Authentication problems since Redhat 5.5 updates

D G Teed donald.teed at gmail.com
Fri Jul 2 13:11:19 EDT 2010


We had a nice trouble free cyrus running until it was updated
with updates from Redhat today.

I've tested with testsaslauthd (no service name given) and it works OK,
so I'd think things are fine on the pam, AD and ldap end.

In the cyrus server's maillog I'm seeing messages like this
from attempts to connect from the remote webmail:

Jul  2 13:54:22 navi imap[4073]: badlogin:
webmail.example.com[XXX.YYY.ZZZ.111] CRAM-MD5 [SASL(-13): user not
found: no secret in
database]

Logins from some other IMAP, like my thunderbird, using a secure IMAP port,
work OK.

cyradm can connect, but scripts we have, using IMAP::Admin have stopped
working.

# cyrsetquota dteed 100
IMAP::Admin [ initialize ]: try NO Login failed: authentication failure

This is cyrus 2.3.7 from Redhat, identifying as:

name       : Cyrus IMAPD
version    : v2.3.7-Invoca-RPM-2.3.7-7.el5_4.3 2006/07/10 13:46:20
vendor     : Project Cyrus
support-url: http://asg.web.cmu.edu/cyrus
os         : Linux
os-version : 2.6.18-194.8.1.el5
environment: Built w/Cyrus SASL 2.1.22
             Running w/Cyrus SASL 2.1.22
             Built w/Sleepycat Software: Berkeley DB 4.3.29: (February 19,
2009)
             Running w/Sleepycat Software: Berkeley DB 4.3.29: (February 19,
2009)
             Built w/OpenSSL 0.9.8e-fips-rhel5 01 Jul 2008
             Running w/OpenSSL 0.9.8e-fips-rhel5 01 Jul 2008
             CMU Sieve 2.3
             TCP Wrappers
             NET-SNMP
             mmap = shared
             lock = fcntl
             nonblock = fcntl
             idle = idled

These packages were updated by Redhat related to sasl:

Jul 02 10:36:41 Updated: cyrus-sasl-lib-2.1.22-5.el5_4.3.i386
Jul 02 10:37:11 Updated: cyrus-sasl-plain-2.1.22-5.el5_4.3.i386
Jul 02 10:37:44 Installed: cyrus-sasl-md5-2.1.22-5.el5_4.3.i386
Jul 02 10:38:01 Updated: cyrus-sasl-2.1.22-5.el5_4.3.i386

I tried removing cyrus-sasl-md5 and restarting saslauthd but it did not
help.

There has to be something silly getting in the way but what?

--Donald
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.andrew.cmu.edu/pipermail/info-cyrus/attachments/20100702/8ed42a78/attachment.html 


More information about the Info-cyrus mailing list