> Dan White wrote: >> On 28/10/09 00:47 -0700, Maria McKinley wrote: >>> ella:/var/log# testsaslauthd -u "test" -p "xxx" -s smtp >>> 0: OK "Success." >>> ella:/var/log# testsaslauthd -u "test" -p "xxx" -s imaps >>> 0: NO "authentication failed" >>> ella:/var/log# testsaslauthd -u "test" -p "xxx" -s imap >>> 0: OK "Success." >> >> Can you provide sanitized copies of the following?: >> >> Your saslauthd startup options (e.g. /etc/default/saslauthd) > > So, while copying file contents, I stumbled upon a missing file. I had > looked in pam.d a bunch of times, but until you asked me for the actual > contents, I had somehow overlooked that there was no imaps file. I I'm a bit confused because I never had a imaps config for PAM. Doesn't cyrus-imapd always use "imap" as service name for imap + imaps? If that's the case then it's no error that you testsaslauthd call mentioned above didn't succeed. > copied the smtp file to the imaps file, and now testsaslauthd works for > all three services. Yay! But, then I started going back through the > logs, and realized that tls with imaps had been working all along. It Yes, that makes sense now, doesn't it? > was just one particular ip that was failing, it was just failing a lot, > and there were very few scattered here and there that were successful. > So, not sure why that was working (should I worry that it was?), but I > am now pretty sure my problems with sieve are not related to > authenticating. I'm using squirrelmail-1.4.19 with avelsieve-1.9.8 against cyrus-imapd-2.3.15 both on PHP4 and PHP5 but with plaintext. Older versions had some issues when using the wrong combination IIRC. What are your versions used? Regards, Simon > >> >> What does your sieve entry look like in cyrus.conf? What's your >> squirrelmail sieve (avelsieve?) configuration look like? >> > > from cyrus.conf: > > sieve cmd="timsieved" listen="sieve" prefork=0 maxchild=100 > > > avelsieve-config.php. got rid of some comments in the interest of space > > Hadn't noticed this debugging option before. Would it send logs to syslog? > > /** > * Debug Mode. Enable this (change to 1) if you need to send a bug > report. > */ > define('AVELSIEVE_DEBUG', 0); > > /* =================== IMAP Server / SIEVE Setup > ========================= */ > > /* Backend to use */ > global $avelsieve_backend; > $avelsieve_backend = 'ManageSieve'; > > /* =================== ManageSieve Backend Options > ======================== */ > > /* Port where timsieved listens on the Cyrus IMAP server. Default is > 2000. */ > > global $sieveport; > $sieveport = 2000; > > /** > * @var string Space separated list of preferred SASL mechanisms for the > * authentication to timsieved. e.g. "PLAIN DIGEST-MD5";*/ > > global $sieve_preferred_sasl_mech; > $sieve_preferred_sasl_mech = 'PLAIN'; > > > /* ====== Implementation- and Server-Specific Options > ==================== */ > > global $avelsieve_oldcyrus; > $avelsieve_oldcyrus = true; > > global $avelsieve_enable_envelope_auth; > $avelsieve_enable_envelope_auth = true; > > global $avelsieve_custom_sieve_implementation; > $avelsieve_custom_sieve_implementation = ''; > > global $avelsieve_hardcoded_capabilities; > $avelsieve_hardcoded_capabilities = array( > 'envelope', 'fileinto', 'copy', 'vacation', > 'comparator-i;ascii-numeric' > ); > > global $avelsieve_imapproxymode, $avelsieve_imapproxyserv; > $avelsieve_imapproxymode = false; > $avelsieve_imapproxyserv = array( > 'localhost' => 'imap.example.org' > ); > > /** @var boolean Ldapuserdata mode: Gets user's email addresses (including > * mailAlternate & mailAuthorized) from LDAP Prefs Backend plugin's > cache */ > > global $avelsieve_ldapuserdatamode; > $avelsieve_ldapuserdatamode = false; > > /** @var array Map of cyrus administrator users, for proxy authentication > */ > > global $avelsieve_cyrusadmins_map; > $avelsieve_cyrusadmins_map = array( > 'cyrusimap' => 'cyrussieve' > ); > > > /* =============== Avelsieve Interface / Behavior Setup > ================== */ > > /* Be conservative to our updates on the SIEVE server? If true, a button > * entitled "Save Changes" will appear, which will give the user the > * functionality to register her changes. 