxxx
> Subject: Re: IMAPD "Authentication failed. generic failure"
> Date: Mon, 17 Mar 2008 15:31:40 -0400
> To: day1234@xxxxxxxxxxx
>
> On 17 Mar 2008, at 11:25, J.J. Day wrote:
>> #allowplaintext: yes
>
> This is likely to be your problem.
>
> :wes
It doesn't seem to help.
I made the imapd.conf change, stopped & restarted master. Then I tried imtest twice logged in as root and twice logged in as cyrus; once each with & without TLS enabled (I am using a certificate key generated with the command taken from the CMU install-configure instructions),.
I still get the message "Authentication failed. generic failure" on each attempt.
===============================================
[root@dc-mail ~]# imtest -u cyus -a cyrus -w cyrus -s -m PLAIN dc-mail
verify error:num=18:self signed certificate
TLS connection established: TLSv1 with cipher AES256-SHA (256/256 bits)
S: * OK [CAPABILITY IMAP4 IMAP4rev1 LITERAL+ ID] D-Y-C Mail Server Cyrus IMAP4 v2.3.11 server ready
C: C01 CAPABILITY
S: * CAPABILITY IMAP4 IMAP4rev1 LITERAL+ ID ACL RIGHTS=kxte QUOTA MAILBOX-REFERRALS NAMESPACE UIDPLUS NO_ATOMIC_RENAME UNSELECT CHILDREN MULTIAPPEND BINARY SORT SORT=MODSEQ THREAD=ORDEREDSUBJECT THREAD=REFERENCES ANNOTATEMORE CATENATE CONDSTORE IDLE URLAUTH
S: C01 OK Completed
C: A01 AUTHENTICATE PLAIN
S: A01 NO no mechanism available
Authentication failed. generic failure
Security strength factor: 256
. logout
* BYE LOGOUT received
. OK Completed
Connection closed.
[root@dc-mail ~]#
[root@dc-mail ~]# cat /var/log/imapd.log
Mar 17 14:29:56 dc-mail master[3467]: exiting on SIGTERM/SIGINT
Mar 17 14:29:56 dc-mail master[5399]: process started
Mar 17 14:29:56 dc-mail master[5400]: about to exec /usr/local/cyrus/bin/ctl_cyrusdb
Mar 17 14:29:57 dc-mail ctl_cyrusdb[5400]: recovering cyrus databases
Mar 17 14:29:57 dc-mail ctl_cyrusdb[5400]: skiplist: recovered /work/mail/imap/mailboxes.db (0 records, 144 bytes) in 0 seconds
Mar 17 14:29:57 dc-mail ctl_cyrusdb[5400]: skiplist: recovered /work/mail/imap/annotations.db (0 records, 144 bytes) in 0 seconds
Mar 17 14:29:57 dc-mail ctl_cyrusdb[5400]: done recovering cyrus databases
Mar 17 14:29:57 dc-mail master[5399]: ready for work
Mar 17 14:29:57 dc-mail master[5401]: about to exec /usr/local/cyrus/bin/ctl_cyrusdb
Mar 17 14:29:57 dc-mail ctl_cyrusdb[5401]: checkpointing cyrus databases
Mar 17 14:29:57 dc-mail ctl_cyrusdb[5401]: archiving database file: /work/mail/imap/annotations.db
Mar 17 14:29:57 dc-mail ctl_cyrusdb[5401]: archiving log file: /work/mail/imap/db/log.0000000001
Mar 17 14:29:57 dc-mail ctl_cyrusdb[5401]: archiving log file: /work/mail/imap/db/log.0000000001
Mar 17 14:29:57 dc-mail ctl_cyrusdb[5401]: archiving database file: /work/mail/imap/mailboxes.db
Mar 17 14:29:57 dc-mail ctl_cyrusdb[5401]: archiving log file: /work/mail/imap/db/log.0000000001
Mar 17 14:29:57 dc-mail ctl_cyrusdb[5401]: done checkpointing cyrus databases
Mar 17 14:29:57 dc-mail master[5399]: process 5401 exited, status 0
Mar 17 14:34:10 dc-mail master[5423]: about to exec /usr/local/cyrus/bin/imapd
Mar 17 14:34:10 dc-mail imaps[5423]: executed
