IMSP Authentication issue

[Martin Ziegler]

There is no other syslog message than the ones i posted in my initial email 
(SASLAUTHd which says that the authentication was successfull and IMSP 
which says "user does not have an account on this server). The user does 
have an option file. The IMSPd option file looks like

imsp.sasl.allowplaintext N +
common.date R +
common.delivery.hosts N <hostname>
common.domain N <domain>
imsp.admin.all N <username>
imsp.admin.bboards N <username>
imsp.create.new.users N +
imsp.create.policy N parent
imsp.log.level N 2
imsp.proxy.authlevel N 1
imsp.proxy.authtype N PLAINTEXT

As alerady mentioned this is exactly the same setup i used for years on the 
old server. Also the complete IMSP directory structure was copied from the 
old to the new server. Only IMSPd was compiled again due to a pathname that 
changed. On the old server IMSP was installed in /sys/cyrus/imsp/ and now 
it is installed in /opt/cyrus/imsp/.

# pwd
/opt/cyrus/imsp

# ls -al
total 16
drwxr-xr-x    4 root     root         4096 May 29 09:07 .
drwxr-x---    5 cyrus    mail         4096 Jun  1 19:59 ..
drwxr-xr-x    2 root     root         4096 May 29 09:05 bin
drwxr-xr-x    3 root     root         4096 Jan 26  2005 var

# ls -al bin/
total 84
drwxr-xr-x    2 root     root         4096 May 29 09:05 .
drwxr-xr-x    4 root     root         4096 May 29 09:07 ..
-rwxr-xr-x    1 root     root        70320 May 29 09:05 imspd

# ls -al var/
total 16
drwxr-xr-x    3 root     root         4096 Jan 26  2005 .
drwxr-xr-x    4 root     root         4096 May 29 09:07 ..
-rw-------    1 root     root            0 Jan 26  2005 abooks
-rw-r--r--    1 root     root          322 Jan 26  2005 options
drwx------    4 root     root         4096 Aug 25  2006 user

# ls -al var/user/
total 16
drwx------    4 root     root         4096 Aug 25  2006 .
drwxr-xr-x    3 root     root         4096 Jan 26  2005 ..
drwx------    2 root     root         4096 May 28 23:25 <user1>
drwx------    2 root     root         4096 Nov  5  2007 <user2>

# lsa var/user/<user2>
total 28
drwx------    2 root     root         4096 Nov  5  2007 .
drwx------    4 root     root         4096 Aug 25  2006 ..
-rw-r--r--    1 root     root        11465 Nov  5  2007 abook.<user2>
-rw-r--r--    1 root     root            4 Aug  7  2006 abooks
-rw-r--r--    1 root     root           29 Nov  5  2007 options

# cat var/user/<user2>/options
imsp.user.quota.usage R 5188


--On June 1, 2008 1:49:23 PM -0400 Wesley Craig <wes at umich.edu> wrote:

> --On Donnerstag, 29. Mai 2008 11:28 +0200 Martin Ziegler
> <mz at newyorkcity.de> wrote:
>> When i try to log in to IMSPd saslauthd returns a successfull
>> authentication but IMSPd says, that there is no such user on this
>> server.
>
> I presume you're also getting a syslog from imspd like this:
>
> 	badlogin: <host> <user> <at> invalid user
>
> The message:
>
> 	User does not have an account on this server
>
> is associated with checks for the user's option database, i.e.,
>
> 	does the user have an option database?
> 	is imsp.create.new.users on?
> 	can the user's option database be created?
>
> Databases are in /var/imsp.  There doesn't appears to be any checking of
> permissions, just presence (at least in v1.7b), so you can get odd
> situations where early checks indicate no problem but attempts to access
> a user's database get "file not found".  For example, /var/imsp exists,
> complete with a bunch of user DBs.  However, the daemon can't read what's
> under it.
>
> :wes
>