authentication problem

[Pascal BOYER]

Hi,

I note this in the mail.log:

cyrus/master[4102]: process 5914 exited, status 0
cyrus/master[5968]: about to exec /usr/lib/cyrus/bin/imapd
cyrus/imaps[5968]: executed
cyrus/imapd[5968]: accepted connection
cyrus/imapd[5968]: mystore: starting txn 2147483727
cyrus/imapd[5968]: mystore: committing txn 2147483727
cyrus/imapd[5968]: starttls: TLSv1 with cipher AES256-SHA (256/256 bits new) no
authentication
cyrus/imapd[5968]: login: euphorie[82.67.66.131] pascal CRAM-MD5+TLS User logged
in
cyrus/imapd[5968]: seen_db: user pascal opened /var/lib/cyrus/user/p/pascal.seen
cyrus/imapd[5968]: open: user pascal opened INBOX.Cyrus mailinglist
cyrus/imapd[5968]: accepted connection

and when I try:

imtest -m login -a pcs localhost
or
imtest -u pascal -m login -p imaps -v localhost

I get this:

$ imtest -m login -a pcs localhost
S: * OK euphorie.linuxorable.net Cyrus IMAP4 v2.1.17-IPv6-Debian-2.1.17-3 server
ready
C: C01 CAPABILITY
S: * CAPABILITY IMAP4 IMAP4rev1 ACL QUOTA LITERAL+ MAILBOX-REFERRALS NAMESPACE
UIDPLUS ID NO_ATOMIC_RENAME UNSELECT CHILDREN MULTIAPPEND SORT
THREAD=ORDEREDSUBJECT THREAD=REFERENCES IDLE STARTTLS LOGINDISABLED
AUTH=DIGEST-MD5 AUTH=CRAM-MD5 LISTEXT LIST-SUBSCRIBED ANNOTATEMORE
S: C01 OK Completed
Please enter your password:
C: L01 LOGIN pcs {12}
S: L01 NO Login only available under a layer
Authentication failed. generic failure
Security strength factor: 0

and nothing more !

This is my imapd.conf:

servername: euphorie.linuxorable.net
configdirectory: /var/lib/cyrus
defaultpartition: default
partition-default: /var/spool/cyrus/mail
partition-news: /var/spool/cyrus/news
newsspool: /var/spool/news
altnamespace: no
unixhierarchysep: no
reject8bit: yes
munge8bit: yes
lmtp_downcase_rcpt: true
admins: cyrus
maxmessagesize: 20000000
allowanonymouslogin: no
autocreatequota: 0
umask: 077
ashimapspool: true
allowplaintext: no
sasl_mech_list: digest-MD5 cram-MD5 PLAIN
sasl_pwcheck_method: saslauthd
sasl_auto_transition: yes
ls_ca_file: /etc/postfix/mon_AC/private/mon_AC.crt
tls_session_timeout: 1440
tls_imap_require_cert: false
tls_imap_cert_file: /etc/postfix/mon_AC/certs/linuxorable_tls_signed.pem
tls_imap_key_file: /etc/postfix/mon_AC/private/linuxorable_tls.pem
tls_lmtp_require_cert: false
ls_lmtp_cert_file: /etc/posfix/mon_AC/certs/linuxorable_tls_signed.pem
tls_lmtp_key_file: /etc/postfix/mon_AC/private/linuxorable_tls.pem
lmtpsocket: /var/run/cyrus/socket/lmtp
idlesocket: /var/run/cyrus/socket/idle
notifysocket: /var/run/cyrus/socket/notify

If I change:

allowplaintext: no
to
allowplaintext: yes

it's better:

$ imtest -m login -a pcs localhost
S: * OK euphorie.linuxorable.net Cyrus IMAP4 v2.1.17-IPv6-Debian-2.1.17-3 server
ready
C: C01 CAPABILITY
S: * CAPABILITY IMAP4 IMAP4rev1 ACL QUOTA LITERAL+ MAILBOX-REFERRALS NAMESPACE
UIDPLUS ID NO_ATOMIC_RENAME UNSELECT CHILDREN MULTIAPPEND SORT
THREAD=ORDEREDSUBJECT THREAD=REFERENCES IDLE STARTTLS AUTH=DIGEST-MD5
AUTH=CRAM-MD5 LISTEXT LIST-SUBSCRIBED ANNOTATEMORE
S: C01 OK Completed
Please enter your password:
C: L01 LOGIN pcs {12}
S: + go ahead
C: <omitted>
S: L01 NO Login failed: authentication failure
Authentication failed. generic failure
Security strength factor: 0

If I change:

allowplaintext: no
to
allowplaintext: yes
and disable sasl then I get the same message thant above:

$ imtest -m login -a pcs localhost
S: * OK euphorie.linuxorable.net Cyrus IMAP4 v2.1.17-IPv6-Debian-2.1.17-3 server
ready
C: C01 CAPABILITY
S: * CAPABILITY IMAP4 IMAP4rev1 ACL QUOTA LITERAL+ MAILBOX-REFERRALS NAMESPACE
UIDPLUS ID NO_ATOMIC_RENAME UNSELECT CHILDREN MULTIAPPEND SORT
THREAD=ORDEREDSUBJECT THREAD=REFERENCES IDLE STARTTLS AUTH=DIGEST-MD5
AUTH=CRAM-MD5 LISTEXT LIST-SUBSCRIBED ANNOTATEMORE
S: C01 OK Completed
Please enter your password:
C: L01 LOGIN pcs {12}
S: + go ahead
C: <omitted>
S: L01 NO Login failed: authentication failure
Authentication failed. generic failure
Security strength factor: 0


Thank you for your help

Pascal -- FRANCE



----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html