realm problem

Jukka Salmi jukka-asg at 2004.salmi.ch
Wed May 19 10:01:21 EDT 2004


Hi,

I'm running Cyrus IMAP 2.2.3 and Cyrus SASL 2.1.18 on a NetBSD system.
An excerpt from my imapd.conf:

sasl_pwcheck_method: auxprop
sasl_auxprop_plugin: sasldb
sasl_mech_list: gssapi digest-md5 plain
sasl_keytab: /etc/krb5.keytabs/cyrus

Authentication works fine as long as I use the default realm. I added an
entry to my sasldb using a different realm (saslpasswd2 -u realm -c user),
but then imtest fails to authenticate:

$ hostname
bart.stasoft.ch
$ id -un
jukka
$ sasldblistusers2
jukka at stasoft.ch: cmusaslsecretOTP
jukka at stasoft.ch: userPassword
$ imtest -m digest-md5 -r stasoft.ch bart
S: * OK bart.stasoft.ch Cyrus IMAP4 v2.2.3 server ready
C: C01 CAPABILITY
S: * CAPABILITY IMAP4 IMAP4rev1 ACL QUOTA LITERAL+ MAILBOX-REFERRALS NAMESPACE UIDPLUS ID NO_ATOMIC_RENAME UNSELECT CHILDREN MULTIAPPEND BINARY SORT THREAD=ORDEREDSUBJECT THREAD=REFERENCES ANNOTATEMORE IDLE STARTTLS AUTH=GSSAPI AUTH=DIGEST-MD5 SASL-IR LISTEXT LIST-SUBSCRIBED
S: C01 OK Completed
C: A01 AUTHENTICATE DIGEST-MD5
S: + bm9uY2U9IjJ0RnRJaDR4T0gxdFIvb0RkbGZIeXcvbHNjeUlZYng5Y3pOT1ZITnJQbTQ9IixyZWFsbT0iYmFydC5zdGFzb2Z0LmNoIixxb3A9ImF1dGgsYXV0aC1pbnQsYXV0aC1jb25mIixjaXBoZXI9InJjNC00MCxyYzQtNTYscmM0LGRlcywzZGVzIixtYXhidWY9NDA5NixjaGFyc2V0PXV0Zi04LGFsZ29yaXRobT1tZDUtc2Vzcw==
Please enter your password: 
C: dXNlcm5hbWU9Imp1a2thIixyZWFsbT0iYmFydC5zdGFzb2Z0LmNoIixub25jZT0iMnRGdEloNHhPSDF0Ui9vRGRsZkh5dy9sc2N5SVlieDljek5PVkhOclBtND0iLGNub25jZT0iMEl1a1hlTEZRS1hrd2hNZjFna2VsS1VxdUorUktGT1drSXNldDRVcUNORT0iLG5jPTAwMDAwMDAxLHFvcD1hdXRoLWNvbmYsY2lwaGVyPXJjNCxtYXhidWY9MTAyNCxkaWdlc3QtdXJpPSJpbWFwL2JhcnQuc3Rhc29mdC5jaCIscmVzcG9uc2U9MmJjM2U1YWQ2MWM5MzBhMTgyZjZiNjNkMTY5MDAyMWE=
S: A01 NO user not found
Authentication failed. generic failure
Security strength factor: 128


The following is logged via syslog (LOG_AUTH facility):

May 19 15:49:00 bart imap[13224]: no secret in database


What am I missing? Help is appreciated!

TIA, Jukka

-- 
bashian roulette:
$ ((RANDOM%6)) || rm -rf ~
---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html




More information about the Info-cyrus mailing list