'false' is recommended. */ > $conservative = false; > > /* Use images for the move up / down, delete rule buttons and STOP? */ > > $useimages = true; > > /* Translate the messages returned by the "Reject" and "Vacation" > actions? The > * default behaviour since 0.9 is not to translate them. Change to true > if in > * an intranet environment or in a same-language environment. */ > > global $translate_return_msgs; > $translate_return_msgs = false; > > $imagetheme = 'bluecurve_24x24'; > //$imagetheme = 'bluecurve_16x16'; > > /* Number of items to display _initially_, when displaying the header > match > * rule */ > > $startitems = 3; > > /* Maximum number of items to allow in one header match rule. */ > > $maxitems = 10; > > /* Headers to display in listbox widget, when adding a new header rule. */ > > $headers = array( > 'From', 'To', 'Cc', 'Bcc', 'Subject', 'Reply-To', 'Sender', 'List-Id', > 'MailingList', 'Mailing-List', 'X-ML-Name', 'X-List', 'X-List-Name', > 'X-MailingList', > 'Resent-From', 'Resent-To', 'X-Mailer', 'X-Mailing-List', > /* debian and ubuntu flags */ > 'X-PTS-Package', 'X-Loop', 'X-Debian-PR-Message', 'X-Debian-PR-Package', > 'X-Debian-PR-Keywords', 'X-Debian-PR-Source', 'X-PTS-Keyword', > 'X-Debian', 'X-Debian-Package', > 'X-Launchpad-Bug', 'X-Launchpad-Bug-Private', > 'X-Launchpad-Bug-Security-Vulnerability', > 'X-Launchpad-Message-Rationale', 'X-Generated-By', > /* debian and ubuntu flags end */ > 'X-Spam-Flag', 'X-Spam-Status', > 'X-Priority', 'Importance', 'X-MSMail-Priority', 'Precedence', > 'Return-Path', 'Received', 'Auto-Submitted' > ); > > /* Available :method's for the :notify extension (if applicable) */ > global $notifymethods; > $notifymethods = array( > 'mailto', 'sms' > ); > /* use the value "false" if you want to provide a simple input box so that > * users can edit the method themselves : */ > //$notifymethods = false; > > // $disable_avelsieve_capabilities = array("notify"); > global $disable_avelsieve_capabilities; > $disable_avelsieve_capabilities = array(); > > /* Display Filters link in the top Squirrelmail header? */ > > global $avelsieveheaderlink; > $avelsieveheaderlink = true; > > /* Default rules table display mode, one of 'verbose' or 'terse' */ > global $avelsieve_default_mode; > $avelsieve_default_mode = 'terse'; > > /* ========================= Custom rules Configuration > =================== */ > > $spamrule_enable = false; > $spamrule_score_max = 100; > $spamrule_score_default = 80; > $spamrule_score_header = 'X-Spam-Score'; > $spamrule_tests_ldap = false; /* Try to ask Sendmail's LDAP Configuration > */ > $spamrule_tests = array( > 'Open.Relay.DataBase' => "Open Relay Database", > 'Spamhaus.Block.List' => "Spamhaus Block List", > 'SpamCop' => "SpamCop", > 'Composite.Blocking.List' => "Composite Blocking List", > 'FORGED' => "Forged Header" > ); > $spamrule_tests_header = 'X-Spam-Tests'; > $spamrule_action_default = 'trash'; > > /* Please keep the following setting false; it is alpha + needs > Squirrelmail > * to be patched in three or four places. */ > > $avelsieve_spam_highlight_enable = false; > ?