Thank you for your suggestions! I figured out what was the problem in my
case.
This was the OPTIONS setting in /etc/deafault/saslauthd. Since I run my
Postfix chrooted I had:
OPTIONS="-c -m /var/spool/postfix/var/run/saslauthd"
In order for cyradm to identify users using I saslauthd, I also added
Vladimir Vassiliev wrote, at 06/17/2009 09:02 AM:
>> Here is an extract from my imapd.conf file:
>>
>> admins: cyrus
>> imap_admins: cyrus
>> sasl_mech_list: LOGIN
>> sasl_minimum_layer: 1
>> sasl_maximum_layer: 256
>> sasl_pwcheck_method: saslauthd
>
> Maybe it's because of sasl_minimum_layer: 1
> Here is an extract from my imapd.conf file:
>
> admins: cyrus
> imap_admins: cyrus
> sasl_mech_list: LOGIN
> sasl_minimum_layer: 1
> sasl_maximum_layer: 256
> sasl_pwcheck_method: saslauthd
Maybe it's because of sasl_minimum_layer: 1
LOGIN gives you no security layer.
--
Vladimir Vassiliev
Hello,
I have a problem with Cyrus IMAP SASL authentication.
When I try to login to create Cyrus IMAP mailboxes, I see the following:
$ cyradm --user cyrus --auth login localhost
IMAP Password:
Login failed: generic failure at /usr/lib/perl5/Cyrus/IMAP/Admin.pm line 119
cyradm: cannot
Hi,
I noticed a strange effect when authenticating to Cyrus IMAP with DIGEST-MD5
in a virtdomain scenario. The mail client tried to log in with
"[EMAIL PROTECTED]", but this resulted in:
Jun 18 09:06:25 imapper cyrus/imap[1656]: accepted connection
Jun 18 09:06:25 imapper cyrus/imap[1656]: badl
Shawn O'Connor wrote:
All,
I've been having a heck of a time after moving our cyrus imap server.
For some reason, what had been working perfect is now no longer working.
Is there something for which I should be looking in perhaps hostnames,
DNS, IP addresses, or authentication realms that w
All,
I've been having a heck of a time after moving our cyrus imap server.
For some reason, what had been working perfect is now no longer working.
Is there something for which I should be looking in perhaps hostnames,
DNS, IP addresses, or authentication realms that would affect
authentica
On Sat, 29 Apr 2006, Xue, Chongjie "Jack" wrote:
Andy, According to your suggestion, my IMAP login is working now. I can
now connect imap clients through my frontend servers to access mail
boxes in the backend node.
However, I still _failed_ to deliver mail via Postfix LMTP through Cyrus
LMTPPr
Message-
From: Andrew Morgan [mailto:[EMAIL PROTECTED]
Sent: Saturday, April 29, 2006 8:30 PM
To: Xue, Chongjie "Jack"
Cc: info-cyrus@lists.andrew.cmu.edu
Subject: Re: Cyrus Murder SASL Authentication Problem
On Sat, 29 Apr 2006, Xue, Chongjie "Jack" wrote:
[snip]
> mai
tnamespace: false
berkeley_cachesize: 4096
mupdate_server: imapproxy
mupdate_username: admin
mupdate_authname: admin
mupdate_password: x
proxy_servers: cyrus_murder
I know Cyrus-SASL is causing the problem on the Proxy Level and I need
suggestions on how to setup SASL-Authentication for
wcheck_method: saslauthd
sasl_mech_list: plain
tls_cert_file: /usr/share/ssl/certs/cyrus-imapd.pem
tls_key_file: /usr/share/ssl/certs/cyrus-imapd.pem
tls_ca_file: /usr/share/ssl/certs/ca-bundle.crt
altnamespace: false
berkeley_cachesize: 4096
mupdate_server: imapproxy
mupdate_username: admin
mupdate_authname
You must use a secure connection when using PLAIN.
Try with a ' -t "" '.
(I assuming you have a certificate already installed)
-Patrick
On Dec 16, 2005, at 1:06 PM, [EMAIL PROTECTED] wrote:
Perhaps it could be usefull for someone...
If I try:
imtest -a cyrus -m plain -p imap localhost
I rec
Perhaps it could be usefull for someone...
