authentication and/or sieve problem?

[Dan White]

On 28/10/09 00:47 -0700, Maria McKinley wrote:
>ella:/var/log# testsaslauthd -u "test" -p "xxx" -s smtp
>0: OK "Success."
>ella:/var/log# testsaslauthd -u "test" -p "xxx" -s imaps
>0: NO "authentication failed"
>ella:/var/log# testsaslauthd -u "test" -p "xxx" -s imap
>0: OK "Success."

Can you provide sanitized copies of the following?:

Your saslauthd startup options (e.g. /etc/default/saslauthd)
Your saslauthd.conf if it exists
your PAM configuration for smtp, imaps and imap if appropriate

>TLS seems to work just fine for smtp:
>
>Oct 28 00:13:21 ella postfix/smtpd[5794]: initializing the server-side 
>TLS engine
>Oct 28 00:13:21 ella postfix/smtpd[5794]: connect from 
>c-76-28-239-89.hsd1.wa.comcast.net[76.28.239.89]
>Oct 28 00:13:21 ella postfix/smtpd[5794]: setting up TLS connection from 
>c-76-28-239-89.hsd1.wa.comcast.net[76.28.239.89]
>...
>
>But I get tls errors regarding imaps:
>
>Oct 26 06:36:35 ella cyrus/imaps[18356]: Fatal error: 
>tls_start_servertls() failed

Permissions problem? Can your cyrus user read the TLS files you've
specified in imapd.conf?

If not, please include sanitised copies of your imapd.conf and cyrus.conf.

>I'm not entirely sure how big of a deal this is, since we use ssl over 
>imaps to check mail, but it does seem to be causing a problem with 
>filters/sieve. When someone attempts to change filters using 
>squirrelmail, the connection times out, and the logs fill with imaps tls 
>errors.
>
>Oct 28 00:37:45 ella cyrus/sieve[7080]: starttls: TLSv1 with cipher 
>AES256-SHA (256/256 bits new) no authentication
>Oct 28 00:37:48 ella cyrus/imaps[7082]: imaps TLS negotiation failed: 
>[10.208.108.93]
>Oct 28 00:37:48 ella cyrus/imaps[7082]: Fatal error: 
>tls_start_servertls() failed

What does your sieve entry look like in cyrus.conf? What's your
squirrelmail sieve (avelsieve?) configuration look like?

-- 
Dan White