how to *not* use PAM, but sasldb2 on fedora core 5 (coming from BSD)

Nikola Milutinovic alokin1 at yahoo.com
Sun Apr 2 10:43:45 EDT 2006



--- Timo Schoeler <timo.schoeler at riscworks.net> wrote:

> thus Ken Jones spake:
> > Check in the file: /etc/imapd.conf
> > 
> > sasl_pwcheck_method: saslauthd sasl_pwcheck_method: auxprop
> > 
> > sasl_auxprop_plugin: sasldb
> > 
> > sasl_auto_transition: no
> 
> hi ken,
> 
> thanks for your reply.
> 
> in the meanwhile i try gentoo, as other distributions don't give me the 
> freedom i used to experience (compared to xBSD ;).
> 
> however, it still does not work.
> 
> i made sure that i have the appropriate plugin(s) installed (hm, 
> 'emerge' only has one for DIGEST, CRAM is missing) and the permissions 
> of sasldb2 are okay.
> 
> still i get:
> 
> Mar 31 20:20:02 www imap[22824]: accepted connection
> Mar 31 20:20:02 www imap[22824]: DIGEST-MD5 server step 1
> Mar 31 20:20:02 www perl: DIGEST-MD5 client step 2
> 
> when trying to login via 'cyradm -u cyrus localhost'...

DIGEST-MD5 has nothing to do with "sasl_pwcheck_method", which is affecting
only PLAIN mechanism. CRAM-MD5 and DIGEST-MD5 will ALWAYS look into Auxiliary
Properties. So, the relevant config options are:

sasl_auxprop_plugin: <sasldb>|<sql>|<ldapdb>
sasl_sasldb_*
sasl_sql_*
sasl_ldapdb_*

Depending on your choice of AuxProp backend, you might require virtually none
(sasldb), some (sql) or a lot of configuring (ldapdb).

I'm strugling with LDAP-DB in MS ADS environment, at the moment. Banging
against walls.

Nix.

__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 


More information about the Info-cyrus mailing list