Postfix+Cyrus+MySQL please help its been 3 days solved

[skuran at hacettepe.edu.tr]

Hi,

Problem solved im now digging the logs to find out what the problem was
exactly. But i suppose it's somehow related with the "cyrus user in
sasldb2" and mysql entries.

* i deleted some test users in sasldb2 (#saslpasswd2 -d username) that i
have created
* created cyrus user again (#saslpasswd2 -c cyrus)
* deleted complete 'mail' database and user in mysql
* created the database again using web-cryadm scripts
* updated cyrus user password in accountuser table (ENCRYPT('secret'))

then suddenly #cryadm --user cyrus --server localhost --auth plain  worked
localhost>

and imtest -a cyrus -m login localhost also authenticated

Thanks a lot for those replied to my posts and helped to solve the problem
if i find some more useful info i will post it.

SuLeY

>
> ----- Original Message -----
> From: <skuran at hacettepe.edu.tr>
> To: <info-cyrus at lists.andrew.cmu.edu>
> Sent: Friday, November 15, 2002 12:24 AM
> Subject: Postfix+Cyrus+MySQL please help its been 3 days
>
>
>> Hi all,
>>
>> i was running qmail+Courier-IMAP+mysql+checkpassword+SMTP-auth on
>> RedHat 7.3 before i decided to switch to Postfix+Cyrus+MySQL on RedHat
>> 8.0,so i setup a test system to see if i could make it. The test
>> system is running RedHat 8.0, Postfix 1.1.11-5, MySQL-3.23.52-3,
>> Cyrus-2.1.9
>>
>> * I rebuilt postfix from src.rpm to have SMTP-auth
>> * installed mysql rpm
>> * installed Cyrus from tar sources
>> * cyrus-sasl is installed by default
>> * installed pam_mysql to auth users from mysql database
>>
>> and followed Luc's HOWTO.
>>
>> The problem is;
>>   Nobody can login IMAP
>>   Cyrus user cannot login using Cryadm
>>
>> even if the pam_mysql query returns TRUE (mysql logs)
>>
>> Please help, its been 3 days, and im completely lost.
>>
>>
>> Here is /etc/pam.d/imap
>> ---------------------------
>> auth        sufficient   pam_mysql.so user=mail passwd=secret
>> host=localhost db=mail table=accountuser usercolumn=username
>> passwdcolumn=password crypt=1
>> account        required     pam_mysql.so user=mail passwd=secret
>> host=localhost db=mail table=accountuser usercolumn=username
>> passwdcolumn=password crypt=1
>> ---------------------------
>>
>> Here is /etc/cyrus.conf
>> -----------------------------------------
>> # standard standalone server implementation
>>
>> START {
>>   # do not delete these entries!
>>   mboxlist      cmd="ctl_mboxlist -r"
>>   deliver       cmd="ctl_deliver -r"
>>
>>   # this is only necessary if using idled for IMAP IDLE
>> #  idled                cmd="idled"
>> }
>>
>> # UNIX sockets start with a slash and are put into /var/imap/socket
>> SERVICES {
>>   # add or remove based on preferences
>>    imap          cmd="imapd" listen="imap" prefork=0
>>    imaps         cmd="imapd -s" listen="imaps" prefork=0
>> #   pop3          cmd="pop3d" listen="pop3" prefork=0
>> #  pop3s         cmd="pop3d -s" listen="pop3s" prefork=0
>> #  sieve         cmd="timsieved" listen="sieve" prefork=0
>>
>>   # at least one LMTP is required for delivery
>> #  lmtp         cmd="lmtpd" listen="lmtp" prefork=0
>>    lmtpunix      cmd="lmtpd" listen="/var/imap/socket/lmtp" prefork=0
>> }
>>
>> EVENTS {
>>   # this is required
>>   checkpoint    cmd="ctl_mboxlist -c" period=30
>>
>>   # this is only necessary if using duplicate delivery suppression
>> delprune      cmd="ctl_deliver -E 3" period=1440
>> }
>> ------------------------------------------------------
>>
>> Here is /etc/imapd.conf
>> ---------------------------
>> postmaster: postmaster
>> configdirectory: /var/imap
>> partition-default: /var/spool/imap
>> admins: cyrus
>> allowanonymouslogin: no
>> allowplaintext: yes
>> sasl_mech_list: PLAIN
>> servername: myhostname.mydomain.local
>> autocreatequota: 10000
>> reject8bit: no
>> quotawarn: 90
>> timeout: 30
>> poptimeout: 10
>> dracinterval: 0
>> drachost: localhost
>> sasl_pwcheck_method: saslauthd
>> sendmail: /usr/sbin/sendmail
>> unixhierarchysep: yes
>> ---------------------------
>>
>> Here is the result of imtest
>> -------------------------------------------------------------
>> #imtest -a cyrus -v localhost
>> S: * OK myhostname.mydomain.local Cyrus IMAP4 v2.1.9 server ready C:
>> C01 CAPABILITY
>> S: * CAPABILITY IMAP4 IMAP4rev1 ACL QUOTA LITERAL+ MAILBOX-REFERRALS
>> NAMESPACE U
>> IDPLUS ID NO_ATOMIC_RENAME UNSELECT CHILDREN MULTIAPPEND SORT
>> THREAD=ORDEREDSUBJ
>> ECT THREAD=REFERENCES IDLE
>> S: C01 OK Completed
>> Please enter your password:
>> C: L01 LOGIN cyrus {6}
>> S: + go ahead
>> C: <omitted>
>> S: L01 NO Login failed: authentication failure
>> Authentication failed. generic failure
>> Security strength factor: 0
>> -------------------------------------------------------------
>> MySQL Log after runing imtest
>>
>> 021114 23:44:09      38 Connect     myhostname at localhost on myhostname
>>                      38 Init DB     mail
>>                      38 Query       select username from accountuser
>> where
>> usern
>> ame='cyrus' and password='secret'
>>                      38 Quit
>> (the user 'cyrus' exists in the 'accountuser' table and his password
>> is 'secret' in plaintext, that is this query returns 'true')
>> -------------------------------------------------------------
>> System Log
>>
>> Nov 14 23:44:09 myhostname saslauthd[2503]: AUTHFAIL: user=cyrus
>> service=imap realm
>> = [PAM acct error]
>> Nov 14 23:44:09 myhostname imapd[2728]: badlogin:
>> myhostname[127.0.0.1] plaintext cyru
>> s SASL(-13): authentication failure: checkpass failed
>>
>>
>> If anyone have any idea why i can't login please help, THANKS for
>> reading.
>>
>> Suley