The service name for Sieve was changed from "imap" to "sieve". Copy
your "imap" PAM config to "sieve" and you should be fine.
> David Chait wrote:
>
> Greetings all,
> I'm in the process of upgrading our current cyrus install and so
> far it has gone will with the one caviat that I cannot for some reason
> get Sieve to authenticate users. The IMAP daemon however works fine.
> As you can see below, I can see auth mechanisms:
>
> [root@bonmail adm]# telnet localhost 2000
> Trying 127.0.0.1...
> Connected to bonmail.stanford.edu (127.0.0.1).
> Escape character is '^]'.
> "IMPLEMENTATION" "Cyrus timsieved v2.1.11"
> "SASL" "PLAIN"
> "SIEVE" "fileinto reject envelope vacation imapflags notify subaddress
> relational regex"
> OK
>
> However whenever I attempt to authenticate via the test utility, I get
> the following:
>
> [root@bonmail adm]# sivtest -u dchait localhost
> S: "IMPLEMENTATION" "Cyrus timsieved v2.1.11"
> S: "SASL" "PLAIN"
> S: "SIEVE" "fileinto reject envelope vacation imapflags notify
> subaddress relational regex"
> S: OK
> Please enter your password:
> C: AUTHENTICATE "PLAIN" {28+}
> ZGNoYWl0AHJvb3QATTExa3kjV0B5
> S: NO "Authentication Error"
> Authentication failed. generic failure
> Security strength factor: 0
>
> The logs show a PAM error, however my PAM file hasn't changed between
> installs:
>
> Dec 27 01:17:28 bonmail saslauthd[19310]: DEBUG: auth_pam:
> pam_authenticate failed: Authentication failure
> Dec 27 01:17:28 bonmail saslauthd[19310]: AUTHFAIL: user=dchait
> service=sieve realm= [PAM auth error]
> Dec 27 01:17:28 bonmail timsieved[19607]: Password verification failed
>
> imap file in pam.d shows:
>
> auth required pam_nologin.so
> auth required pam_stack.so service=system-auth
> account required pam_stack.so service=system-auth
> session required pam_stack.so service=system-auth
>
> My cyrus.conf file shows:
>
> # standard standalone server implementation
>
> START {
> # do not delete this entry!
> recover cmd="ctl_cyrusdb -r"
>
> # this is only necessary if using idled for IMAP IDLE
> # idled cmd="idled"
> }
>
> # UNIX sockets start with a slash and are put into /var/imap/socket
> SERVICES {
> # add or remove based on preferences
> imap cmd="imapd" listen="imap" prefork=0
> imaps cmd="imapd -s" listen="imaps" prefork=0
> # pop3 cmd="pop3d" listen="pop3" prefork=0
> # pop3s cmd="pop3d -s" listen="pop3s" prefork=0
> sieve cmd="timsieved" listen="sieve" prefork=0
>
> # at least one LMTP is required for delivery
> # lmtp cmd="lmtpd" listen="lmtp" prefork=0
> lmtpunix cmd="lmtpd" listen="/var/imap/socket/lmtp" prefork=0
>
> # this is only necessary if using notifications
> # notify cmd="notifyd" listen="/var/imap/socket/notify"
> proto="udp" prefork=1
> }
>
> EVENTS {
> # this is required
> checkpoint cmd="ctl_cyrusdb -c" period=30
>
> # this is only necessary if using duplicate delivery suppression
> delprune cmd="ctl_deliver -E 3" period=1440
>
> # this is only necessary if caching TLS sessions
> tlsprune cmd="tls_prune" period=1440
> }
>
> This is on a Red Hat 7.3 based Dell server Runing the latest stable
> versions of both sasl and cyrus imap. Any ideas?
>
> Thanks,
> David
--
Kenneth Murchison Oceana Matrix Ltd.
Software Engineer 21 Princeton Place
716-662-8973 x26 Orchard Park, NY 14127
--PGP Public Key-- http://www.oceana.com/~ken/ksm.pgp
