Cyrus IMAP 2.2.3 & ldapdb auxprop

[Igor Brezac]

On Tue, 2 Mar 2004, Alex Deiter wrote:

> hi,
>
> After upgrade Cyrus IMAP from 2.1.16 up to 2.2.3 following setup does
> not work:
> mail client -> Cyrus IMAP -> Cyrus SASL -> ldapdb auxprop -> OpenLDAP
>
> cyrus log:
> pop3[32386]: bad userid authenticated
> pop3[32386]: badlogin: server.komi.mts.ru[1.1.1.1] plaintext bill
> SASL(-13): user not found: checkpass failed
>
> ldap server log:
> slapd[34976]: conn=49924 op=0 BIND dn="" method=163
> slapd[34976]: connection_operation: error: SASL bind in progress (tag=66).
>
> But excellently works sendmail (with SMTP AUTH):
> mail client -> Sendmail -> Cyrus SASL -> ldapdb auxprop -> OpenLDAP
>
> My imapd.conf:
> ...
> sasl_pwcheck_method: auxprop
> sasl_auxprop_plugin: ldapdb
> sasl_ldapdb_uri: ldapi://%2fvar%2frun%2fopenldap%2fldapi
> sasl_ldapdb_mech: EXTERNAL
> ...
>
> Other software version: cyrus-sasl-2.1.17, openldap-2.2.6
>
> Somebody can help me?

Well, this is a bug in cyrus and openldap libs (and the sasl lib which
prevents cyrus from being fixed).  Fortunately,
http://www.openldap.org/its/index.cgi?findid=2926 fixes the problem.
Although, the fix is available in openldap 2.2.6 and 2.1.27.

This setup works for me: ldapdb compiled with 2.1.26 + the above patch
(ldapdb + openldap libs 2.2.6 and 2.1.27 should work without the patch).

Make sure to compile ldapdb auxprop with openldap 2.2.6 libs.  What does
'ldd libldapdb.so' say?

-- 
Igor
---
Home Page: http://asg.web.cmu.edu/cyrus
Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html