NO Login failed: generic failure

Wed Mar 26 19:32:17 EDT 2014

On Mar 26, 2014, at 16:27 , Mogens Melander <mogens at fumlersoft.dk> wrote:

> Dude, check again:
> 
> 
> In your login, cmusaslsecretPLAIN coloumn is missing ??

Already fixed the issue … had nothing to do with the SQL query … for some reason, even with auxprop set to sql, its trying to access sasldb2.db, whch didn’t exist on the ones not working … creating a ‘dummy file’ fixed the immediate issue, althoguh it doesn’t explain why it was even looking there … also, removing libsasldb.* fixes it, but that one more a pain since on upgrade, one would have to remember to re-remove them …


> 
> On Wed, March 26, 2014 19:05, Marc Fournier wrote:
>> 
>> Yes, they are all the same … data isn’t, obvously, but the structure
>> hasn’t changed … in fact, the mail systems on all three servers that I’m
>> currently working with have been running / configured for 5+ years now …
>> only change was upgraded OS from FreeBSD 9 -> 10 and upgraded ports to the
>> latest …
>> 
>> I did the upgrade from 9 -> 10 for hub.org first (the domain I’m emailing
>> from) and all went smooth … I never change config files  unless I have to,
>> and in this case, nothing had to be changed … and the lack of useful error
>> message is making it twice as difficult to debug ;(
>> 
>> 
>> 
>> On Mar 26, 2014, at 10:59 , Helmut Weigel <helmut.weigel at dfb-medien.de>
>> wrote:
>> 
>>> You said, you compared the cyrus config files.
>>> Did you compare the structure and data of the sqllite databases?
>>> 
>>> Regards Helmut
>>> 
>>> Von: Marc Fournier [mailto:scrappy at hub.org]
>>> Gesendet: Mittwoch, 26. März 2014 18:20
>>> An: Helmut Weigel
>>> Cc: info-cyrus at lists.andrew.cmu.edu
>>> Betreff: Re: NO Login failed: generic failure
>>> 
>>> 
>>> Never has been, nor is there on the working system … I don’t even know
>>> where that query is coming from, as my imapd.conf has:
>>> 
>>> pwcheck_method: auxprop
>>> auxprop_plugin: sql
>>> 
>>> sasl_sql_engine: sqlite
>>> sasl_sql_database: /var/db/sqlite/mailsys
>>> sasl_sql_select: SELECT %p FROM sasl_auth WHERE userid = '%u@%r'
>>> sasl_sql_insert: INSERT INTO sasl_auth ( userid, %p, domain ) VALUES (
>>> '%u@%r', '%v' )
>>> sasl_sql_update: UPDATE sasl_auth SET %p = '%v' WHERE userid = '%u@%r'
>>> 
>>> this is the same config on both system, and even lookign on the *good*
>>> system (that I’m reading / sending this through) at its
>>> /var/log/debug.log, I see it doing that extra query, but, again, no idea
>>> where it is coming from … its not something I wrote … only the first
>>> query is:
>>> 
>>> Mar 26 14:02:37 hub pop3[75904]: begin transaction
>>> Mar 26 14:02:37 hub pop3[75904]: sql plugin create statement from
>>> userPassword ams hub.org
>>> Mar 26 14:02:37 hub pop3[75904]: sql plugin doing query SELECT
>>> userPassword FROM sasl_auth WHERE userid = 'ams at hub.org';
>>> Mar 26 14:02:37 hub pop3[75904]: sql plugin create statement from
>>> cmusaslsecretPLAIN ams hub.org
>>> Mar 26 14:02:37 hub pop3[75904]: sql plugin doing query SELECT
>>> cmusaslsecretPLAIN FROM sasl_auth WHERE userid = 'ams at hub.org';
>>> Mar 26 14:02:37 hub pop3[75904]: sql plugin: no such column:
>>> cmusaslsecretPLAIN
>>> Mar 26 14:02:37 hub pop3[75904]: commit transaction
>>> 
>>> 
>>> 
>>> 
>>> On Mar 26, 2014, at 10:11 , Helmut Weigel <helmut.weigel at dfb-medien.de>
>>> wrote:
>>> 
>>> 
>>> Hi,
>>> 
>>> the problem is located in your SQL Database. The Error Message says:
>>> 
>>> 
>>> There’s no colum  cmusaslsecretPLAIN
>>> 
>>> 
>>> Double Check your Database
>>> 
>>> Regards Helmut
>>> 
>>> Von: info-cyrus-bounces+weigel=dfbnet.org at lists.andrew.cmu.edu
>>> [mailto:info-cyrus-bounces+weigel=dfbnet.org at lists.andrew.cmu.edu] Im
>>> Auftrag von Marc Fournier
>>> Gesendet: Mittwoch, 26. März 2014 17:28
>>> An: info-cyrus at lists.andrew.cmu.edu
>>> Betreff: NO Login failed: generic failure
>>> 
>>> 
>>> I have two servers, both with identical configurations, right down to
>>> their imapd.conf files … both use sqlite to store auth information …
>>> 
>>> Both running on FreeBSD 10.x, and versions of imapd/sasl are the same:
>>> 
>>> cyrus-imapd24-2.4.17_4/ cyrus-sasl-2.1.26_5
>>> 
>>> One works great, nary a problem … the other, I get the above message
>>> when I try and authenticate.  And I can’t find anything different … I’ve
