problems with authentication

[Andreas Winkelmann]

Am Saturday 22 October 2005 20:34 schrieb Andrzej Kwiatkowski:

> I want to do authentication over PGSQL without pam.
>
> So, my imapd.conf looks like:
>
> configdirectory:        /opt/mail/cyrus1/var/config
> hashimapspool:          0
>
> partition-default:      /opt/mail/cyrus1/var/mailboxes
>
>
> allowplaintext: 1
>
> sasl_mech_list: plain login
>
> sasl_pwcheck_method: auxprop
> sasl_auxprop_plugin: sql
>
> sasl_sql_engine: pgsql
> sasl_sql_hostnames: localhost
> sasl_sql_database: isp
> sasl_sql_user: isp
> sasl_sql_select: SELECT password FROM users WHERE uid = '%u'
> sasl_sql_verbose: yes
>
> Entry in my PGSQL database looks like:
> uid: password
> kwiatek | ecb1578defd757314d30f1b571a12be4

Cyrus-SASL does not like encrypted Passwords from auxprop. There is a Patch 
for MySQL around, maybe it helps you with pgsql.

http://frost.ath.cx/software/cyrus-sasl-patches/

> As a password format i want to use Digest-MD5.
> When i connect to imap/pop3 service, i can't authenticate.
> In logs i can see:
>
> Oct 22 20:28:14 kwiatek pop3[26686]: badlogin: localhost [127.0.0.1]
> plaintext kwiatek SASL(-13): authentication failure: checkpass failed
>
> What i'm missing ?
> How to setup auth over auxprop plugin and digest-md5 passwords ?

-- 
	Andreas