Ubuntu Server 13.10 | Postfix 2.10.2 | Cyrus 2.4.16

Andrey ‪ andrew_dev at hotmail.com
Sun Mar 9 18:33:08 EDT 2014


I tried again method of Dan, but with some workarounds:

rm -rf /var/run/saslauthd
ln -s /var/spool/postfix/var/run/saslauthd /var/run/saslauthd
chgrp mail /etc/sasldb2

Now I have in my configs (only sasl and virtdom related):

/etc/default/saslauth
START=yes
MECHANISMS="sasldb"
MECH_OPTIONS=""
THREADS=5
OPTIONS="-c -Vd -m /var/spool/postfix/var/run/saslauthd"

/etc/imapd.conf
[...]
altnamespace: yes
lmtp_downcase_rcpt: yes
admins: cyrus
allowanonymouslogin: no
autocreatequota: -1
allowplaintext: yes
sasl_mech_list: PLAIN
loginrealms: domain.tld
virtdomains: userid
defaultdomain: domain.tld
sasl_pwcheck_method: auxprop
sasl_auxprop_plugin: sasldb
lmtpsocket: /var/run/cyrus/socket/lmtp
[...]

/etc/postfix/main.cf
[...]
mydomain=domain.tld
[...]
virtual_transport = $mailbox_transport
virtual_mailbox_domains = $mydomain
virtual_mailbox_maps = hash:/etc/postfix/vmailbox
virtual_alias_maps = hash:/etc/postfix/virtual
[...]
smtp_sasl_auth_enable = yes
smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd
smtp_sasl_security_options = noanonymous
[...]
smtpd_sasl_auth_enable = yes
smtpd_sasl_security_options = noanonymous
broken_sasl_auth_clients = yes
[...]

/etc/postfix/master.cf
[...]
smtp      inet  n       -       -       -       -       smtpd
[...]
submission inet  n       -       -       -       -       smtpd
[...]
local     unix  -       n       n       -       -       local
virtual   unix  -       n       n       -       -       virtual
lmtp      unix  -       -       n       -       -       lmtp
[...]

/etc/postfix/sasl/smptd.conf
pwcheck_method: auxprop
auxprop_plugin: sasldb
mech_list: PLAIN LOGIN

But still, I cannot login from Windows live mail with username 
info at domain.tld. The unix user andrey can login, auto create mailboxes and 
special folders.

root at srv01:~# sasldblistusers2
cyrus at srv01: userPassword
andrey at srv01: userPassword
info at domain.tld: userPassword

localhost.localdomain> lm
user.andrey (\HasChildren)
user.andrey.Deleted Items (\HasNoChildren)
user.andrey.Drafts (\HasNoChildren)
user.andrey.Junk E-mail (\HasNoChildren)
user.andrey.Sent Items (\HasNoChildren)
user.info (\HasNoChildren)
user.info at domain.tld (\HasNoChildren)

root at srv01:~# testsaslauthd -u info -r domain.tld -p Pa77w0rd
0: OK "Success."

root at srv01:~# testsaslauthd -u info at domain.tld -p Pa77w0rd
0: NO "authentication failed"


Logs:
Mar  9 23:26:28 srv01 saslauthd[9066]: cache_get_rlock : attempting a read 
lock on slot: 950
[This is strange!] => Mar  9 23:26:28 srv01 saslauthd[9066]: cache_lookup 
: [login=info] [service=domain.tld] [realm=imap]: not found, update pending
Mar  9 23:26:28 srv01 saslauthd[9066]: cache_un_lock   : attempting to 
release lock on slot: 950
Mar  9 23:26:28 srv01 saslauthd[9067]: get_accept_lock : acquired accept 
lock
Mar  9 23:26:28 srv01 saslauthd[9066]: cache_get_wlock : attempting a write 
lock on slot: 950
Mar  9 23:26:28 srv01 saslauthd[9066]: cache_commit    : lookup committed
Mar  9 23:26:28 srv01 saslauthd[9066]: cache_un_lock   : attempting to 
release lock on slot: 950
Mar  9 23:26:28 srv01 saslauthd[9066]: do_auth         : auth success: 
[user=info] [service=imap] [realm=domain.tld] [mech=sasldb]
Mar  9 23:26:28 srv01 saslauthd[9066]: do_request      : response: OK
Mar  9 23:26:58 srv01 saslauthd[9067]: rel_accept_lock : released accept 
lock
Mar  9 23:26:58 srv01 saslauthd[9067]: cache_get_rlock : attempting a read 
lock on slot: 681
Mar  9 23:26:58 srv01 saslauthd[9067]: cache_lookup    : 
[login=info at roshost.tk] [service=] [realm=imap]: not found, update pending
Mar  9 23:26:58 srv01 saslauthd[9067]: cache_un_lock   : attempting to 
release lock on slot: 681
Mar  9 23:26:58 srv01 saslauthd[9068]: get_accept_lock : acquired accept 
lock
Mar  9 23:26:58 srv01 saslauthd[9067]: do_auth         : auth failure: 
[user=info at domain.tld] [service=imap] [realm=] [mech=sasldb] 
[reason=Unknown]
Mar  9 23:26:58 srv01 saslauthd[9067]: do_request      : response: NO


mail.log (Windows Live Mail client)

Mar  9 23:29:42 srv01 cyrus/imaps[9496]: badlogin: [192.168.1.1] plaintext 
info SASL(-13): user not found: checkpass failed


So I can not move further... :(







More information about the Info-cyrus mailing list