If I try:
imtest -a cyrus -m plain -p imap localhost
I receive:
C: C01 CAPABILITY
S: * CAPABILITY IMAP4 IMAP4rev1 ACL QUOTA LITERAL+ MAILBOX-REFERRALS NAMESPACE
UIDPLUS ID NO_ATOMIC_RENAME UNSELECT CHILDREN MULTIAPPEND SORT
THREAD=ORDEREDSUBJECT THREAD
On 8/24/05, Igor Brezac <[EMAIL PROTECTED]> wrote:
>
> On Wed, 24 Aug 2005, Fred Blaise wrote:
>
> > On 8/24/05, Etienne Goyer <[EMAIL PROTECTED]> wrote:
> >> Fred Blaise wrote:
> >>> I am trying to fix the cyrus SASL authentication against openL
On Wed, 24 Aug 2005, Fred Blaise wrote:
On 8/24/05, Igor Brezac <[EMAIL PROTECTED]> wrote:
On Wed, 24 Aug 2005, Fred Blaise wrote:
On 8/24/05, Etienne Goyer <[EMAIL PROTECTED]> wrote:
Fred Blaise wrote:
I am trying to fix the cyrus SASL authentication against openLDAP, I gu
On 8/24/05, Igor Brezac <[EMAIL PROTECTED]> wrote:
>
> On Wed, 24 Aug 2005, Fred Blaise wrote:
>
> > On 8/24/05, Etienne Goyer <[EMAIL PROTECTED]> wrote:
> >> Fred Blaise wrote:
> >>> I am trying to fix the cyrus SASL authentication against openL
On Wed, 24 Aug 2005, Fred Blaise wrote:
On 8/24/05, Etienne Goyer <[EMAIL PROTECTED]> wrote:
Fred Blaise wrote:
I am trying to fix the cyrus SASL authentication against openLDAP, I guess.
When I run that, here is the error:
OX1:~# ldapsea
On 8/24/05, Etienne Goyer <[EMAIL PROTECTED]> wrote:
> Fred Blaise wrote:
> > I am trying to fix the cyrus SASL authentication against openLDAP, I guess.
> >
> > When I run that, here is the error:
> >
> > OX1:~#
Fred Blaise wrote:
I am running TLS.. an ldapsearch -ZZ works fine with the -x simple bind.
However, cyrus -> saslauthd (PAM) -> pam_ldap requires an SASL
authentication on the ldap server, am I right?
Not supposed to ... it use simple bind AFAIK.
Have you checked if testsaslauth
Fred Blaise wrote:
I am trying to fix the cyrus SASL authentication against openLDAP, I guess.
When I run that, here is the error:
OX1:~# ldapsearch -D "cn=manager,dc=ilr,dc=lu" -h ldapsmb-pdc.ilr.lu
-b "dc=ilr,dc=lu" "
Hello all
I am seeking help on sasl authentication against openldap.
Debian stable 3.1 on all servers.
On one server, I have slapd 2.2.23. It is used to authenticate samba
(works, same server), and a groupware on another server (works, 2nd server).
On the second server, I have a cyrus imap
it seems ok, does it working ?
Thomas
On Thu, 2005-08-04 at 23:44 +0200, Gregor Bruhin wrote:
> Hi,
>
> I'm just trying to configure cyrus to authenticate using a mysql db, is
> the following configuration correct ?
>
> sasl_auto_transition: no
> sasl_pwcheck_method: auxprop
> sasl_auxprop_plu
Hi,
I'm just trying to configure cyrus to authenticate using a mysql db, is
the following configuration correct ?
sasl_auto_transition: no
sasl_pwcheck_method: auxprop
sasl_auxprop_plugin: sql
sasl_sql_engine: mysql
sasl_mysql_password_format: crypt*
sasl_mysql_hostnames: 10.0.0.5
sasl_mysql_u
hursday, December 16, 2004 11:06 AM
To: Wilson, Dave
Cc: [EMAIL PROTECTED]
Subject: Re: Cyrus sasl authentication problem
Wilson, Dave wrote:
./saslauthd -a getpwent -d
saslauthd[6583] :main: num_procs : 5
saslauthd[6583] :main: mech_option: NULL
saslauthd[6583] :main
cember 16, 2004 10:45 AM
> To: Wilson, Dave
> Cc: [EMAIL PROTECTED]
> Subject: Re: Cyrus sasl authentication problem
>
>
> Wilson, Dave wrote:
>
> > This didn't work either:
>
> What does the SASL debug log look like?
