In your imapd.conf pwcheck_method: auxprop is supposed to be sasl_pwcheck_method: auxprop.. In Cyrus' imapd.conf file you need to prefix ALL sasl parameters with sasl. You don't do this with the separate config files in /usr/lib/sasl2 (ie for smtpd).
On Fri, 2004-02-20 at 04:36, Khalid Mehmood wrote: > >From the last one week I have been trying setup this > thing, but nothing seems to be working properly. This > is what I'm trying to setup: > > RH 9 > cyrus-imapd-2.2.3-4 rpm > cyrus-sasl-2.1.17-2 rpm > postfix-2.0.18-1.mysql.rh9 rpm > web-cyradm > mysql-3.23.58-1.9 rpm > > ############## > imapd.conf > ############# > postmaster: postmaster > configdirectory: /var/lib/imap > partition-default: /var/spool/imap > admins: cyrus > virtdomains: yes > defaultdomain: xxx.com > allowanonymouslogin: no > autocreateinboxfolders: Sent | Drafts | Templates | > Trash > createonlogin: yes > allowplaintext: yes > servername: xxx.xxx.com > autocreatequota: 10000 > reject8bit: no > quotawarn: 90 > timeout: 30 > poptimeout: 10 > dracinterval: 0 > drachost: localhost > sievedir: /var/lib/imap/sieve > sendmail: /usr/sbin/sendmail > hashimapspool: true > #loginrealms: xxx.com.xx > sasl_pwcheck_method: auxprop > sasl_mech_list: login plain > sasl_sql_engine: mysql > sasl_auxprop_plugin: sql sasldb > sasl_db_path: /etc/sasldb2 > sasl_sql_user: mail > sasl_sql_passwd: xxx > sasl_sql_hostnames: localhost:3306 > sasl_sql_database: mail > sasl_sql_select: SELECT password FROM accountuser > WHERE username = '%u' > sasl_sql_verbose: yes > sieve_maxscriptsize: 32 > sieve_maxscripts: 5 > #unixhierarchysep: yes > tls_cert_file: /usr/share/ssl/certs/cyrus-imapd.pem > tls_key_file: /usr/share/ssl/certs/cyrus-imapd.pem > ############################# > smtpd.conf > ############################# > pwcheck_method: auxprop > sasl_mech_list: login plain > sasl_sql_engine: mysql > sasl_auxprop_plugin: sql sasldb > sasl_db_path: /etc/sasldb2 > sasl_sql_user: mail > sasl_sql_passwd: xxx > sasl_sql_hostnames: localhost:3306 > sasl_sql_database: mail > sasl_sql_select: SELECT password FROM accountuser > WHERE username = '%u' > sasl_sql_verbose: yes > ################################### > /etc/sysconfig/saslauthd > ################################### > MECH="pam -n 0" > #SASL_AUTH_MECH="pam" > ########################### > /var/log/maillog > ############################# > Feb 20 14:33:02 ns imap[25139]: accepted connection > Feb 20 14:33:02 ns imap[25139]: badlogin: xxx.xxx.com > [127.0.0.1] plaintext cyrus SASL(-13): authentication > failure: checkpass failed > #################################### > /usr/lib/sasl2 contents > ##################################### > libanonymous.a libdigestmd5.la > liblogin.so libsasldb.la > libanonymous.la libdigestmd5.so > liblogin.so.2 libsasldb.so > libanonymous.so libdigestmd5.so.2 > liblogin.so.2.0.17 libsasldb.so.2 > libanonymous.so.2 libdigestmd5.so.2.0.17 > libntlm.a libsasldb.so.2.0.17 > libanonymous.so.2.0.17 libgssapiv2.a > libotp.a libsql.a > libcrammd5.a libgssapiv2.la > libplain.a libsql.la > libcrammd5.la libgssapiv2.so > libplain.la libsql.so.2 > libcrammd5.so libgssapiv2.so.2 > libplain.so libsql.so.2.0.17 > libcrammd5.so.2 libgssapiv2.so.2.0.17 > libplain.so.2 smtpd.conf > libcrammd5.so.2.0.17 liblogin.a > libplain.so.2.0.17 > libdigestmd5.a liblogin.la > libsasldb.a > ############################################## > /usr/sbin/saslauthd -v results > ############################################### > saslauthd 2.1.17 > authentication mechanisms: getpwent kerberos5 pam > rimap shadow ldap > ################################################### > > Looks like sasl auxprop function is the issue here, > somehow cyrus-imapd can't talk to mysql. I have tried > different combinations, but couldn't get this thing > up. Web-cyradm works fine if I add > sasl_pwcheck_method: auxprop saslauthd, but if I > remove saslauthd I can't authenticate to imapd server. > I did saslpasswd2 -c cyrus, but still can't > authenticate to server if I remove the saslauthd from > pwcheck_method. The question is why imapd can't use > auxprop sql function for authentication or if there is > something else missing in my configurations? Any help > would be greatly appreciated. > > Thanks > > Khan > > > __________________________________ > Do you Yahoo!? > Yahoo! Mail SpamGuard - Read only the mail you want. > http://antispam.yahoo.com/tools > --- > Home Page: http://asg.web.cmu.edu/cyrus > Wiki/FAQ: http://cyruswiki.andrew.cmu.edu > List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html -- Edward Rudd <[EMAIL PROTECTED]> Website http://outoforder.cc/ --- Home Page: http://asg.web.cmu.edu/cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
