Cyrus Murder SASL Authentication Problem

[Xue, Chongjie "Jack"]

Andy, According to your suggestion, my IMAP login is working now. I can
now connect imap clients through my frontend servers to access mail
boxes in the backend node.

However, I still _failed_ to deliver mail via Postfix LMTP through Cyrus
LMTPProxy running on the frontends to my cyrus-imap backend server:

[Log Message in my frontend Server (mail.sb.marshall.edu)]
lmtp[22156]: couldn't authenticate to backend server: no mechanism
available
postfix/qmgr[12870]: 232871D0012: from=<nahant-list-bounces at redhat.com>,
size=3881, nrcpt=1 (queue active)
postfix/lmtp[22309]: 1EB811D0013: to=<xxxx at sb.marshall.edu>,
relay=/var/lib/imap/socket/lmtp[/var/lib/imap/socket/lmtp], delay=-940,
status=deferred (host
/var/lib/imap/socket/lmtp[/var/lib/imap/socket/lmtp] said: 451 4.4.3
Remote server unavailable (in reply to end of DATA command))

[Log Message in my backend Server]
mailbox1 lmtp[31162]: accepted connection
mailbox1 lmtp[31162]: connection from mail.sb.marshall.edu
[10.101.4.251] preauth'd as postman

I found there is NO such user named "postman" on my backend server. But
Cyrus LMTPd authenticated the frontend LMTPProxyd as this user.  

Thanks.

-Jack

-----Original Message-----
From: Andrew Morgan [mailto:morgan at orst.edu] 
Sent: Saturday, April 29, 2006 8:30 PM
To: Xue, Chongjie "Jack"
Cc: info-cyrus at lists.andrew.cmu.edu
Subject: Re: Cyrus Murder SASL Authentication Problem

On Sat, 29 Apr 2006, Xue, Chongjie "Jack" wrote:

[snip]

> mailbox1 imap[29381]: badlogin: [10.101.4.251] PLAIN [SASL(-13): 
> authentication failure: user cyrus_murder is not allowed to proxy]

[snip]

> #---imapd.conf---#
> configdirectory: /var/lib/imap
> partition-default: /var/spool/imap
> admins: admin
> sievedir: /var/lib/imap/sieve
> sendmail: /usr/sbin/sendmail
> hashimapspool: true
> sasl_pwcheck_method: saslauthd
> sasl_mech_list: plain
> tls_cert_file: /usr/share/ssl/certs/cyrus-imapd.pem
> tls_key_file: /usr/share/ssl/certs/cyrus-imapd.pem
> tls_ca_file: /usr/share/ssl/certs/ca-bundle.crt
> altnamespace: false
> berkeley_cachesize: 4096
> mupdate_server: imapproxy
> mupdate_username: admin
> mupdate_authname: admin
> mupdate_password: xxxxxxxxx
> proxy_servers: cyrus_murder
>
> I know Cyrus-SASL is causing the problem on the Proxy Level and I need

> suggestions on how to setup SASL-Authentication for my murder Frontend

> nodes.

On your backend server, you need to list cyrus_murder as an admin also.

 	Andy