NIS+, Cyrus-IMAP, PAM and SASL

[Benjamin Bacon]

Hi everyone,   I started setting up Cyrus IMAP server a few weeks ago and I had to take a break to setup a several NIS+ domains.  Now the machine that I am planning on being the IMAP server is a NIS+ client.  The problem I have run into is that I am not able to authenticate any users through imtest.  I think this is because of NIS+.  Here is the errors I am getting in the imapd.log file.   Aug 28 13:00:00 regprod8 imapd[7849]: accepted connection Aug 28 13:00:05 regprod8 imapd[7849]: authdes_refresh: keyserv(1m) is unable to encrypt session key Aug 28 13:00:05 regprod8 imapd[7849]: User ben needs Secure RPC credentials to login. Aug 28 13:00:05 regprod8 imapd[7849]: pam_authenticate: error Error in underlying service module Aug 28 13:00:08 regprod8 master[7840]: process 7849 exited, status 0 Aug 28 13:00:18 regprod8 master[7851]: about to exec /usr/cyrus/bin/imapd Aug 28 13:00:18 regprod8 service-imap[7851]: executed Aug 28 13:00:18 regprod8 imapd[7851]: accepted connection Aug 28 13:00:31 regprod8 imapd[7851]: authdes_refresh: keyserv(1m) is unable to encrypt session key Aug 28 13:00:31 regprod8 imapd[7851]: Permissions on the password database may be too restrictive Aug 28 13:00:31 regprod8 imapd[7851]: pam_authenticate: error Authentication failed Aug 28 13:00:34 regprod8 master[7840]: process 7851 exited, status 0   Here is the output from /local/bin/imtest -m login -a ben localhost C: C01 CAPABILITY S: * OK regprod8 Cyrus IMAP4 v2.0.16 server ready S: * CAPABILITY IMAP4 IMAP4rev1 ACL QUOTA LITERAL+ NAMESPACE UIDPLUS ID NO_ATOMIC_RENAME UNSELECT MULTIAPPEND SORT THREAD=ORDEREDSUBJECT THREAD=REFERENCES IDLE S: C01 OK Completed Password: C: L01 LOGIN ben {7} + go ahead C: <omitted> L01 NO Login failed: authentication failure Authentication failed. generic failure Security strength factor: 0 select: Invalid argument failure: select Unfortunately I am new to both NIS+ and Cyrus IMAP so i may be missing something importent. I have a few ideas what might be wrong but if anyone out there has seen this problem let me know!      Thanks a bunch! Benjamin Benjamin Bacon Senior Unix Administrator Omnipod 440 9th Ave. 8th Floor New York, NY 10001 (212)404-3021