problem with murder

[Thomas Vogt]

Hi all

I've problems with cyrus imapd 2.2.10 and murder. I always get:

Dec  7 15:22:18 sokrates mupdate[83581]: OTP unavailable because can't
read/write key database /etc/opiekeys: Permission denied
Dec  7 15:22:18 sokrates mupdate[83581]: OTP unavailable because can't
read/write key database /etc/opiekeys: Permission denied
Dec  7 15:22:18 sokrates mupdate[83581]: Password verification failed
Dec  7 15:22:18 sokrates mupdate[83581]: Password verification failed
Dec  7 15:22:21 sokrates mupdate[83581]: badlogin: testlan.mlan.ch
[212.101.1.103] PLAIN SASL(-13): authentication failure: Password
verification failed

OPT was disabled during the sasl configuration.

I try to run mupdate_config:unified that I can use frontend and backend
on the same machine.

System information:
2x FreeBSD 4.10-p3

cyrus-imapd-2.2.10
./configure --sysconfdir=/usr/local/etc
--with-cyrus-prefix=/usr/local/cyrus 
--with-cyrus-user=cyrus
--with-cyrus-group=cyrus 
--with-sasl=/usr/local 
--with-bdb-libdir=/usr/local/lib 
--with-com_err 
--with-openssl=/usr 
--with-perl=/usr/local/bin/perl5.8.5
--with-bdb-incdir=/usr/local/include/db42 
--with-bdb=db-4.2 
--enable-murder 
--with-idle=idled 
--enable-listext 
--enable-netscapehack 
--with-snmp=/usr/local 
--with-auth=unix 
--prefix=/usr/local i386-portbld-freebsd4.10


cyrus-sasl-2.1.20
./configure --sysconfdir=/usr/local/etc
--with-plugindir=/usr/local/lib/sasl2
--with-dbpath=/usr/local/etc/sasldb2 
--includedir=/usr/local/include 
--mandir=/usr/local/man 
--enable-static 
--enable-auth-sasldb 
--with-rc4=openssl 
--with-saslauthd=/var/state/saslauthd 
--with-dblib=ndbm --without-mysql 
--without-pgsql 
--without-sqlite 
--enable-login 
--disable-otp 
--disable-cram 
--disable-digest 
--disable-ntlm 
--disable-gssapi 
--disable-krb4 
--with-openssl=yes 
--prefix=/usr/local i386-portbld-freebsd4.10

cyrus-sasl-saslauthd-2.1.20_1
(with ldap)

saslauthd runs with ldap
saslauth.conf:
dap_servers: ldap://localhost
ldap_search_base: ou=people,ou=lan,dc=lan,dc=ch
ldap_filter: (|(uid=%u)(mailacceptinggeneralid=%u))



imapd.conf (both server have the same except the servername)

# The pathname of the IMAP configuration directory
configdirectory: /var/imap
partition-default: /var/spool/imap
servername: testlan.mlan.ch 
singleinstancestore: true
hashimapspool: true
fulldirhash: true

# IMAPD
quotawarn: 90
timeout: 30

# POPD
poptimeout: 10
popexpiretime: 0

# SIEVE
sieveusehomedir: false
sievedir: /var/imap/sieve
sieve_allowplaintext: yes


# ACCESS
allowplaintext: yes
admins: admin
sasl_pwcheck_method: saslauthd
sasl_mech_list: plain
sasl_ldap_server: localhost 
sasl_ldap_basedn: ou=people,ou=lan,dc=lan,dc=ch
sasl_ldap_uidattr: uid
sasl_ldap_port: 389
force_sasl_client_mech: plain
sasl_ldap_ssl: no
sasl_auto_transition: yes


# MURDER
mupdate_server: sokrates.mlan.ch
mupdate_username: mupdater
mupdate_authname: mupdater
mupdate_password: test
mupdate_config: unified
# EOF


cyrus.conf (both have the same except mupdate -m)

# standard standalone server implementation

START {
  # do not delete this entry!
  recover       cmd="ctl_cyrusdb -r"
}
SERVICES {
  #mupdate database service - must prefork atleast 1
  mupdate       cmd="/usr/local/cyrus/bin/mupdate -m" listen=3905
prefork=1
  # add or remove based on preferences
  imap          cmd="imapd" listen="imap" prefork=0
  pop3          cmd="pop3d" listen="pop3" prefork=0  
  sieve         cmd="timsieved" listen="sieve" prefork=0
  # at least one LMTP is required for delivery
 lmtp         cmd="lmtpd" listen="lmtp" prefork=0

}
EVENTS {
  # this is required
  checkpoint    cmd="ctl_cyrusdb -c" period=30
  # this is only necessary if using duplicate delivery suppression,
  # Sieve or NNTP
  delprune      cmd="cyr_expire -E 3" at=0400
}

any idea whats wrong? OTP is disabled. I've no clue why one server will
always try otp. 


I also tried:sokrates# mupdatetest -p 3905 -u mupdater sokrates:

S: * AUTH "NTLM" "LOGIN" "PLAIN" "DIGEST-MD5" "CRAM-MD5"
S: * PARTIAL-UPDATE
S: * OK MUPDATE "sokrates.mlan.ch" "Cyrus Murder" "v2.2.10" "(master)"
C: A01 AUTHENTICATE "DIGEST-MD5"
S:
bm9uY2U9Ik9hNE1NOGZoWXcxc2FCbkZ3ZVlwQi9XbWZlaWk2M1dSYnErM1Z2a1JZSU09IixyZWFsbT0ic29rcmF0ZXMubWxhbi5zb2xuZXQuY2giLHFvcD0iYXV0aCxhdXRoLWludCxhdXRoLWNvbmYiLGNpcGhlcj0icmM0LTQwLHJjNC01NixyYzQsZGVzLDNkZXMiLG1heGJ1Zj00MDk2LGNoYXJzZXQ9dXRmLTgsYWxnb3JpdGhtPW1kNS1zZXNz
Please enter your password: (test)
C:
dXNlcm5hbWU9InJvb3QiLHJlYWxtPSJzb2tyYXRlcy5tbGFuLnNvbG5ldC5jaCIsYXV0aHppZD0ibXVwZGF0ZXIiLG5vbmNlPSJPYTRNTThmaFl3MXNhQm5Gd2VZcEIvV21mZWlpNjNXUmJxKzNWdmtSWUlNPSIsY25vbmNlPSJpem5EK1E2QXBVeDVUTVVsQWUrMXhjTDFyL2ZwN0R1WmY3WjFzRE9EVXRFPSIsbmM9MDAwMDAwMDEscW9wPWF1dGgtY29uZixjaXBoZXI9cmM0LG1heGJ1Zj0xMDI0LGRpZ2VzdC11cmk9Im11cGRhdGUvc29rcmF0ZXMubWxhbi5zb2xuZXQuY2giLHJlc3BvbnNlPWJlNjc0ZDQ4ODM5ZDQ1MjJlMDIzNmUwYjVjM2ZmOGQz
S: A01 NO "undefined error!"
Authentication failed. generic failure
Security strength factor: 128


regards
Thomas
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: Dies ist ein digital signierter Nachrichtenteil
Url : https://lists.andrew.cmu.edu/mailman/private/info-cyrus/attachments/20041207/f57e9e7d/attachment.bin