Mar 17 14:34:10 dc-mail imaps[5423]: accepted connection
Mar 17 14:34:10 dc-mail imaps[5423]: TLS server engine: cannot load CA data
Mar 17 14:34:11 dc-mail imaps[5423]: mystore: starting txn 2147483650
Mar 17 14:34:11 dc-mail imaps[5423]: mystore: committing txn 2147483650
Mar 17 14:34:11 dc-mail imaps[5423]: SSL_accept() succeeded -> done
Mar 17 14:34:11 dc-mail imaps[5423]: starttls: TLSv1 with cipher AES256-SHA (256/256 bits new) no authentication
Mar 17 14:34:11 dc-mail imaps[5423]: badlogin: dc-mail.training.int [192.168.251.3] PLAIN [SASL(-4): no mechanism available: Couldn't find mech PLAIN]
Mar 17 14:36:27 dc-mail master[5399]: process 5423 exited, status 0
[root@dc-mail ~]#
And when I try to enable TLS for the connection:
================================
[root@dc-mail ~]# imtest -u cyrus -a cyrus -t "" localhost
S: * OK [CAPABILITY IMAP4 IMAP4rev1 LITERAL+ ID STARTTLS] D-Y-C Mail Server Cyrus IMAP4 v2.3.11 server ready
C: C01 CAPABILITY
S: * CAPABILITY IMAP4 IMAP4rev1 LITERAL+ ID STARTTLS ACL RIGHTS=kxte QUOTA MAILBOX-REFERRALS NAMESPACE UIDPLUS NO_ATOMIC_RENAME UNSELECT CHILDREN MULTIAPPEND BINARY SORT SORT=MODSEQ THREAD=ORDEREDSUBJECT THREAD=REFERENCES ANNOTATEMORE CATENATE CONDSTORE IDLE URLAUTH
S: C01 OK Completed
C: S01 STARTTLS
S: S01 OK Begin TLS negotiation now
verify error:num=18:self signed certificate
TLS connection established: TLSv1 with cipher AES256-SHA (256/256 bits)
C: C01 CAPABILITY
S: * CAPABILITY IMAP4 IMAP4rev1 LITERAL+ ID ACL RIGHTS=kxte QUOTA MAILBOX-REFERRALS NAMESPACE UIDPLUS NO_ATOMIC_RENAME UNSELECT CHILDREN MULTIAPPEND BINARY SORT SORT=MODSEQ THREAD=ORDEREDSUBJECT THREAD=REFERENCES ANNOTATEMORE CATENATE CONDSTORE IDLE URLAUTH
S: C01 OK Completed
Please enter your password:
C: L01 LOGIN cyrus {5}
S: + go ahead
C:
S: L01 NO Login failed: authentication failure
Authentication failed. generic failure
Security strength factor: 256
. logout
* BYE LOGOUT received
. OK Completed
Connection closed.
[root@dc-mail ~]#
[root@dc-mail ~]# cat /var/log/imapd.log
Mar 17 14:44:37 dc-mail master[5444]: about to exec /usr/local/cyrus/bin/imapd
Mar 17 14:44:37 dc-mail imap[5444]: executed
Mar 17 14:44:37 dc-mail imap[5444]: accepted connection
Mar 17 14:44:37 dc-mail imap[5444]: TLS server engine: cannot load CA data
Mar 17 14:44:37 dc-mail imap[5444]: TLS server engine: No CA file specified. Client side certs may not work
Mar 17 14:44:37 dc-mail imap[5444]: mystore: starting txn 2147483654
Mar 17 14:44:37 dc-mail imap[5444]: mystore: committing txn 2147483654
Mar 17 14:44:37 dc-mail imap[5444]: SSL_accept() succeeded -> done
Mar 17 14:44:37 dc-mail imap[5444]: starttls: TLSv1 with cipher AES256-SHA (256/256 bits new) no authentication
Mar 17 14:44:45 dc-mail imap[5444]: badlogin: localhost [127.0.0.1] plaintext cyrus SASL(-13): user not found: checkpass failed
_________________________________________________________________
Helping your favorite cause is as easy as instant messaging. You IM, we give.
http://im.live.com/Messenger/IM/Home/?source=text_hotmail_join
----
Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
