ldap auth through saslauthd through cyrus

Marten Lehmann lehmann at cnm.de
Tue Jan 3 16:22:05 EST 2012


Hello,

I have a working installation of cyrus-imapd-2.3.7 on CentOS 5 and now 
I'm trying to apply the configuration to 2.4.9 on Ubuntu 11.10.

I have a setup with virtualdomains, ie. I'm using userpart at domain.com to 
login. Tests with testsaslauthd like

testsaslauthd -u userpart at domain.com -p 123456

work fine:

0: OK "Success."

But logging in through POP3 results in this line in syslog:

cyrus/pop3[20085]: badlogin: [10.0.1.71] plaintext userpart at domain.com 
SASL(-13): authentication failure: checkpass failed

I'm using cleartext logins and the important parts of imapd.conf look 
like this:

allowapop: no
sasl_mech_list: PLAIN
virtdomains: userid
sasl_pwcheck_method: saslauthd

How can I get more verbose output? Is there a separate saslauthd logfile 
so I can see what cyrus is actually sending to it? I'm afraid cyrus 
doesn't use the full email address to login but just "userpart". But how 
can I check or fix that? I can under now circumstances specify thousands 
of domains als allowed realms.

Kind regards
Marten


More information about the Info-cyrus mailing list