>
>
> >
> > ./imt
y have passwords in
> /etc/passwd (as
> opposed to /etc/shadow)?
>
>
> >
> >
> >>-----Original Message-
> >>From: Ken Murchison [mailto:[EMAIL PROTECTED]
> >>Sent: Thursday, December 16, 2004 10:45 AM
> >>To: Wilson, Dave
> >>Cc
that you actually have passwords in /etc/passwd (as
opposed to /etc/shadow)?
-Original Message-
From: Ken Murchison [mailto:[EMAIL PROTECTED]
Sent: Thursday, December 16, 2004 10:45 AM
To: Wilson, Dave
Cc: [EMAIL PROTECTED]
Subject: Re: Cyrus sasl authentication problem
Wilson, Dave wrote
Dave
-Original Message-
From: Ken Murchison [mailto:[EMAIL PROTECTED]
Sent: Thursday, December 16, 2004 9:53 AM
To: Wilson, Dave
Cc: '[EMAIL PROTECTED]'
Subject: Re: Cyrus sasl authentication problem
Wilson, Dave wrote:
I'm using Cyrus with sasl, using auth method getpwent:
./saslau
son [mailto:[EMAIL PROTECTED]
> Sent: Thursday, December 16, 2004 9:53 AM
> To: Wilson, Dave
> Cc: '[EMAIL PROTECTED]'
> Subject: Re: Cyrus sasl authentication problem
>
>
> Wilson, Dave wrote:
>
> > I'm using Cyrus with sasl, using auth method getpwent:
Wilson, Dave wrote:
I'm using Cyrus with sasl, using auth method getpwent:
./saslauthd -d -a getpwent
I then use imtest:
./imtest -m login -u pcs localhost
This should be:
./imtest -m login -a pcs localhost
S: * OK pcs-pfni-01 Cyrus IMAP4 v2.2.10 server ready
C: C01 CAPABILITY
S: * CAPABILITY IMAP
I'm using Cyrus with sasl, using auth method getpwent:
./saslauthd -d -a getpwent
I then use imtest:
./imtest -m login -u pcs localhost
S: * OK pcs-pfni-01 Cyrus IMAP4 v2.2.10 server ready
C: C01 CAPABILITY
S: * CAPABILITY IMAP4 IMAP4rev1 ACL QUOTA LITERAL+ MAILBOX-REFERRALS
NAMESPACE UIDPLUS ID
On Tue, 7 Dec 2004, Derrick J Brashear wrote:
But it looks like I also miss the scope; sasl_check_pass canonifies (which
means auxprop_verify_password canonifies twice from sasl_check_pass, and from
sasl_user_exists is the only verify_password backend which canonifies...
sigh)
anyway, i think t
Robert Lubbers wrote:
I am still working on getting this IMAP server authenticating against my
Windows domain PDC, and I did manage to get the POP server
authenticating, which is a giant step forward. But both the IMAP
component and the cyradm component are complaining: They both give me
the
On Tue, 7 Dec 2004, Igor Brezac wrote:
There was a long discussion about this on cyrus-sasl and cyrus-devel lists
awhile back:
http://asg.web.cmu.edu/archive/message.php?mailbox=archive.cyrus-sasl&searchterm=saslpasswd2%20and%20virtdomains&msg=3683
this isn't quite the same thing.
