SASL problems

Cristian Livadaru drac3 at vwclub.ro
Wed Dec 14 07:40:44 EST 2005


On Wed, Dec 14, 2005 at 01:26:00PM +0100, mailing at scastagnoli.info wrote:
> I do apologize but I have a problem I cannot solve.
> I type:
> 
> sasldblistusers2
> 
> and I see that user cyrus exists in sasl2.db, that has 644 permissions.

yes this means that you have the user in your sasldb, but the error
below shows that you try to authenticate with PAM !
so no mater what you have in your sasldb, it won't work.
so if you want sasl to work with sasldb you should set the config in
imapd.conf 
sasl_pwcheck_method: auxprop
sasl_auxprop_plugin: sasldb

if you want to use it with pam then you will have to look for/create the
cyrus user somewhere else.

regards, Cristian 

> When I try 
> 
> testsaslauthd -u cyrus -p cyrus
> 
> I found in /var/log/messages the following:
> 
> Dec 14 12:42:19 server imap(pam_unix)[2999]: authentication failure; logname= 
> uid=0 euid=0 tty= ruser= rhost=  user=cyrus
> Dec 14 12:42:22 server saslauthd[2999]: do_auth         : auth failure: 
> [user=cyrus] [service=imap] [realm=] [mech=pam] [reason=PAM auth error]
> 
> My /etc/imapd.conf has:
> 
> sasl_pwcheck_method: saslauthd
> sasl_mech_list: PLAIN
> 
> and 
> 
> ps -elf | grep sasl 
> 
> returns:
> 
> 1 S root      2997     1  0  85   0 -  1048 interr 12:35 ?        00:00:00 
> saslauthd -a pam
> 1 S root      2998  2997  0  85   0 -  1059 interr 12:35 ?        00:00:00 
> saslauthd -a pam
> 1 S root      2999  2997  0  85   0 -  1059 interr 12:35 ?        00:00:00 
> saslauthd -a pam
> 1 S root      3000  2997  0  85   0 -  1048 schedu 12:35 ?        00:00:00 
> saslauthd -a pam
> 1 S root      3002  2997  0  85   0 -  1048 interr 12:35 ?        00:00:00 
> saslauthd -a pam
> 
> 
> Please, can anyone help me?
> 
> Thank you in advance
> 
> Stefano C.
> ----
> Cyrus Home Page: http://asg.web.cmu.edu/cyrus
> Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
> List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
> 

-- 
Cristian Livadaru
--=[ http://www.livadaru.net/cristian ]=--



More information about the Info-cyrus mailing list