Additional information about RV: login problem

[Arturo Mardones]

Hi!...

When i change on imapd.conf sasl_pwcheck_method for
imapsasl_pwcheck_method  in messages log there this:

badlogin: [192.168.2.24] plaintext user.domain.cl SASL(-13): user not
found: checkpass failed

but when is sasl... throw:


Feb 12 09:44:09 LXPROD01 saslauthd[2480]: SELECT password FROM
accountuser WHERE username='user.domain.cl'
Feb 12 09:44:09 LXPROD01 saslauthd[2480]: returning 7 .
Feb 12 09:44:09 LXPROD01 saslauthd[2480]: returning 7 after
db_checkpasswd.
Feb 12 09:44:09 LXPROD01 saslauthd[2480]: do_auth         : auth
failure: [user=user.domain.cl] [service=imap] [realm=] [mech=pam]
[reason=PAM auth error]
badlogin: [192.168.2.24] plaintext user.domain.cl SASL(-13): user not
found: checkpass failed

Thanks for any help... I googling but cant find any answer...

Arturo.

-----Mensaje original-----
De: Arturo Mardones [mailto:arturo.mardones at coretech.cl] 
Enviado el: Jueves, 12 de Febrero de 2004 9:33
Para: 'Christian Beilstein'
CC: 'info-cyrus at lists.andrew.cmu.edu'
Asunto: RE: login problem

Hi,

Thanks for your answer!!, I follow that howto but in imapd.conf I've
sasl_pwcheck_method: saslauthd and in imap file have two lines
additional:

auth sufficient pam_unix_auth.so

account  sufficient       pam_unix_acct.so

when make this changes... in messages log throw me this error:

unable to open Berkeley db 
> /etc/sasldb2: Permission denied

then I make chown cyrus:mail /etc/sasldb2 

and now throw me in messages and imap log :

badlogin: [192.168.2.24] plaintext user.domain.cl SASL(-13): user not
found: checkpass failed


but whit this I use Berkeley db, and I want use the users created in
mysql with webcyradm.

Thanks for your help,


Arturo.

-----Mensaje original-----
De: Christian Beilstein [mailto:cbeilstein at gmx.ch] 
Enviado el: Miércoles, 11 de Febrero de 2004 18:54
Para: arturo.mardones at coretech.cl
CC: info-cyrus at lists.andrew.cmu.edu
Asunto: Re: login problem

> Hi,
>
> When try connect me from MUA in messages log through this error:
>
> Feb 11 17:11:40 mymachine imap(pam_unix)[3395]: could not identify
user (from getpwnam(user.domain.cl))
>
> Exist any way that cyrus take users created in mysql and not mapped
over linux users??

yes, there is a way (using pam): use the module pam_mysql (google knows
where to find it ;-)

set in /etc/imapd.conf:

imapsasl_pwcheck_method: saslauthd

start:
saslauthd -a pam

and configure pam_mysql the way you want to use it, eg in
/etc/pam.d/imap

#%PAM-1.0
auth     sufficient     pam_mysql.so    user=username passwd=mysecret
host=localhost db=mail table=accountuser usercolumn=username
passwdcolumn=password crypt=1 logtable=log logmsgcolumn=msg
logusercolumn=user loghostcolumn=host
account  required       pam_mysql.so    user=username passwd=mysecret
host=localhost db=mail table=accountuser usercolumn=username
passwdcolumn=password crypt=1 logtable=log logmsgcolumn=msg
logusercolumn=user loghostcolumn=host

I would recommend to read the Postfix-Cyrus-Web-cyradmin-Howto; i've
taken my configuration from there (and im using SuSE8.2, so the paths
are takem from there)

greez

Chris
>
> Thanks in advance.
>
> Arturo
>
> ---
> Home Page: http://asg.web.cmu.edu/cyrus
> Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
> List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html





---
Home Page: http://asg.web.cmu.edu/cyrus
Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html