Can't login with sieveshell/imtest: auth_pam: pam_authenticate failed: Permission denied

[Alexander Skwar]

Hello.

I'm trying to login to the sieve server with sieveshell with the
following command line:

sieveshell --authname=alexander.skwar.email-server.info localhost

After I enter the password, I get this in syslog:

==> ./syslog <==
Apr 29 15:16:37 email-server cyrus/master[27076]: about to exec
/usr/lib/cyrus/bin/timsieved
Apr 29 15:16:37 email-server cyrus/sieve[27076]: executed
Apr 29 15:16:37 email-server cyrus/sieve[27076]: telling master 2
Apr 29 15:16:37 email-server cyrus/sieve[27076]: accepted connection
Apr 29 15:16:37 email-server cyrus/master[17696]: service sieve now has
0 workers
Apr 29 15:16:37 email-server cyrus/sieve[27076]: telling master 3
Apr 29 15:16:37 email-server cyrus/master[17696]: service sieve now has
0 workers
Apr 29 15:16:38 email-server cyrus/timsieved[27076]: badlogin:
localhost[127.0.0.1] PLAIN authentication failure
Apr 29 15:16:38 email-server cyrus/master[17696]: process 27076 exited,
status 0

==> ./auth.log <==
Apr 29 15:16:38 email-server saslauthd[8374]: DEBUG: auth_pam:
pam_authenticate failed: Permission denied
Apr 29 15:16:38 email-server saslauthd[8374]: AUTHFAIL:
user=alexander.skwar.email-server.info service=sieve realm= [PAM auth error]
Apr 29 15:16:38 email-server cyrus/timsieved[27076]: Password
verification failed
Apr 29 15:16:38 email-server perl: No worthy mechs found

The same happens with sivtest:

root at hetzner:/etc/pam.d# sivtest -m PLAIN -u
alexander.skwar.email-server.info -a alexander.skwar.email-server.info
-w FOOOO localhost
S: "IMPLEMENTATION" "Cyrus timsieved v2.1.12-Debian-2.1.12-0woody.13.0"
S: "SASL" "PLAIN"
S: "SIEVE" "fileinto reject envelope vacation imapflags notify
subaddress relational regex"
S: "STARTTLS"
S: OK
C: AUTHENTICATE "PLAIN" {104+}
YWxleGFuZGVyLnNrd2FyLmVtYWlsLXNlcnZlci5pbmZvAGFsZXhhbmRlci5za3dhci5lbWFpbC1zZXJ2ZXIuaW5mbwBhc19kcFBXLg==
S: NO "Authentication Error"
Authentication failed. generic failure
Security strength factor: 0
C: LOGOUT
Connection closed.

root at hetzner:/etc/pam.d# ps awux|grep -i sasl
root      8372  0.0  0.4  6668 1188 ?        S    Apr24   0:00
/usr/sbin/saslauthd -a pam

root at hetzner:/etc/pam.d# cat /etc/pam.d/sieve
auth    sufficient      pam_mysql.so    user=mail passwd=FOO
host=localhost db=mail table=accountuser usercolumn=username
passwdcolumn=password crypt=1
account sufficient      pam_mysql.so    user=mail passwd=FOO
host=localhost db=mail table=accountuser usercolumn=username
passwdcolumn=password crypt=1

I am able to login via IMAP with MUA as this user very well.

root at hetzner:/etc/pam.d# md5sum /etc/pam.d/{sieve,imap}
9e2f13ca4145c9828d9f730a69067d30  /etc/pam.d/sieve
9e2f13ca4145c9828d9f730a69067d30  /etc/pam.d/imap

However, logging in with imtest also fails :|

root at hetzner:/etc/pam.d# imtest -v -m login -a
alexander.skwar.email-server.info -w FOOOO localhost
S: * OK email-server.info Cyrus IMAP4 v2.1.12-Debian-2.1.12-0woody.13.0
server ready
C: C01 CAPABILITY
S: * CAPABILITY IMAP4 IMAP4rev1 ACL QUOTA LITERAL+ MAILBOX-REFERRALS
NAMESPACE UIDPLUS ID NO_ATOMIC_RENAME UNSELECT CHILDREN MULTIAPPEND SORT
THREAD=ORDEREDSUBJECT THREAD=REFERENCES IDLE STARTTLS LISTEXT
LIST-SUBSCRIBED ANNOTATEMORE
S: C01 OK Completed
C: L01 LOGIN alexander.skwar.email-server.info {8}
S: + go ahead
C: <omitted>
S: L01 NO Login failed: authentication failure
Authentication failed. generic failure
Security strength factor: 0
C: Q01 LOGOUT
Connection closed.

In the logs:

==> ./syslog <==
Apr 29 15:42:52 email-server cyrus/imapd[27619]: telling master 2
Apr 29 15:42:52 email-server cyrus/imapd[27619]: accepted connection
Apr 29 15:42:52 email-server cyrus/imapd[27619]: telling master 3
Apr 29 15:42:52 email-server cyrus/master[17696]: service imap now has 0
workers
Apr 29 15:42:52 email-server cyrus/master[17696]: service imap now has 0
workers
Apr 29 15:42:52 email-server cyrus/imapd[27619]: badlogin:
localhost[127.0.0.1] plaintext alexander.skwar.email-server.info
SASL(-13): authentication failure: checkpass failed

==> ./auth.log <==
Apr 29 15:42:52 email-server saslauthd[8372]: DEBUG: auth_pam:
pam_authenticate failed: Permission denied
Apr 29 15:42:52 email-server saslauthd[8372]: AUTHFAIL:
user=alexander.skwar.email-server.info service=imap realm= [PAM auth error]

What am I doing wrong?

This is with sasl2 2.1.10 and cyrus 2.1.12 from the Debian packages from
http://people.debian.org/~hmh/woody/hmh/cyrus/.

Thanks a lot,

Alexander Skwar
-- 
Signatur vorübergehend deaktiviert.