Strange authentication problem

[Ken Murchison]

Noah Silverman wrote:
> Hi,
> 
> I have cyrus and cyrus sasl installed on a freebsd box.
> 
> I can use my desktop e-mail client to reliably access my imap box.   
> (It has been working perfectly for months.)
> 
> I recently got a Blackberry and they have a service that will poll  
> the imap server for new mail.  For some reason, their attempts to  
> authenticate fail and generate errors in my log.
> 
> Below are two entries from my log file.
> 
> This one is when I SUCCESSFULLY authenticate from my laptop:
> 
> Oct 11 12:52:09 allresearch imaps[13924]: starttls: TLSv1 with cipher  
> AES128-SHA (128/128 bits new) no authentication
> Oct 11 12:52:09 allresearch imaps[13924]: login:  
> rrcs-64-183-13-250.west.biz.rr.com [64.183.13.250] noah at example.com  
> CRAM-MD5+TLS User logged in
> 
> This what I get when their service fails to login:
> 
> Oct 11 13:08:52 allresearch imaps[14043]: starttls: SSLv3 with cipher  
> RC4-MD5 (128/128 bits new) no authentication
> Oct 11 13:08:52 allresearch imaps[14042]: badlogin:  
> ten009.bis.na.blackberry.com [216.9.249.246] plaintext noah SASL 
> (-13): authentication failure: checkpass failed
> Oct 11 13:08:52 allresearch imaps[14043]: badlogin:  
> ten009.bis.na.blackberry.com [216.9.249.246] plaintext noah at com SASL 
> (-13): authentication failure: checkpass failed
> 
> 
> 
> Can anybody help with this situation??

Your plaintext authenticator isn't configured properly.  Since you're 
obviously using a SASL auxprop plugin for CRAM-MD5, make sure that 
imapd.conf has 'sasl_pwcheck_method: auxprop'


-- 
Kenneth Murchison
Systems Programmer
Project Cyrus Developer/Maintainer
Carnegie Mellon University