I have compiled up the Cyrus IMAP server (2.0.9) on Tru64 5.0a. It is
using the SASL libraries (1.5.24) for authentication. The IMAP capability
command produces the following:
* CAPABILITY IMAP4 IMAP4rev1 ACL QUOTA LITERAL+ NAMESPACE UIDPLUS ID
NO_ATOMIC_RENAME UNSELECT MULTIAPPEND SORT THREAD=ORDEREDSUBJECT
THREAD=REFERENCES IDLE AUTH=ANONYMOUS AUTH=DIGEST-MD5 AUTH=CRAM-MD5
The only authentication method that has worked so far is ANONYMOUS. All
of the other methods give me "NO authentication failure" followed by a
"Authentication failed. generic failure".
I have a /etc/sasldb file, owned by cyrus, and populated using saslpasswd
(with "root" and "sadkins" accounts). The sasldblistusers commands produce
the following output:
user: root realm: cats.ohiou.edu mech: DIGEST-MD5
user: sadkins realm: cats.ohiou.edu mech: PLAIN
user: sadkins realm: cats.ohiou.edu mech: CRAM-MD5
user: root realm: cats.ohiou.edu mech: PLAIN
user: root realm: cats.ohiou.edu mech: CRAM-MD5
user: sadkins realm: cats.ohiou.edu mech: DIGEST-MD5
The /usr/lib/sasl/Cyrus.conf file lists the following:
pwcheck_method: sia
The /etc/imapd.conf also lists a line "sasl_pwcheck_method: sia". However,
using imtest or telnetting to the port directly, I choose other auth mechs
as well, and they all fail (except anonymous).
I suspected the SASL library was at fault, but here is the clincher. I
also compiled up the latest IMSP server, which uses the same libraries. It
uses the "sia" mech as well (which is the password file lookup mechanism
for Tru64). I can authenticate just fine on the IMSP server. I even had
suspected at one time or another that maybe SASL authentication was failing
on the IMSP server and that it was defaulting to a local authentication
scheme, but after debugging the server a little bit, I proved that IMSP was
indeed using SASL for its authentication, and that it was authenticating
successfully (where-as, the IMAP server is failing).
So, does anyone have any ideas what could be wrong here? I am at a total
loss here...
Thanks,
Scott
--
+-=-=-=-=-=-=-=-=-=+=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=+=-=-=-=-=-=-=-=-+
Scott W. Adkins http://www.cns.ohiou.edu/~sadkins/
UNIX Systems Engineer mailto:adkinss_at_ohio.edu
ICQ 7626282 Work (740)593-9478 Fax (740)593-1944
+-=-=-=-=-=-=-=-=-=+=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=+=-=-=-=-=-=-=-=-+
CNS, HDL Center, Suite 301, Ohio University, Athens, OH 45701-2979
Received on Thu Feb 08 2001 - 15:33:24 NZDT