further investi
On Tue, 7 Dec 2004, Derrick J Brashear wrote:
The commit log on 1.398.2.81 is "don't canonify a userid twice"
Derrick,
There was a long discussion about this on cyrus-sasl and cyrus-devel lists
awhile back:
http://asg.web.cmu.edu/archive/message.php?mailbox=archive.cyrus-sasl&searchterm=saslpass
But it looks like I also miss the scope; sasl_check_pass canonifies (which
means auxprop_verify_password canonifies twice from sasl_check_pass, and
from sasl_user_exists is the only verify_password backend which
canonifies... sigh)
anyway, i think there is something more subtle doing on here ma
The commit log on 1.398.2.81 is "don't canonify a userid twice"
Derrick,
There was a long discussion about this on cyrus-sasl and cyrus-devel lists
awhile back:
http://asg.web.cmu.edu/archive/message.php?mailbox=archive.cyrus-sasl&searchterm=saslpasswd2%20and%20virtdomains&msg=3683
this isn't qui
On Tue, 7 Dec 2004, Derrick J Brashear wrote:
On Mon, 6 Dec 2004, Robert Lubbers wrote:
* OK cyrus.domain.com Cyrus IMAP4 v2.2.9 server ready
. login cyrususer secret
. NO Login failed: can't request info until later in exchange
. logout
* BYE LOGOUT received
. OK Completed
Ken pointed something o
On Mon, 6 Dec 2004, Robert Lubbers wrote:
* OK cyrus.domain.com Cyrus IMAP4 v2.2.9 server ready
. login cyrususer secret
. NO Login failed: can't request info until later in exchange
. logout
* BYE LOGOUT received
. OK Completed
Ken pointed something out to me about this yesterday, notably, that i
I am still working on getting this IMAP server authenticating against my
Windows domain PDC, and I did manage to get the POP server
authenticating, which is a giant step forward. But both the IMAP
component and the cyradm component are complaining: They both give me
the same error message:
c
try this
env PERL5LIB=/usr/lib/perl5/site_perl/5.8.3/i386-linux-thread-multi
cyradm --user cyrus --auth PLAIN localhost
HTH,
---lem
UNIT-ISO wrote:
I'm trying to run cyradmin:
$ su - cyrus
$ cyradm localhost
IMAP Password:
Login failed: no mechanism available at
/usr/lib/perl5/
I'm trying to run cyradmin:
$ su - cyrus
$ cyradm localhost
IMAP Password:
Login failed: no mechanism available at
/usr/lib/perl5/site_perl/5.8.3/i386-linux-thread-multi/Cyrus/IMAP/Admin.pm
line 118
cyradm: cannot authenticate to server with as cyrus
$ exit
then i
$ tail /var/log/messages
Nevermind, I solved that problem!
I found the ansver in mailing list archives:
I needed to have in my /etc/pam.conf:
imapaccountrequiredpam_pgsql.so try_first_pass
sieve accountrequiredpam_pgsql.so try_first_pass
Thanx everybody
Dim
I've setup PostgreSQl as a container for email accounts and installed and
configured pam_pgsql
But when I'm trying to login as a test.user I'm getting these errors:
in var/log/auth.log
Mar 13 09:35:05 intellinet saslauthd[77076]: attempting to authenticate:
test.user
Mar 13 09:35:05 intellinet s
On Sun, 28 Apr 2002, Kaj J. Niemi wrote:
> I'd like to take a look at the code, if it's generally available. Thanks :)
>
You can find the patch and brief documentation at
http://www.ypass.net/cyrus/.
-Igor
On Sat, 27 Apr 2002, Igor Brezac wrote:
> On Sat, 27 Apr 2002, Lawrence Greenfield wrote:
> I wrote an auth_ldap module for saslauthd. It supports persistent ldap
> connections and it is fairly configurable via config file. It will only
> compile against openldap 2. If you'd like to take a look
On Sat, 27 Apr 2002, Lawrence Greenfield wrote:
> The only real documentation will be found in imapd's "lib/auth.h"
> file. The ptloader process is in ptclient/; the client-side is in
> lib/auth_krbpts.c.
>
> In general we're not real happy with the ptloader code so rewriting it
> from scratch
Date: Wed, 10 Apr 2002 15:33:53 -0400 (EDT)
From: Igor Brezac <[EMAIL PROTECTED]>
On Wed, 10 Apr 2002, Lawrence Greenfield wrote:
> We currently use the PTS database from AFS. It would be cool to write
> an auth_ldap backend for Cyrus, but we haven't gotten the time to do
> it
On Wed, 10 Apr 2002, Lawrence Greenfield wrote:
> We currently use the PTS database from AFS. It would be cool to write
> an auth_ldap backend for Cyrus, but we haven't gotten the time to do
> it. (A seperate process like ptloader is probably the way to go.)
Do you have any documenation? I'd
From: "Tim Pushor" <[EMAIL PROTECTED]>
Date: Wed, 10 Apr 2002 10:35:39 -0600
While we're on the subject of SASL and authorization/authentication, if
Cyrus IMAP has abstracted authentication through SASL, why is the group ACL
still handled locally (in Cyrus) via UNIX groups or Kerbe
While we're on the subject of SASL and authorization/authentication, if
Cyrus IMAP has abstracted authentication through SASL, why is the group ACL
still handled locally (in Cyrus) via UNIX groups or Kerberos?
