-authz no longer working?

Dan White dwhite at olp.net
Fri Sep 4 17:09:53 EDT 2009

On 04/09/09 15:01 -0600, John Masterson wrote:
> Sep  4 14:59:09 mbe1 cyrus/imap[18587]: badlogin: mgmt.modwest.com  
> [] PLAIN [SASL(-16): encryption needed to use mechanism:  
> security flags do not match required]
> Sep  4 14:59:39 mbe1 cyrus/imap[18587]: login: mgmt.modwest.com  
> [] cyrus plaintext User logged in

You probably do not have this turned on in /etc/imapd.conf:

# Allow plaintext logins by default (SASL PLAIN)
allowplaintext: yes

You can either:

* connect using TLS (which will provide the required security bits),
then connect with PLAIN

* enable the allowplaintext option

* or connect with another mechanism (like DIGEST-MD5) which would also
provide the appropriate level of network security.

you might also need to adjust your sasl_minimum_layer setting.

Dan White

More information about the Info-cyrus mailing list