Yes. Following are the versions of software installed (patched with all the applicable
patches including the one for crypt support):

cyrus-imapd-2.2.12_2
cyrus-sasl-2.1.21_2
mysql-* 5.0.18
postfix-2.2.8_2 ,1
pam_mysql-0.6.2

cyrus-sasl2 is built with the following options:
./configure --sysconfdir=/usr/local/etc --with-plugindir=/usr/local/lib/sasl2 --with-dbpath=/usr/local/etc/sasldb2 --includedir=/usr/local/include --mandir=/usr/local/man --enable-static --with-saslauthd=/var/run/saslauthd --enable-cram --enable-digest --enable-plain --disable-anon --with-mysql=/usr/local/lib --with-dblib=ndbm --with-mysql=/usr/local --without-pgsql --without-sqlite --enable-sql --enable-login --enable-ntlm --enable-gssapi --disable-krb4 --with-openssl=yes --prefix=/usr/local i386-portbld-freebsd6.0

cyrus-imapd is built with the configuration:
./configure --sysconfdir=/usr/local/etc --with-cyrus-prefix=/usr/local/cyrus --with-cyrus-user=cyrus --with-cyrus-group=cyrus --with-sasl=/usr/local --with-bdb-libdir=/usr/local/lib --with-com_err --with-openssl=/usr --with-perl=/usr/local/bin/perl5.8.7 --with-bdb-incdir=/usr/local/include/db43 --with-bdb= db-4.3 --enable-nntp --enable-murder --with-idle=poll --enable-listext --enable-netscapehack --with-drac=/usr/local --with-snmp=/usr/local --with-auth=pts --with-pts=ldap --with-ldap=/usr/local --prefix=/usr/local i386-portbld-freebsd6.0

pam-mysql is configured with:
./configure --with-mysql=/usr/local --with-cyrus-sasl2=/usr/local --with-pam-mods-dir=/usr/lib

Thanks,
- Tushar

On 1/30/06, Timo Schoeler <[EMAIL PROTECTED]> wrote:
Thus Tux <[EMAIL PROTECTED]> spake on Mon, 30 Jan 2006 10:20:38 -0700:

sorry for top-posting, but this is really short: does FreeBSDs ports
have the mechs on its own (as NetBSDs pkgsrc has -- there are cy2-*
packages in /security)...? if so, install them, then it should run.

best,

timo

> Hello list,
>
> I used the FreeBSD virtual mail HOWTO at
> http://www.wistful.net/wiki/Ed%27s_FreeBSD_Virtual_Mail_How-To
> to configure cyrus-imapd 2.2.12 with cyrus-sasl2 and MySQL v5.
>
> Although, everything else seems to be in place, "cyradm" does
> not seem to use SASL2 to authenticate. I keep getting the
> following error in auth.log whenever I try to do
> "cyradm --user cyrus localhost":
>
> ======
> Jan 30 08:47:25 mx1 perl: No worthy mechs found
> Jan 30 08:47:32 mx1 imap[92434]: bad userid authenticated
> ======
>
> while on the Cyradm console, I get:
>
> ======
> [EMAIL PROTECTED] cyradm --user cyrus localhost
> IMAP Password:
>               Invalid user at
> /usr/local/lib/perl5/site_perl/5.8.7/mach/Cyrus/IMAP/Admin.pm line 118
> cyradm: cannot authenticate to server with  as cyrus
>                                       ^^^^^^^
> ======
>
> As you can see, SASL2 does not recognize the authentication
> mechanism.
>
> I read in the SASL2 documentation and also found looking
> through the code that if I am using PLAIN authentication
> mechanism then I need to use TLS. I have followed all your
> instructions about TLS setup but no luck.
>
> Here is a portion of my /usr/local/etc/imapd.conf
>
> ======
> sasl_pwcheck_method: auxprop
> sasl_auxprop_plugin: sql
> sasl_sql_engine: mysql
> sasl_sql_user: postfix
> sasl_sql_passwd: postfix
> sasl_sql_database: postfix
> sasl_sql_hostnames: mx1.wearab.net
> sasl_sql_select: SELECT password FROM mailbox WHERE username='[EMAIL PROTECTED]'
> AND active='1'
> sasl_sql_verbose: yes
> sasl_mech_list: plain login
> sasl_password_format: crypt
> sasl_log_level: 6
>
> ======
>
> And this one from /usr/local/lib/sasl2/smtpd.conf
>
> ======
> pwcheck_method: auxprop
> auxprop_plugin: sql
> sql_user: postfix
> sql_passwd: postfix
> sql_hostnames: localhost mx1.wearab.net
> sql_database: postfix
> sql_engine: mysql
> sql_select: SELECT password FROM mailbox WHERE username = '[EMAIL PROTECTED]' and
> active = '1'
> sql_verbose: yes
> mech_list: plain
> log_level: 6
> minimum_layer: 0
> auto_transition: no
> password_format: crypt
> ======
>
>
> This is how /usr/local/etc/pam.d/imap looks like:
>
> ======
> auth        sufficient  /usr/local/lib/pam_mysql.so     user=postfix
> passwd=postfix host=localhost db=postfix table=mailbox
> usercolumn=username passwdcolumn=password crypt=1 logtable=log
> logmsgcolumn=msg logusercolumn=user loghostcolumn=host
> logpidcolumn=pid logtimecolumn=time sqllog=1
>
> # account
> account     required    /usr/local/lib/pam_mysql.so user=postfix
> passwd=postfix host=localhost db=postfix table=mailbox
> usercolumn=username passwdcolumn=password crypt=1 logtable=log
> logmsgcolumn=msg logusercolumn=user loghostcolumn=host
> logpidcolumn=pid logtimecolumn=time sqllog=1
> ======
>
>
> Have you seen these "No worthy mechs" errors before? Any advice will
> be valuable.
>
> Thanks in anticipation.
> - Tushar
>


--
Timo Schoeler | http://riscworks.net/~tis | [EMAIL PROTECTED]
RISCworks -- Perfection is a powerful message
ISP | POWER & PowerPC afficinados | Networking, Security, BSD services
GPG Key fingerprint = B5F6 68A4 EC45 C309 6770  38C4 50E8 2740 9E0C F20A

There are 10 types of people in the world. Those who understand binary
and those who don't.



--
Tushar Gohad
MontaVista Software, Inc
----
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Reply via email to