Allow PLAIN login cyrus 2.2.12

[Adam Tauno Williams]

On Mon, 2012-02-13 at 12:18 +0100, Manel Gimeno Zaragozá wrote:
> I'm trying to migrate mailbox from "cyrus-imapd-2.2.12-19" to
> "cyrus-imapd-2.4.13-1.el6.x86_64" using imapsync. 
> The login is through ldap but the problem is that I can not login
> through admin user to the cyrus old version (2.2.12). It shows me the
> following error:
> "Error login: [192.168.1.5] with user [test-adm] auth [PLAIN]: 2 NO
> encryption needed to use mechanism"
>     S: L01 NO Login failed: authentication failure
>     Authentication failed. generic failure
>     Security strength factor: 0    
> I've created a test environment and there I have no problems as cyrus
> i allowing auth plain.

Do you have "allowplaintext: 1" in imapd.conf?  There is also
"sasl_minimum_layer".

> #imtest -m plain 192.168.1.6 -a test-adm
>     S: * OK [CAPABILITY IMAP4rev1 LITERAL+ ID ENABLE AUTH=PLAIN
> SASL-IR] cyrus3-test Cyrus IMAP v2.4.13-Invoca-RPM-2.4.13-1.el6 server
> ready

Are you authenticating via saslauthd [since you are using PLAIN]?  If so
can you suceed with testsaslauthd -u .... ?
    
> I've tried to configure old cyrus with the same parameters but it
> doesn't work. I've added the following line to imapd.conf but nothing
> change, I get the same response without AUTH=PLAIN
>     sasl_mech_list: PLAIN

Are you sude your LDAP connection is configured the same way?  [OpenLDAP
uses the SSF concept too].  Perhaps you certificates are expired or
misconfigured [permissions]?
    
> I don't know if I need to force plain login in saslauthd.conf as well,
> or if there is some parameter that I should specify because in old
> versions it's needed.


-- 
Adam Tauno Williams <http://www.whitemiceconsulting.com>
System Administrator, OpenGroupware Developer, LPI / CNA
Fingerprint 8C08 209A FBE3 C41A DD2F A270 2D17 8FA4 D95E D383
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part
Url : http://lists.andrew.cmu.edu/pipermail/info-cyrus/attachments/20120213/c7781296/attachment.bin