SASL auth failing in 2 of 6 imtest cases. why?

OpenMacNews OpenMacNews at speakeasy.net
Sat Oct 8 03:05:19 EDT 2005


-----BEGIN PGP SIGNED MESSAGE-----
Hash: RIPEMD160

hi igor,

thx for the reply!

> why i find:
> 
> "AUTH=PLAIN AUTH=PLAIN AUTH=PLAIN AUTH=LOGIN AUTH=LOGIN AUTH=LOGIN
> AUTH=DIGEST-MD5
> AUTH=DIGEST-MD5 AUTH=DIGEST-MD5 AUTH=CRAM-MD5 AUTH=CRAM-MD5
> AUTH=CRAM-MD5"
> 
> rather than JUST "AUTH=PLAIN" as the spec'd "sasl_mech_list: PLAIN", i
> dunno ...
> 
> but, perhaps relevant is that the above lists correlates to:
> 
> ls /usr/local/cyrus-sasl/lib/sasl2
>     libcrammd5.2.0.22.so    libdigestmd5.so     libplain.la
>     libcrammd5.2.so         liblogin.2.0.22.so  libplain.so
>     libcrammd5.la           liblogin.2.so       libsasldb.2.0.22.so
>     libcrammd5.so           liblogin.la         libsasldb.2.so
>     libdigestmd5.2.0.22.so  liblogin.so         libsasldb.la
>     libdigestmd5.2.so       libplain.2.0.22.so  libsasldb.so
>     libdigestmd5.la         libplain.2.so
> 
> 
>> The plugin parser is barfing on your library names.  That is why you see
>> duplicate mechs advertised.  See lib/dlopen.c.  Things will probably
>> work if you rm *.2.so *.2.0.22.so (make sure liblogin.so is not a sym link)

it turns out there were TWO problems.

(1) you're right, the multiple instances of each/every auth mech are unncessary, amd causing
multiple adverts oe each in my CAPABILITY.  removing all but one did the trick

(2) as to why mech i had NOT enabled are being advertised,

in my imapd.conf, i've (actually)

	sasl_mech_list: PLAIN # CRAM-MD5 DIGEST-MD5 LOGIN

i THOUGHT -- apparently incorrectly -- that IN LINE COMMENTS are allowed. i.e., that everything
AFTER the "#" is ignored.

no, no, not!

changing to, simply:

	sasl_mech_list: PLAIN

results in only PLAIN being advertised ... as spec'd.

thx for the pointer!  now off to figure out imap_err.strings are showing up on ly as KEMessage
#'s, rather than strings/labels ... (sigh)

cheers,

richard
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (Darwin)

iEYEAREDAAYFAkNHb68ACgkQGnqMy4gvZ6HpVgCeK7b2OIIeBZyDEfwBKjDX9eVe
fPEAmweAIpM9fEfjN24K1dZmj2EKW34c
=/5Ec
-----END PGP SIGNATURE-----



More information about the Cyrus-sasl mailing list