PAM (Red Hat) saslauthd, and Cyrus IMAP

[Prentice Bisbal]

I'm having trouble authenticating to Cyrus IMAP. After having problems
with salsdb2 and auxprop, I"m now trying to use saslauthd and pam so I
can use the users' password from NIS.

I can authenticate as myself, the cyrus admin, and the mupdate user fine
with the cyradm command, but when I try to use imtest or connect from an
IMAP mail client, I get reject, with the following entries in
/var/log/auth.log

Mar 10 15:40:18 pdb-mail-1 saslauthd[11318]: do_auth         : auth
failure: [user=mupdate] [service=mupdate] [realm=] [mech=pam]
[reason=PAM auth error]
Mar 10 15:40:18 pdb-mail-1 mupdate[11091]: Password verification failed
Mar 10 15:40:50 pdb-mail-1 saslauthd[11319]: DEBUG: auth_pam:
pam_authenticate failed: Authentication failure
Mar 10 15:40:50 pdb-mail-1 saslauthd[11319]: do_auth         : auth
failure: [user=mupdate] [service=mupdate] [realm=] [mech=pam]
[reason=PAM auth error]
Mar 10 15:40:50 pdb-mail-1 mupdate[11091]: Password verification failed
Mar 10 15:41:14 pdb-mail-1 saslauthd[11320]: DEBUG: auth_pam:
pam_authenticate failed: Authentication failure
Mar 10 15:41:14 pdb-mail-1 saslauthd[11320]: do_auth         : auth
failure: [user=mupdate] [service=mupdate] [realm=] [mech=pam]
[reason=PAM auth error]
Mar 10 15:41:14 pdb-mail-1 mupdate[11091]: Password verification faile

The relevant config files are below


-- 
Prentice Bisbal
Computer System Administrator
Protein Data Bank
Rutgers University


# more /etc/imapd.conf
configdirectory: /var/lib/imap
partition-default: /var/cyrus/spool/imap
admins: cyrus mupdate
sievedir: /var/cyrus/lib/imap/sieve
sendmail: /usr/sbin/sendmail
hashimapspool: true
#sasl_pwcheck_method: auxprop
sasl_pwcheck_method: saslauthd
sasl_mech_list: PLAIN
tls_cert_file: /usr/share/ssl/certs/cyrus-imapd.pem
tls_key_file: /usr/share/ssl/certs/cyrus-imapd.pem
tls_ca_file: /usr/share/ssl/certs/ca-bundle.crt
mupdate_config: replicated
mupdate_server: pdb-mupdate.rutgers.edu
mupdate_username: mupdate
mupdate_authname: mupdate
mupdate_password: XXXXXXXX

# more /etc/sysconfig/saslauthd
MECH=pam
FLAGS="-n=5"

more /etc/pam.d/imap
#%PAM-1.0
auth       required     pam_stack.so service=system-auth
account    required     pam_stack.so service=system-auth




---
Home Page: http://asg.web.cmu.edu/cyrus
Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html