I would really like to base group ACL's on the same scheme that
authentication is using
Hi,
I am having a couple of problems with SASL authentication. First of all,
the authentication mechanisms CRAM-MD5 DIGECT-MD5 done't appear as being
supported, even though I have used the the sample programs that come
with SASL those appear to work.
Also, I have set the pwcheck_meth
Hi all,
I want to config my SASL authentication user via Oracle, anyone have
information about it? Please give me.
thanks
Hi all,
I want to config my SASL authentication user via Oracle,
anyone have information about it? Please give me.
thanks
I have been trying to install cyrus on Solaris 2.7 (with PAM),
So far I have successfully started up the imap / pop3 servers via master,
my IMAP client MS Outlook! can successful login in.
Feb 22 20:42:04 mail imapd[6581]: login: WJSPC[10.0.1.2] wshenfi
plaintext
But I can not get cyradm
Which is a bug and hopefully fixed in cvs (finally) after a long long time.
Larry
--On Wednesday, December 06, 2000 09:20:58 AM -0600 "Scot W. Hetzel"
<[EMAIL PROTECTED]> wrote:
> From: "Michael Fair" <[EMAIL PROTECTED]>
>> > Have you checked the following files for proper configuration entrie
Hey guys,
I was wondering if anyone knew of a tool or method for migrating Cyrus-imap
from a freebsd machine to a linux 7.0 machine. We are using postfix instead
of sendmail. I want to try to preserve the emails and mailbox structure as
much as possible. Thanks in advance.
James
> If the test fails, a more specific error message is written through
> syslog to the server log.
What did the syslog have to say about it?
-- Michael --
I have cyrus-imapd 1.6.24 and cyrus-sasl 1.5.24 installed on a Solaris 8
intel box but not configured correctly.
I have installed these sasl libraries:
bash-2.04$ ls /usr/local/lib/sasl
Cyrus.conf libdigestmd5.la libkerberos4.so.1
libanonymous.a libdigestmd5.so
From: "Michael Fair" <[EMAIL PROTECTED]>
> > Have you checked the following files for proper configuration entries:
> >
> > 1) Cyrus.conf (on RH it is in /usr/lib/sasl).
>
> I don't believe Cyrus uses a .conf file in usr/lib/sasl.
> It was my understanding that what would ordinarily
> go into Cyr
>>> Have you checked the following files for proper configuration entries:
>>>
>>> 1) Cyrus.conf (on RH it is in /usr/lib/sasl).
>>
>> I don't believe Cyrus uses a .conf file in usr/lib/sasl.
>> It was my understanding that what would ordinarily
>> go into Cyrus.conf file in /usr/lib/sasl actuall
PROTECTED]
Subject: Re: Cyrus/SASL Authentication
> Have you checked the following files for proper configuration entries:
>
> 1) Cyrus.conf (on RH it is in /usr/lib/sasl).
I don't believe Cyrus uses a .conf file in usr/lib/sasl.
It was my understanding that what would ordi
--Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of Tim Evans
> Sent: Monday, December 04, 2000 9:28 PM
> To: [EMAIL PROTECTED]
> Subject: Cyrus/SASL Authentication
>
>
> I am not sure I understand how this works. I compiled Cyrus imapd 1.6.24
> Users are signing up for a PHP/MySQL portal that runs on our system, with
> the ability to set their own passwords. We also offer IMP-based e-mail
that
> uses Cyrus impad. I can cut and paste encrypted password from the
underlying
> MySQL database for the portal into /etc/shadow, but don't kno
.
--Moby.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Tim Evans
Sent: Monday, December 04, 2000 9:28 PM
To: [EMAIL PROTECTED]
Subject: Cyrus/SASL Authentication
I am not sure I understand how this works. I compiled Cyrus imapd 1.6.24
with --with-auth=unix
I am not sure I understand how this works. I compiled Cyrus imapd 1.6.24
with --with-auth=unix, and SASL 1.5.24 with various different methods of
authentication, passwd, shadow, plain. System is a Cobalt RAQ4i (essentially,
Red Hat 6.0).
Imap users cannot be authenticated under any of these con
66 matches
Mail list logo
