sieve authentication problem

lists at mhcsoftware.de lists at mhcsoftware.de
Wed Dec 15 04:52:08 EST 2004


hi,

i've installed cyrus from debian packages:

ii  cyrus21-admin  2.1.16-10      Cyrus mail system (administration tool)
ii  cyrus21-common 2.1.16-10      Cyrus mail system (common files)
ii  cyrus21-imapd  2.1.16-10      Cyrus mail system (IMAP support)
ii  libcyrus-imap- 2.1.16-10      Interface to Cyrus imap client imclient 
libr
ii  libsasl2       2.1.19-1.5     Authentication abstraction library
ii  libsasl2-dev   2.1.19-1.5     Development files for authentication 
abstrac
ii  libsasl2-gssap 2.1.19-1.1     GSSAPI  module for SASL using MIT Kerberos
ii  libsasl2-krb4- 2.1.19-1.1     Kerberos4  module for SASL using MIT 
Kerbero
ii  libsasl2-modul 2.1.19-1.5     Pluggable Authentication Modules for SASL
ii  libsasl7       1.5.28-6.4     Authentication abstraction library
ii  sasl-bin       1.5.28-6.4     Programs for manipulating the SASL users 
dat
ii  sasl2-bin      2.1.19-1.5     Programs for manipulating the SASL users 
dat

the system's auth system is completely managed by ldap (pam, nss). i'm usig 
saslauthd with mech ldap and this config:

ldap_servers: ldap://localhost/
ldap_search_base: dc=bange-verlag,dc=de

impap authentication works as expected. but sieve does not. whe i use 
sivtest i get:

sivtest -u andrea -a andrea localhost
S: "IMPLEMENTATION" "Cyrus timsieved v2.1.16-IPv6-Debian-2.1.16-10"
S: "SASL" "PLAIN"
S: "SIEVE" "fileinto reject envelope vacation imapflags notify subaddress 
relational regex"
S: OK
Please enter your password:
C: AUTHENTICATE "PLAIN" {28+}
YW5kcmVhAGFuZHJlYQBhbmRyZWE=
S: NO "Authentication Error"
Authentication failed. generic failure
Security strength factor: 0

i can't track this down, because timsievd does not log any thing while this 
test. the only log's i have are my ldap logs:


Dec 15 09:47:10 server slapd[4236]: conn=10630 fd=26 closed
Dec 15 09:47:38 server slapd[4236]: conn=10607 op=3 BIND anonymous 
mech=implicit ssf=0
Dec 15 09:47:38 server slapd[4236]: conn=10607 op=3 BIND dn="" method=128
Dec 15 09:47:38 server slapd[4236]: conn=10607 op=3 RESULT tag=97 err=0 
text=
Dec 15 09:47:38 server slapd[4236]: conn=10607 op=4 SRCH 
base="dc=bange-verlag,dc=de" scope=2 filter="(uid=andrea)"
Dec 15 09:47:38 server slapd[4236]: conn=10607 op=4 SRCH attr=dn
Dec 15 09:47:38 server slapd[4236]: conn=10607 op=4 SEARCH RESULT tag=101 
err=0 nentries=1 text=
Dec 15 09:47:38 server slapd[4236]: conn=10607 op=5 BIND 
dn="uid=andrea,ou=people,dc=bange-verlag,dc=de" method=128
Dec 15 09:47:38 server slapd[4236]: conn=10607 op=5 BIND 
dn="uid=andrea,ou=people,dc=bange-verlag,dc=de" mech=SIMPLE ssf=0
Dec 15 09:47:38 server slapd[4236]: conn=10607 op=5 RESULT tag=97 err=0 
text=
Dec 15 09:47:38 server slapd[4236]: conn=10631 fd=26 ACCEPT from 
IP=127.0.0.1:45157 (IP=0.0.0.0:389)
Dec 15 09:47:38 server slapd[4236]: conn=10631 op=0 BIND 
dn="cn=nss,dc=bange-verlag,dc=de" method=128
Dec 15 09:47:38 server slapd[4236]: conn=10631 op=0 BIND 
dn="cn=nss,dc=bange-verlag,dc=de" mech=SIMPLE ssf=0
Dec 15 09:47:38 server slapd[4236]: conn=10631 op=0 RESULT tag=97 err=0 
text=
Dec 15 09:47:38 server slapd[4236]: conn=10631 op=1 SRCH 
base="dc=bange-verlag,dc=de" scope=2 
filter="(&(objectClass=posixAccount)(uid=andrea))"
Dec 15 09:47:38 server slapd[4236]: conn=10631 op=1 SRCH attr=uid 
userPassword uidNumber gidNumber cn homeDirectory loginShell gecos 
description objectClass
Dec 15 09:47:38 server slapd[4236]: conn=10631 op=1 SEARCH RESULT tag=101 
err=0 nentries=1 text=
Dec 15 09:47:38 server slapd[4236]: conn=10631 op=2 SRCH 
base="dc=bange-verlag,dc=de" scope=2 filter="(&(objectClass=posixGroup))"
Dec 15 09:47:38 server slapd[4236]: conn=10631 op=2 SRCH attr=cn 
userPassword memberUid uniqueMember gidNumber
Dec 15 09:47:38 server slapd[4236]: conn=10631 op=2 SEARCH RESULT tag=101 
err=0 nentries=4 text=
Dec 15 09:47:43 server slapd[4236]: conn=10631 fd=26 closed


as you can see, NONE of the ldap queries faild.

can some one please help me tracking donwn this problem ?

TIA
-- 


Matthias Henze                matthias at mhcsoftware.de

Use PGP!! http://www.mhcsoftware.de/MatthiasHenze.asc
- - - - - - - - - - - - - - - - - - - - - - - - - - - -
MHC SoftWare GmbH          voice: +49-(0)9533-92006-0
Fichtera 17                  fax: +49-(0)9533-92006-6
96274 Itzgrund/Germany    e-Mail: info at mhcsoftware.de
- - - - - - - - - - - - - - - - - - - - - - - - - - - -
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : https://lists.andrew.cmu.edu/mailman/private/info-cyrus/attachments/20041215/ea40bb55/attachment.bin


More information about the Info-cyrus mailing list