Hi people...

I'm a relative newbie so forgive any stupendous stupidities please...

I'm trying to set up a 'standard' setup for a RH7 based Cyrus mailserver for
internal use at our company. I'm doing it step-by-step so I can learn
something, but I'm getting stuck at one of the first steps. I'm running
Cyrus v2.0.9 by the way; the rpm from RawHide.

The RedHat system is configured to use NIS, which works. I can login with my
userid which is known at the NIS server.

I've successfully configured Cyrus using the sasldb sasl_pwcheck_method
(imapd.conf) but would prefer using PAM, so I can flexibly switch the
userdatabase. For starters I'm just using the system_auth pam method. I've
set the sasl_pwcheck_method to 'pam', and the 'imap' file in the pam.d
folder reads the following:

auth       required     /lib/security/pam_stack.so service=system-auth
account    required     /lib/security/pam_stack.so service=system-auth

and the system-auth file reads:

auth        sufficient    /lib/security/pam_unix.so likeauth nullok md5
shadow
auth        required      /lib/security/pam_deny.so
account     sufficient    /lib/security/pam_unix.so
account     required      /lib/security/pam_deny.so
password    required      /lib/security/pam_cracklib.so retry=3
password    sufficient    /lib/security/pam_unix.so nullok use_authtok md5
shadow
password    required      /lib/security/pam_deny.so
session     required      /lib/security/pam_limits.so
session     required      /lib/security/pam_unix.so

when I try to login using 'cyradm -u root localhost' I get this in
/var/log/messages:

Apr  9 19:48:42 gandalf2 imapd[12360]: badlogin:
localhost.localdomain[127.0.0.1] PLAIN no mechanism available
Apr  9 19:48:47 gandalf2 PAM_unix[12360]: authentication failure;
(uid=76) -> root for system-auth service

Uid 76 is the cyrus user, so I suppose something is failing because the
server is running as cyrus or something? Or do I need to 'allow' PLAIN
logins from somewhere? Any help is making it work but especially and helping
me understand what is actually going wrong would be greatly appreciated and
buys you lunch in Amsterdam (plain-ticket not included).

Thank you and Regards, Gilion R. Goudsmit, MagicMinds, Amsterdam.


Reply via email to