You don't have a TLS problem anymore, you have a SASL problem. Are you trying to use DIGEST-MD5? What happens if you try:

imtest -m plain -u cyrus -a cyrus -s localhost

Mike Allen wrote:

Ken:

I hope the attached file helps us solve the problem which started
this thread.

Thanks so much for your help.

Mike Allen


------------------------------------------------------------------------


[mail2] ~> imtest -u cyrus -a cyrus -s localhost
verify error:num=18:self signed certificate
TLS connection established: TLSv1 with cipher AES256-SHA (256/256 bits)
S: * OK mail2.familyradio.org Cyrus IMAP4 v2.1.12 server ready
C: C01 CAPABILITY
S: * CAPABILITY IMAP4 IMAP4rev1 ACL QUOTA LITERAL+ MAILBOX-REFERRALS NAMESPACE UIDPLUS 
ID NO_ATOMIC_RENAME UNSELECT CHILDREN MULTIAPPEND SORT THREAD=ORDEREDSUBJECT 
THREAD=REFERENCES IDLE STARTTLS AUTH=NTLM AUTH=LOGIN AUTH=PLAIN AUTH=DIGEST-MD5 
AUTH=CRAM-MD5
S: C01 OK Completed
C: A01 AUTHENTICATE DIGEST-MD5
S: + 
bm9uY2U9ImdEaXQ2Y3d6ekRvNHhkdFlNUzVCSlZBSnpibmVQcnRQV1N1Nm5DczgxUW89IixyZWFsbT0ibWFpbDIuZmFtaWx5cmFkaW8ub3JnIixxb3A9ImF1dGgiLG1heGJ1Zj00MDk2LGNoYXJzZXQ9dXRmLTgsYWxnb3JpdGhtPW1kNS1zZXNz
Please enter your password:
C: 
dXNlcm5hbWU9ImN5cnVzIixyZWFsbT0ibWFpbDIuZmFtaWx5cmFkaW8ub3JnIixub25jZT0iZ0RpdDZjd3p6RG80eGR0WU1TNUJKVkFKemJuZVBydFBXU3U2bkNzODFRbz0iLGNub25jZT0iQUFUVkRndnJwUjgxL2Z0SDJxaXZHWWEzQVY1dVJac0FCTjJlWTU4Y2hLUT0iLG5jPTAwMDAwMDAxLHFvcD1hdXRoLG1heGJ1Zj0xMDI0LGRpZ2VzdC11cmk9ImltYXAvbG9jYWxob3N0LmZhbWlseXJhZGlvLm9yZyIscmVzcG9uc2U9ZjQ1YTkxY2Q4OTZiNTg0NzZhMGYyNTY4OTE4YjIzZTg=
S: A01 NO authentication failure
Authentication failed. generic failure
Security strength factor: 256
^CC: Q01 LOGOUT
Connection closed.
======================================================
Please note that user cyrus does have a saslpasswd2 and it is in sasldb2.db

See attached 'cyrus.conf'. I;ll send more logging information if needed.

Thanks for your help on this.

Mike Allen


-- Kenneth Murchison Oceana Matrix Ltd. Software Engineer 21 Princeton Place 716-662-8973 x26 Orchard Park, NY 14127 --PGP Public Key-- http://www.oceana.com/~ken/ksm.pgp



Reply via email to