NOAUTHENTICATION problem with timsieved

[Dan White]

On 08/06/12 11:53 +0200, Riccardo Veraldi wrote:
>Hello,
>i have troubles with timsieved belonging to  cyrus-imapd version 2.4.13
>
>with version 2.4.10 I didn't have this problem.
>
>it is impossible for me to authenticate on timsieved:
>
>Trying 127.0.0.1...
>Connected to localhost.
>Escape character is '^]'.
>"IMPLEMENTATION" "Cyrus timsieved v2.4.13-Invoca-RPM-2.4.13-CNAF_1.el6"
>"SASL" ""
>"SIEVE" "comparator-i;ascii-numeric fileinto reject vacation imapflags
>notify envelope relational regex subaddress copy"
>"STARTTLS"
>"UNAUTHENTICATE"
>OK
>
>
>I see the UNAUTHENTICATE string which I never seen in previous timsieved
>installation.

UNAUTHENTICATE support was added in version 2.4.11, and is defined in RFC
5804. It's purpose appears to support returning to an unauthenticated state
after successful authentication. I suspect that it is unrelated, unless
there was some bug introduced within it.

>managesieve plugins give me errors like this
>
>[06-Aug-2012 11:52:16] No supported authentication method found. The
>server supports these methods: , but we want to use: PLAIN ():
>
>
>basically no authentication method is supported inside timsieved.
>
>this is my imapd.conf
>
>configdirectory: /var/lib/imap
>partition-default: /var/spool/imap
>admins: cyrus
>sievedir: /var/lib/imap/sieve
>sendmail: /usr/sbin/sendmail
>hashimapspool: true
>allowplaintext: false
>allowusermoves: true
>sasl_pwcheck_method: saslauthd
>sasl_mech_list: PLAIN LOGIN
>tls_cert_file: /etc/pki/cyrus-imapd/cyrus-imapd.pem
>tls_key_file: /etc/pki/cyrus-imapd/cyrus-imapd.pem
>tls_ca_file: /etc/pki/tls/certs/CA.pem

Verify that this system has support for PLAIN and LOGIN. Run pluginviewer
to verify that those mechanisms are installed.

allowplaintext may need to be true, unless you are protecting the session
with tls.

>and this is my cyrus.conf
>
>
>START {
>   # do not delete this entry!
>   recover    cmd="ctl_cyrusdb -r"
>
>   # this is only necessary if using idled for IMAP IDLE
>   idled        cmd="idled"
>}
>
># UNIX sockets start with a slash and are put into /var/lib/imap/sockets
>SERVICES {
>   # add or remove based on preferences
>   imap        cmd="imapd" listen="localhost:imap" prefork=5
>   imaps        cmd="imapd -s" listen="imaps" prefork=1
>#  pop3        cmd="pop3d" listen="pop3" prefork=3
>   pop3s        cmd="pop3d -s" listen="pop3s" prefork=1
>   sieve        cmd="timsieved" listen="127.0.0.1:sieve-filter" prefork=1
>
>   # these are only necessary if receiving/exporting usenet via NNTP
>#  nntp        cmd="nntpd" listen="nntp" prefork=3
>#  nntps        cmd="nntpd -s" listen="nntps" prefork=1
>
>   # at least one LMTP is required for delivery
>#  lmtp        cmd="lmtpd" listen="lmtp" prefork=0
>   lmtpunix    cmd="lmtpd" listen="/var/lib/imap/socket/lmtp" prefork=1
>
>   # this is only necessary if using notifications
>#  notify    cmd="notifyd" listen="/var/lib/imap/socket/notify"
>proto="udp" prefork=1
>}
>
>EVENTS {
>   # this is required
>   checkpoint    cmd="ctl_cyrusdb -c" period=30
>
>   # this is only necessary if using duplicate delivery suppression,
>   # Sieve or NNTP
>   delprune    cmd="cyr_expire -D 7 -E 3 -X 7" at=0400
>
>   # this is only necessary if caching TLS sessions
>   tlsprune    cmd="tls_prune" at=0400
>}

-- 
Dan White