On Thu, 19 Jan 2006, Dmitry Melekhov wrote:

Patrick H Radtke wrote:



So the connection works, but there is probably a problem with the authentication.

What authentication mechanism are you useing for sync_client?

sync_server should advertise the available SASL mechanisms.

If you are using PLAIN then you need to have a certificate,
so STARTTLS will work prior to sending a password.


here's what one of our replica's advertises

telnet liverwurst2 2005
Trying 128.59.33.151...
Connected to liverwurst2.cc.columbia.edu (128.59.33.151).
Escape character is '^]'.
* SASL GSSAPI
* STARTTLS
* OK liverwurst2.cc.columbia.edu Cyrus sync server v2.3-alpha


Sorry, I don't understand completely.
I have certificate and use it for imaps.
And, yes, I use plain.
What I need to write in imap.conf?


I don't think your replica machine ('backup')  is configured correctly

On your replica do you have lines like:

tls_cert_file: /var/cyrus/mail.pem
tls_key_file: /var/cyrus/mail.pem
tls_ca_file: /var/cyrus/GeoTrustCA.pem
sasl_mech_list: PLAIN


Can you connect to the replica on the imap port with STARTTLS and PLAIN?
Try using imtest to find out.

imtest -u cyrus -a cyrus -t "" -m PLAIN liverwurst2


-Patrick




----
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Reply via email to