Cyrus Imap plaintext authentication with saslauth & PAM

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hello everyone!

I'm new to this mailing list, actually, this is the first mailing list I've ever subscribed. :) So greetings to all from Hungary! (And excuse my really bad english, please)

I'm not sure if I can ask for help here, but I didn't find any answer elsewhere, so trying this out.

I have a postfix relay server and a (local) cyrus imap server on the same machine. Everything was fine until I thought, I change the imap authentication from sasldb to saslauth, to have global authentication on postfix and cyrus.
Postfix uses saslauthd, which is configured for PAM. It works perfectly, with plain/login/cram/digest mechanisms, with or without tls/ssl, absolutely no problems with it. Saslauth tests are all fine obviously.
So I decided to use this with cyrus imap too. Set it to use the same saslauth daemon, and plain, login, cram-md5 and digest-md5 mechs.
Since then, I can not login with plain or login mechs, because they aren't being offered at all by cyrus imapd. I can login with cram or digest fine.
I understand that plain login isn't offered by default, only after a successfull tls session setup, but if I understand correctly, the "allowplaintext: yes" option should still force imapd to offer plain logins. But it doesn't. I tried it with different sasl_min|max_levels, to no avail.
This is the first thing I don't understand.
The second is: after establishing a tls or ssl connection, plain and login are offered, but I can not login with these mechs.
(I'm using imtest to test it all.)
However, with "testsaslauth", I am able to authenticate fine.

I'm quite new to cyrus and linux systems, but I read all kinds of manuals and FAQs nd documentation, and googled a lot, but I was unable to find the culprit. So you are my last hope.
If nothing else works, I leave it as is, with digest and cram it works and it's more secure. Or I go back to sasldb, which is less comfortable for me...

Any help is greatly appreciated!
Thanks!

Regards,
Janos
----
Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

[Index of Archives]     [Cyrus SASL]     [Squirrel Mail]     [Asterisk PBX]     [Video For Linux]     [Photo]     [Yosemite News]     [gtk]     [KDE]     [Gimp on Windows]     [Steve's Art]

  Powered by Linux