Nils Vogels wrote:

Hi There,

I am working on migrating my setup from unix uid authentication using saslauthd and getpwent method to MySQL setup, using auxprop.

My current imapd.conf on this lists the following relevant entries:

sasl_minimum_layer: 0
sasl_pwcheck_method: saslauthd auxprop
sasl_auxprop_plugin: sql
sql_user: user
sql_passwd: s3cr3t
sql_hostnames: localhost
sql_database: cyrus
sql_statement: select clearpw from credentials where user='%u'
sql_verbose: yes

All of the sql options need to have the "sasl_" prefix, just like all SASL option put in imapd.conf.




However, this gives me a rather odd message in my syslog when I try to authenticate with a user that exists only in the MySQL db, and not as a unix uid:


Apr 5 00:15:21 imhotep imap[15956]: accepted connection
Apr 5 00:15:29 imhotep imap[15956]: could not find auxprop plugin, was searching for 'sql'
Apr 5 00:15:29 imhotep imap[15956]: could not find auxprop plugin, was searching for 'sql'

Sounds like the plugins aren't being found. Are they in some non-standard location (other than /usr/lib/sasl2)?



Apr 5 00:15:29 imhotep saslauthd[56765]: do_auth : auth failure: [user=small] [service=imap] [realm=] [mech=getpwent] [reason=Unknown]
Apr 5 00:15:29 imhotep imap[15956]: could not find auxprop plugin, was searching for 'sql'
Apr 5 00:15:29 imhotep imap[15956]: could not find auxprop plugin, was searching for 'sql'
Apr 5 00:15:29 imhotep imap[15956]: badlogin: lists.on-drugz.net [192.168.2.5] plaintext small SASL(-13): user not found: checkpass failed


This would seem to imply, that auxprop is not configured for usage with the sql plugin, however, Postfix is working fine with this smtpd.conf:

pwcheck_method: saslauthd auxprop
mech_list: plain login cram-md5 digest-md5
auxprop_plugin: sql
auth_mech: login
sql_engine: mysql
sql_user: user
sql_passwd: s3cr3t
sql_hostnames: localhost
sql_database: cyrus
sql_statement: SELECT clearpw FROM credentials WHERE user = '%u'

I am rather stumped, can someone please give me a reason why this setup would not work for Cyrus, but would work for Postfix ?

Gr,

Nils.



--
Kenneth Murchison     Oceana Matrix Ltd.
Software Engineer     21 Princeton Place
716-662-8973 x26      Orchard Park, NY 14127
--PGP Public Key--    http://www.oceana.com/~ken/ksm.pgp

---
Home Page: http://asg.web.cmu.edu/cyrus
Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Reply via email to