>>> checked permissions on the various files, etc …
>>> 
>>> /var/log # telnet localhost imap
>>> Trying 127.0.0.1...
>>> Connected to localhost.
>>> Escape character is '^]'.
>>> * OK [CAPABILITY IMAP4rev1 LITERAL+ ID ENABLE STARTTLS AUTH=SCRAM-SHA-1
>>> AUTH=DIGEST-MD5 AUTH=CRAM-MD5 AUTH=LOGIN AUTH=PLAIN SASL-IR] xxx.xxx
>>> Cyrus IMAP v2.4.17 server ready
>>> . login xxx at xxx.xxx xxx
>>> . NO Login failed: generic failure
>>> . logout
>>> * BYE LOGOUT received
>>> . OK Completed
>>> Connection closed by foreign host.
>>> 
>>> /var/log/debug.log shows:
>>> 
>>> ==
>>> Mar 26 16:09:08 xxx imap[67279]: SQL backend defaulting to engine
>>> 'sqlite'
>>> Mar 26 16:09:08 xxx imap[67279]: executed
>>> Mar 26 16:09:08 xxx imap[67279]: sql auxprop plugin using sqlite engine
>>> Mar 26 16:09:08 xxx imap[67279]: IOERROR: opening
>>> /var/spool/imap/user_deny.db: No such file or directory
>>> Mar 26 16:09:08 xxx imap[67279]: accepted connection
>>> Mar 26 16:09:36 xxx imap[67279]: accepted connection
>>> Mar 26 16:09:49 xxx imap[67279]: sql plugin Parse the username
>>> xxx at xxx.xxx
>>> Mar 26 16:09:49 xxx imap[67279]: sql plugin try and connect to a host
>>> Mar 26 16:09:49 xxx imap[67279]: sql plugin trying to open db
>>> '/var/db/sqlite/mailsys' on host ''
>>> Mar 26 16:09:49 xxx imap[67279]: begin transaction
>>> Mar 26 16:09:49 xxx imap[67279]: sql plugin create statement from
>>> userPassword xxx xxx.xxx
>>> Mar 26 16:09:49 xxx imap[67279]: sql plugin doing query SELECT
>>> userPassword FROM sasl_auth WHERE userid = 'xxx at xxx.xxx';
>>> Mar 26 16:09:49 xxx imap[67279]: sql plugin create statement from
>>> cmusaslsecretPLAIN xxx xxx.xxx
>>> Mar 26 16:09:49 xxx imap[67279]: sql plugin doing query SELECT
>>> cmusaslsecretPLAIN FROM sasl_auth WHERE userid = 'xxx at xxx.xxx';
>>> Mar 26 16:09:49 xxx imap[67279]: sql plugin: no such column:
>>> cmusaslsecretPLAIN
>>> Mar 26 16:09:49 xxx imap[67279]: commit transaction
>>> Mar 26 16:09:49 xxx imap[67279]: sql plugin Parse the username
>>> xxx at xxx.xxx
>>> Mar 26 16:09:49 xxx imap[67279]: sql plugin try and connect to a host
>>> Mar 26 16:09:49 xxx imap[67279]: sql plugin trying to open db
>>> '/var/db/sqlite/mailsys' on host ''
>>> 
>>> /var/log/messages shows:
>>> 
>>> Mar 26 16:09:49 rdfund imap[67279]: badlogin: xxx [200.46.208.227]
>>> plaintext xxx at xxx.xxx SASL(-1): generic failure: checkpass failed
>>> 
>>> I’ve even tried su’ng to the cyrus user and running the sql command
>>> against the database, and it returns the right database:
>>> 
>>> % echo "SELECT userPassword FROM sasl_auth WHERE userid =
>>> ‘xxx at xxx.xxx';" | sqlite /var/db/sqlite/mailsys
>>> rightPW
>>> %
>>> 
>>> I’ve double checked the imapd.conf files, and they are identical except
>>> different admins: and one has tls_* lines in it … but I’m having the
>>> identical issue with *another* server, and it doesn’t have the tls_*
>>> lines …
>>> 
>>> I figure I have to be overlooking *something* stupid, but I’m at a loss
>>> as to what it could be … I’ve even checked md5 on imapd between both
>>> working / non-working … identical …
>>> 
>>> Is there any way of getting more debug information out of the backend
>>> without modifying the code itself?
>>> 
>>> Thanks ...
>>> 
>>> 
>>> 
>>> ______________________________________________________________________
>>> This email has been scanned by the Symantec Email Security.cloud
>>> service.
>>> For more information please visit http://www.symanteccloud.com
>>> ______________________________________________________________________
>> 
>> 
>> --
>> This message has been scanned for viruses and
>> dangerous content by MailScanner, and is
>> believed to be clean.
>> 
>> ----
>> Cyrus Home Page: http://www.cyrusimap.org/
>> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
>> To Unsubscribe:
>> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
> 
> 
> -- 
> Mogens Melander
> +66 8701 33224
> 
> BTW. I would prefere (prefere, not being a proper English word,
> substitute with: like ) to receive e-mail in plain text.
> Please look for an option, to associate, mail to
> me, with plain text. Thank you.
> 
> 
> -- 
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
> 
> ----
> Cyrus Home Page: http://www.cyrusimap.org/
> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
> To Unsubscribe:
> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus