SASL auth failing in 2 of 6 imtest cases. why?
OpenMacNews
OpenMacNews at speakeasy.net
Sat Oct 8 03:05:19 EDT 2005
-----BEGIN PGP SIGNED MESSAGE-----
Hash: RIPEMD160
hi igor,
thx for the reply!
> why i find:
>
> "AUTH=PLAIN AUTH=PLAIN AUTH=PLAIN AUTH=LOGIN AUTH=LOGIN AUTH=LOGIN
> AUTH=DIGEST-MD5
> AUTH=DIGEST-MD5 AUTH=DIGEST-MD5 AUTH=CRAM-MD5 AUTH=CRAM-MD5
> AUTH=CRAM-MD5"
>
> rather than JUST "AUTH=PLAIN" as the spec'd "sasl_mech_list: PLAIN", i
> dunno ...
>
> but, perhaps relevant is that the above lists correlates to:
>
> ls /usr/local/cyrus-sasl/lib/sasl2
> libcrammd5.2.0.22.so libdigestmd5.so libplain.la
> libcrammd5.2.so liblogin.2.0.22.so libplain.so
> libcrammd5.la liblogin.2.so libsasldb.2.0.22.so
> libcrammd5.so liblogin.la libsasldb.2.so
> libdigestmd5.2.0.22.so liblogin.so libsasldb.la
> libdigestmd5.2.so libplain.2.0.22.so libsasldb.so
> libdigestmd5.la libplain.2.so
>
>
>> The plugin parser is barfing on your library names. That is why you see
>> duplicate mechs advertised. See lib/dlopen.c. Things will probably
>> work if you rm *.2.so *.2.0.22.so (make sure liblogin.so is not a sym link)
it turns out there were TWO problems.
(1) you're right, the multiple instances of each/every auth mech are unncessary, amd causing
multiple adverts oe each in my CAPABILITY. removing all but one did the trick
(2) as to why mech i had NOT enabled are being advertised,
in my imapd.conf, i've (actually)
sasl_mech_list: PLAIN # CRAM-MD5 DIGEST-MD5 LOGIN
i THOUGHT -- apparently incorrectly -- that IN LINE COMMENTS are allowed. i.e., that everything
AFTER the "#" is ignored.
no, no, not!
changing to, simply:
sasl_mech_list: PLAIN
results in only PLAIN being advertised ... as spec'd.
thx for the pointer! now off to figure out imap_err.strings are showing up on ly as KEMessage
#'s, rather than strings/labels ... (sigh)
cheers,
richard
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (Darwin)
iEYEAREDAAYFAkNHb68ACgkQGnqMy4gvZ6HpVgCeK7b2OIIeBZyDEfwBKjDX9eVe
fPEAmweAIpM9fEfjN24K1dZmj2EKW34c
=/5Ec
-----END PGP SIGNATURE-----
More information about the Cyrus-sasl
mailing list