[opensuse] cyrus imapd on OpenSuse 11.3 ignores sasl_pwcheck_method in /etc/imapd.conf
Hello, i just have setup a new system with OpenSUSE 11.3. As usual for authenticating imap users, i used the standard method saslauthd in /etc/imapd.conf. This worked for 11.2. But in 11.3, only the sasldb is asked for users, regardless of the settings in imapd.conf. I can even disable saslauthd or put something like "bla" in the pwcheck line and nothing changed: == Jul 31 22:36:52 daolin2 imap[10621]: SSL_accept() incomplete -> wait Jul 31 22:36:52 daolin2 imap[10621]: SSL_accept() succeeded -> done Jul 31 22:36:52 daolin2 imap[10621]: starttls: TLSv1 with cipher DHE-RSA-CAMELLIA256-SHA (256/256 bits new) no authentication Jul 31 22:36:52 daolin2 imap[10621]: badlogin: [192.168.9.108] CRAM-MD5 [SASL(-13): user not found: no secret in database] == This is from 11.2. Works as expected. Disabling saslauthd results in a failing auth, also if i put "bla" in the pwcheck line, something about an unknown module is logged. == Jul 31 22:27:28 daolin imap[24824]: SSL_accept() incomplete -> wait Jul 31 22:27:28 daolin imap[24824]: SSL_accept() succeeded -> done Jul 31 22:27:28 daolin imap[24824]: starttls: TLSv1 with cipher DHE-RSA CAMELLIA256-SHA (256/256 bits new) no authentication Jul 31 22:27:28 daolin saslauthd[7856]: rel_accept_lock : released accept lock Jul 31 22:27:28 daolin saslauthd[7859]: get_accept_lock : acquired accept lock Jul 31 22:27:28 daolin saslauthd[7856]: do_auth : auth success: [user=js] [service=imap] [realm=] [mech=pam] Jul 31 22:27:28 daolin imap[24824]: login: [192.168.9.108] js plain+TLS User logged in Jul 31 22:27:28 daolin saslauthd[7856]: do_request : response: OK Jul 31 22:27:29 daolin imap[24824]: open: user js opened INBOX.Drafts Jul 31 22:27:29 daolin imap[24824]: skiplist: /var/lib/imap/user/j/js.seen is already open 1 time, returning object Jul 31 22:27:29 daolin imap[24824]: seen_db: user js opened /var/lib/imap/user/j/js.seen J == before i post a bug in the opensuse bugzilla i want to ask if someone could confirm this behaviour? BTW: 11.2 is 32 bit, 11.3 is running on 64 bit server. Greetings, Jörg -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
On 07/31/2010 04:12 PM, Jörg Spilker wrote:
Hello,
i just have setup a new system with OpenSUSE 11.3. As usual for authenticating imap users, i used the standard method saslauthd in /etc/imapd.conf.
This worked for 11.2. But in 11.3, only the sasldb is asked for users, regardless of the settings in imapd.conf. I can even disable saslauthd or put something like "bla" in the pwcheck line and nothing changed:
== Jul 31 22:36:52 daolin2 imap[10621]: SSL_accept() incomplete -> wait Jul 31 22:36:52 daolin2 imap[10621]: SSL_accept() succeeded -> done Jul 31 22:36:52 daolin2 imap[10621]: starttls: TLSv1 with cipher DHE-RSA-CAMELLIA256-SHA (256/256 bits new) no authentication Jul 31 22:36:52 daolin2 imap[10621]: badlogin: [192.168.9.108] CRAM-MD5 [SASL(-13): user not found: no secret in database] ==
This is from 11.2. Works as expected. Disabling saslauthd results in a failing auth, also if i put "bla" in the pwcheck line, something about an unknown module is logged.
== Jul 31 22:27:28 daolin imap[24824]: SSL_accept() incomplete -> wait Jul 31 22:27:28 daolin imap[24824]: SSL_accept() succeeded -> done Jul 31 22:27:28 daolin imap[24824]: starttls: TLSv1 with cipher DHE-RSA CAMELLIA256-SHA (256/256 bits new) no authentication Jul 31 22:27:28 daolin saslauthd[7856]: rel_accept_lock : released accept lock Jul 31 22:27:28 daolin saslauthd[7859]: get_accept_lock : acquired accept lock Jul 31 22:27:28 daolin saslauthd[7856]: do_auth : auth success: [user=js] [service=imap] [realm=] [mech=pam] Jul 31 22:27:28 daolin imap[24824]: login: [192.168.9.108] js plain+TLS User logged in Jul 31 22:27:28 daolin saslauthd[7856]: do_request : response: OK Jul 31 22:27:29 daolin imap[24824]: open: user js opened INBOX.Drafts Jul 31 22:27:29 daolin imap[24824]: skiplist: /var/lib/imap/user/j/js.seen is already open 1 time, returning object Jul 31 22:27:29 daolin imap[24824]: seen_db: user js opened /var/lib/imap/user/j/js.seen J
==
before i post a bug in the opensuse bugzilla i want to ask if someone could confirm this behaviour?
BTW: 11.2 is 32 bit, 11.3 is running on 64 bit server.
Greetings, Jörg
I am using Cyrus Imapd on 11.3 fine (used to be 11.2, 11.0, 10.x in past lives) with sasl. Here are relevant lines from my config file(s): /etc/imapd.conf: allowplaintext: yes sasl_pwcheck_method: saslauthd sasl_mech_list: PLAIN /etc/sysconfig/saslauthd: SASLAUTHD_AUTHMECH=pam hth -- --Moby They that can give up essential liberty to obtain a little temporary safety deserve neither liberty nor safety. -- Benjamin Franklin -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
participants (2)
-
Jörg Spilker -
Moby