> > > Here is config.php > > <?php > > /** > * SquirrelMail Configuration File > * Created using the configure script, conf.pl > */ > > global $version; > $config_version = '1.4.0'; > $config_use_color = 1; > > $org_name = "SquirrelMail"; > $org_logo = SM_PATH . 'images/sm_logo.png'; > $org_logo_width = '308'; > $org_logo_height = '111'; > $org_title = "SquirrelMail $version"; > $signout_page = ''; > $frame_top = '_top'; > > $provider_uri = 'http://www.squirrelmail.org/'; > > $provider_name = 'SquirrelMail'; > > $motd = ""; > > $squirrelmail_default_language = 'en_US'; > $default_charset = 'iso-8859-1'; > $lossy_encoding = false; > > $domain = 'myorg.org'; > $imapServerAddress = 'localhost'; > $imapPort = 143; > $useSendmail = false; > $smtpServerAddress = 'smtp.myorg.org'; > $smtpPort = 25; > $sendmail_path = '/usr/sbin/sendmail'; > $sendmail_args = '-i -t'; > $pop_before_smtp = false; > $imap_server_type = 'cyrus'; > $invert_time = false; > $optional_delimiter = 'detect'; > $encode_header_key = ''; > > $default_folder_prefix = ''; > $trash_folder = 'INBOX.Trash'; > $sent_folder = 'INBOX.Sent'; > $draft_folder = 'INBOX.Drafts'; > $default_move_to_trash = true; > $default_move_to_sent = true; > $default_save_as_draft = true; > $show_prefix_option = false; > $list_special_folders_first = true; > $use_special_folder_color = true; > $auto_expunge = true; > $default_sub_of_inbox = true; > $show_contain_subfolders_option = false; > $default_unseen_notify = 2; > $default_unseen_type = 1; > $auto_create_special = true; > $delete_folder = false; > $noselect_fix_enable = false; > > $data_dir = '/var/lib/squirrelmail/data/'; > $attachment_dir = '/var/spool/squirrelmail/attach/'; > $dir_hash_level = 0; > $default_left_size = '150'; > $force_username_lowercase = false; > $default_use_priority = true; > $hide_sm_attributions = false; > $default_use_mdn = true; > $edit_identity = true; > $edit_name = true; > $hide_auth_header = false; > $allow_thread_sort = false; > $allow_server_sort = false; > $allow_charset_search = true; > $uid_support = true; > $plugins[0] = 'calendar'; > $plugins[1] = 'delete_move_next'; > $plugins[2] = 'abook_take'; > $plugins[3] = 'message_details'; > $plugins[4] = 'preview_pane'; > $plugins[5] = 'avelsieve'; > $plugins[6] = 'squirrel_logger'; > > $theme_css = ''; > $theme_default = 0; > $theme[0]['PATH'] = SM_PATH . 'themes/'; > > **a bunch more theme stuff that I'm guessing don't matter... > > > $default_use_javascript_addr_book = false; > $ldap_server[0] = array( > 'host' => 'xx.xxx.xxx.xx', > 'base' => 'ou=people,dc=myorg,dc=org', > 'maxrows' => 50 > ); > > $abook_global_file = ''; > $abook_global_file_writeable = false; > $abook_global_file_listing = true; > $abook_file_line_length = 2048; > > $addrbook_dsn = ''; > $addrbook_table = 'address'; > > $prefs_dsn = ''; > $prefs_table = 'userprefs'; > $prefs_user_field = 'user'; > $prefs_key_field = 'prefkey'; > $prefs_val_field = 'prefval'; > $addrbook_global_dsn = ''; > $addrbook_global_table = 'global_abook'; > $addrbook_global_writeable = false; > $addrbook_global_listing = false; > > $no_list_for_subscribe = false; > $smtp_auth_mech = 'none'; > $imap_auth_mech = 'login'; > $smtp_sitewide_user = ''; > $smtp_sitewide_pass = ''; > $use_imap_tls = false; > $use_smtp_tls = false; > $session_name = 'SQMSESSID'; > $only_secure_cookies = true; > > $config_location_base = ''; > > @include SM_PATH . 'config/config_local.php'; > > nothing in config_local.php > > thanks, > maria > ---- > Cyrus Home Page: http://cyrusimap.web.cmu.edu/ > Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki > List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html > ---- Cyrus Home Page: http://cyrusimap.web.cmu.edu/ Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html