is the /usr/sbin/keyserv daemon running? from the error that you've
listed your user isn't able get user ben's private key. i'd fire up
keyserv and try it again, are you running this on solaris? i have cyrus
setup on a redhat 7.1 machine that's a nis client and everything running
fine. i can shoot you over the configs if you interested.
--
Darin Perusich
Unix Administrator
Cognigen Corp.
[EMAIL PROTECTED]
> Benjamin Bacon wrote:
>
> Hi everyone,
>
> I started setting up Cyrus IMAP server a few weeks ago and I had to
> take a break to setup a several NIS+ domains. Now the machine that I
> am planning on being the IMAP server is a NIS+ client. The problem I
> have run into is that I am not able to authenticate any users through
> imtest. I think this is because of NIS+. Here is the errors I am
> getting in the imapd.log file.
>
> Aug 28 13:00:00 regprod8 imapd[7849]: accepted connection
> Aug 28 13:00:05 regprod8 imapd[7849]: authdes_refresh: keyserv(1m) is
> unable to encrypt session key
> Aug 28 13:00:05 regprod8 imapd[7849]: User ben needs Secure RPC
> credentials to login.
> Aug 28 13:00:05 regprod8 imapd[7849]: pam_authenticate: error Error in
> underlying service module
> Aug 28 13:00:08 regprod8 master[7840]: process 7849 exited, status 0
> Aug 28 13:00:18 regprod8 master[7851]: about to exec
> /usr/cyrus/bin/imapd
> Aug 28 13:00:18 regprod8 service-imap[7851]: executed
> Aug 28 13:00:18 regprod8 imapd[7851]: accepted connection
> Aug 28 13:00:31 regprod8 imapd[7851]: authdes_refresh: keyserv(1m) is
> unable to encrypt session key
> Aug 28 13:00:31 regprod8 imapd[7851]: Permissions on the password
> database may be too restrictive
> Aug 28 13:00:31 regprod8 imapd[7851]: pam_authenticate: error
> Authentication failed
> Aug 28 13:00:34 regprod8 master[7840]: process 7851 exited, status 0
>
> Here is the output from /local/bin/imtest -m login -a ben localhost
> C: C01 CAPABILITY
> S: * OK regprod8 Cyrus IMAP4 v2.0.16 server ready
> S: * CAPABILITY IMAP4 IMAP4rev1 ACL QUOTA LITERAL+ NAMESPACE UIDPLUS
> ID NO_ATOMIC_RENAME UNSELECT MULTIAPPEND SORT THREAD=ORDEREDSUBJECT
> THREAD=REFERENCES IDLE
> S: C01 OK Completed
> Password:
> C: L01 LOGIN ben {7}
> + go ahead
> C: <omitted>
> L01 NO Login failed: authentication failure
> Authentication failed. generic failure
> Security strength factor: 0
> select: Invalid argument
> failure: select
> Unfortunately I am new to both NIS+ and Cyrus IMAP so i may be missing
> something importent. I have a few ideas what might be wrong but if
> anyone out there has seen this problem let me know!
>
>
> Thanks a bunch!
> Benjamin
>
> Benjamin Bacon
> Senior Unix Administrator
> Omnipod
> 440 9th Ave. 8th Floor
> New York, NY 10001
> (212)404-3021
