<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 10pt;
font-family:Tahoma
}
--></style></head>
<body class='hmmessage'><div dir='ltr'>
Hello,<br><br>Adding your "hack" it works! Now I can login:<br><br>=====imapd.conf========<br>imap cmd="imapd -p 256" listen="imap"<br>====================<br><br>#imtest -m plain 192.168.65.130 -a test-adm<br>S: * OK IMAP4 v2.2.12-Invoca-RPM-2.2.12-19 server ready<br>C: C01 CAPABILITY<br>S: * CAPABILITY IMAP4 IMAP4rev1 ACL QUOTA LITERAL+ MAILBOX-REFERRALS NAMESPACE UIDPLUS ID NO_ATOMIC_RENAME UNSELECT CHILDREN MULTIAPPEND BINARY SORT THREAD=ORDEREDSUBJECT THREAD=REFERENCES ANNOTATEMORE IDLE AUTH=PLAIN SASL-IR LISTEXT LIST-SUBSCRIBED X-NETSCAPE<br>S: C01 OK Completed<br>Please enter your password:<br>C: A01 AUTHENTICATE PLAIN AGN5cnVzAGN5cnVzMDE=<br>S: A01 OK Success (no protection)<br>Authenticated.<br>Security strength factor: 0<br><br>Thanks a lot!<br><br>Regards.<br><br>Manel Gimeno Zaragoza<br>magiza83@hotmail.com<br><br><br><div><div id="SkyDrivePlaceholder"></div>> Date: Mon, 13 Feb 2012 14:32:21 -0600<br>> From: dwhite@olp.net<br>> To: magiza83@hotmail.com<br>> CC: info-cyrus@lists.andrew.cmu.edu; awilliam@whitemice.org<br>> Subject: Re: Allow PLAIN login cyrus 2.2.12<br>> <br>> On 02/13/12 17:22 +0100, Manel Gimeno Zaragozá wrote:<br>> ><br>> >Hello,<br>> ><br>> >I've execute testsaslauthd as cyrus user a it's OK<br>> ><br>> >[root log]# su - cyrus<br>> >[cyrus1 ~]$ /usr/sbin/testsaslauthd -u test-adm -p password<br>> >0: OK "Success."<br>> ><br>> >On the other hand, I've done some test and I've execute imtest getting the following:<br>> ><br>> ># imtest -m plain 192.168.65.130 -a cyrus<br>> >S: * OK Datadec-Online Cyrus IMAP4 v2.2.12-Invoca-RPM-2.2.12-19 server ready<br>> >C: C01 CAPABILITY<br>> >S: * CAPABILITY IMAP4 IMAP4rev1 ACL QUOTA LITERAL+ MAILBOX-REFERRALS<br>> >NAMESPACE UIDPLUS ID NO_ATOMIC_RENAME UNSELECT CHILDREN MULTIAPPEND<br>> >BINARY SORT THREAD=ORDEREDSUBJECT THREAD=REFERENCES ANNOTATEMORE IDLE<br>> >LISTEXT LIST-SUBSCRIBED X-NETSCAPE<br>> >S: C01 OK Completed<br>> >C: A01 AUTHENTICATE PLAIN<br>> >S: A01 NO encryption needed to use mechanism<br>> >Authentication failed. generic failure<br>> >Security strength factor: 0<br>> >. login test-adm password<br>> >. OK User logged in<br>> >C: Q01 LOGOUT<br>> >Connection closed.<br>> ><br>> ><br>> >=========log==============<br>> ><br>> >Feb 13 17:16:02 srv-vln-pre1 imap1[29801]: telling master 2<br>> ><br>> >Feb 13 17:16:02 srv-vln-pre1 imap1[29801]: accepted connection<br>> ><br>> >Feb 13 17:16:02 srv-vln-pre1 imap1[29801]: telling master 3<br>> ><br>> >Feb 13 17:16:02 srv-vln-pre1 master[24579]: service imap1 pid 29801 in READY state: now unavailable and in BUSY state<br>> ><br>> >Feb 13 17:16:02 srv-vln-pre1 master[24579]: service imap1 now has 1 ready workers<br>> ><br>> >Feb 13 17:16:02 srv-vln-pre1 master[24579]: service imap1 pid 29801 in BUSY state: now serving connection<br>> ><br>> >Feb 13 17:16:02 srv-vln-pre1 master[24579]: service imap1 now has 1 ready workers<br>> ><br>> >*Feb 13 17:16:02 srv-vln-pre1 imap1[29801]: badlogin:<br>> >xmlfrwk.pre.datadec-online.com [192.168.65.130] PLAIN [SASL(-16):<br>> >encryption needed to use mechanism: security flags do not match<br>> >required]<br>> ><br>> >*Feb 13 17:16:11 srv-vln-pre1 imap1[29801]: login:<br>> >xmlfrwk.pre.datadec-online.com [192.168.65.130] test-adm plaintext User<br>> >logged in<br>> ><br>> >==========================<br>> ><br>> ><br>> ><br>> >As you can see on the first try I get "badlogin" but when I try ". login<br>> >test-adm password" I'm able to log in.<br>> <br>> In the first case you are authenticating using SASL PLAIN, with user<br>> 'cyrus', and in the second case you are authenticating using the<br>> login/pass with user 'test-adm', which is an apples to oranges<br>> comparison.<br>> <br>> It would be better to use 'imtest -m login -a cyrus <ip>' (which should perform<br>> login/pass authentication) and compare that to 'imtest -m login -a<br>> test-adm <ip>', and then compare the two with '-m plain'.<br>> <br>> 'encryption needed to use mechanism: security flags do not match required'<br>> seems to indicate that you need to specify:<br>> <br>> sasl_minimum_layer: 0<br>> <br>> but you said you already tried that. A hack to get this to work would be to<br>> tell imapd that it's operating under an external security layer. In<br>> /etc/cyrus.conf, you could modify your imapd line(s) to include '-p 256',<br>> e.g.:<br>> <br>> imap cmd="imapd -p 256" listen="imap"<br>> <br>> See the manpage for imapd(8).<br>> <br>> -- <br>> Dan White<br></div> </div></body>
</html>