login problem

[Christian Beilstein]

Am Donnerstag, 12. Februar 2004 15.09 schrieben Sie:
> Christian,
>
> Saslauthd runs with -c -a options... -c not find in man you now what do?
> I review init script and not found -c option :-/

saslauthd --help said:
-c             Enable credential caching. (whatever that means)

>
> Starting saslauthd with -d no give much information just:
>
> AUTHFAIL: user=user.domain.cl service=imap realm= [PAM auth error]
try it with just the two lines of pam_mysql in /etc/pam.d/imap.
Don't you get any errors from pam_mysql? Maybe you can raise there the log 
level (can't remeber, look in the docs)

>
> That before don’t appear.
>
> Ken Murchinson says what pam module have problems for validate... you
> know what means that??
no idea, i'm very sorry
>
> Thanks for your help...!!!
>
> Arturo.

you're welcome

chris

>
>
>
>
>
>
> -----Mensaje original-----
> De: Christian Beilstein [mailto:cbeilstein at gmx.ch]
> Enviado el: Jueves, 12 de Febrero de 2004 10:40
> Para: Arturo Mardones
> CC: info-cyrus at lists.andrew.cmu.edu
> Asunto: Re: login problem
>
> Am Donnerstag, 12. Februar 2004 13.32 schrieben Sie:
> > Hi,
> >
> > Thanks for your answer!!, I follow that howto but in imapd.conf I've
> > sasl_pwcheck_method: saslauthd and in imap file have two lines
> > additional:
> >
> > auth sufficient pam_unix_auth.so
> >
> > account  sufficient       pam_unix_acct.so
>
> well you do not really need them; they are written there to ease the
> transition (if you want to allow "old" users in /etc/passwd to auth
> too).
> If you just want to authenticate users via pam, the two lines i wrote in
> my
> last email are sufficient.
>
> > when make this changes... in messages log throw me this error:
> >
> > unable to open Berkeley db
> >
> > > /etc/sasldb2: Permission denied
> >
> > then I make chown cyrus:mail /etc/sasldb2
>
> that's right :-)
> --> -rw-r--r--    1 cyrus    mail        12288 Jan 20 23:25 /etc/sasldb2
> you don't have to list your users in that db (except the user "cyrus"
> which i
> assume you use to do administrative task must be in that database)
>
> > and now throw me in messages and imap log :
> >
> > badlogin: [192.168.2.24] plaintext user.domain.cl SASL(-13): user not
> > found: checkpass failed
>
> have you started "saslauthd -a pam" and installed pam_mysql? Because
> then you
> should see some stuff from pam_mysql in the logs.
>
> > but whit this I use Berkeley db, and I want use the users created in
> > mysql with webcyradm.
> >
> > Thanks for your help,
> >
> >
> > Arturo.
> >
> > -----Mensaje original-----
> > De: Christian Beilstein [mailto:cbeilstein at gmx.ch]
> > Enviado el: Miércoles, 11 de Febrero de 2004 18:54
> > Para: arturo.mardones at coretech.cl
> > CC: info-cyrus at lists.andrew.cmu.edu
> > Asunto: Re: login problem
> >
> > > Hi,
> > >
> > > When try connect me from MUA in messages log through this error:
> > >
> > > Feb 11 17:11:40 mymachine imap(pam_unix)[3395]: could not identify
> >
> > user (from getpwnam(user.domain.cl))
> >
> > > Exist any way that cyrus take users created in mysql and not mapped
> >
> > over linux users??
> >
> > yes, there is a way (using pam): use the module pam_mysql (google
>
> knows
>
> > where to find it ;-)
> >
> > set in /etc/imapd.conf:
> >
> > imapsasl_pwcheck_method: saslauthd
> >
> > start:
> > saslauthd -a pam
> >
> > and configure pam_mysql the way you want to use it, eg in
> > /etc/pam.d/imap
> >
> > #%PAM-1.0
> > auth     sufficient     pam_mysql.so    user=username passwd=mysecret
> > host=localhost db=mail table=accountuser usercolumn=username
> > passwdcolumn=password crypt=1 logtable=log logmsgcolumn=msg
> > logusercolumn=user loghostcolumn=host
> > account  required       pam_mysql.so    user=username passwd=mysecret
> > host=localhost db=mail table=accountuser usercolumn=username
> > passwdcolumn=password crypt=1 logtable=log logmsgcolumn=msg
> > logusercolumn=user loghostcolumn=host
> >
> > I would recommend to read the Postfix-Cyrus-Web-cyradmin-Howto; i've
> > taken my configuration from there (and im using SuSE8.2, so the paths
> > are takem from there)
> >
> > greez
> >
> > Chris
> >
> > > Thanks in advance.
> > >
> > > Arturo
> > >
> > > ---
> > > Home Page: http://asg.web.cmu.edu/cyrus
> > > Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
> > > List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


---
Home Page: http://asg.web.cmu.edu/cyrus
Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html