Re: cyradm and allowing only encrypted passwords with 2.3.16?

2010-10-04 Thread Wesley Craig
On 04 Oct 2010, at 01:09, Patrick Goetz wrote: I was having problems making Cyrus 2.2.x work with only encrypted passwords. Setting allowplaintext: no in imapd.conf prevents plain text logins, but then cyradm stops working: ibis:~etc$ cyradm localhost Login disabled. cyradm:

cyradm and allowing only encrypted passwords with 2.3.16?

2010-10-04 Thread Patrick Goetz
I was having problems making Cyrus 2.2.x work with only encrypted passwords. Setting allowplaintext: no in imapd.conf prevents plain text logins, but then cyradm stops working: ibis:~etc$ cyradm localhost Login disabled. cyradm: cannot authenticate to server as pgoetz I

Re: cyradm and allowing only encrypted passwords with 2.3.16?

2010-10-04 Thread Patrick Goetz
On 10/04/2010 08:41 AM, Wesley Craig wrote: TLS isn't available to Cyrus::IMAP pre 2.3.2. I expect it's a bug. Sorry,I didn't specifically say that I'm using the latest release, 2.3.16. I find cyradm to be very convenient to use for smaller sites, but is this essentially a dead tool and I

Re: cyradm and allowing only encrypted passwords with 2.3.16?

2010-10-04 Thread Dan White
On 04/10/10 09:26 -0500, Patrick Goetz wrote: On 10/04/2010 08:41 AM, Wesley Craig wrote: TLS isn't available to Cyrus::IMAP pre 2.3.2. I expect it's a bug. Sorry,I didn't specifically say that I'm using the latest release, 2.3.16. I find cyradm to be very convenient to use for smaller

Re: cyradm and allowing only encrypted passwords with 2.3.16?

2010-10-04 Thread Wesley Craig
On 04 Oct 2010, at 10:26, Patrick Goetz wrote: Sorry,I didn't specifically say that I'm using the latest release, 2.3.16. I understood that, tho I did notice you pasted the 2.2.x error, not the 2.3.x error. I find cyradm to be very convenient to use for smaller sites, but is this

Re: cyradm and allowing only encrypted passwords with 2.3.16?

2010-10-04 Thread Patrick Goetz
On 10/04/2010 11:07 AM, Dan White wrote: You can connect via a non plaintext mechanism, like digest-md5. This seems like a straightforward case of RTFM, but how does one determine the auth mechanism? I'm using saslauthd, pam, and have a self-signed certificate (which I know works):

Re: cyradm and allowing only encrypted passwords with 2.3.16?

2010-10-04 Thread Patrick Goetz
On 10/04/2010 11:41 AM, Wesley Craig wrote: I understood that, tho I did notice you pasted the 2.2.x error, not the 2.3.x error. Nope, this is precisely the error I'm getting on my 2.3.16 install: ibis:~~$ dpkg -l | grep cyrus-common ii cyrus-common-2.32.3.16-1 Cyrus

Re: cyradm and allowing only encrypted passwords with 2.3.16?

2010-10-04 Thread Andrew Morgan
On Mon, 4 Oct 2010, Patrick Goetz wrote: On 10/04/2010 08:41 AM, Wesley Craig wrote: TLS isn't available to Cyrus::IMAP pre 2.3.2. I expect it's a bug. Sorry,I didn't specifically say that I'm using the latest release, 2.3.16. I find cyradm to be very convenient to use for smaller

Re: cyradm and allowing only encrypted passwords with 2.3.16?

2010-10-04 Thread Patrick Goetz
On 10/04/2010 12:29 PM, Andrew Morgan wrote: cyrus-be4:~# cyradm --user cyrus --tlskey '' localhost That did it! The trick is to use --tlskey with an empty field as demonstrated above. Who knew? -- ibis:~~$ cyradm --user pgoetz --tlskey '' localhost verify error:num=18:self signed

Re: cyradm and allowing only encrypted passwords with 2.3.16?

2010-10-04 Thread Andrew Morgan
On Mon, 4 Oct 2010, Patrick Goetz wrote: On 10/04/2010 12:29 PM, Andrew Morgan wrote: cyrus-be4:~# cyradm --user cyrus --tlskey '' localhost That did it! The trick is to use --tlskey with an empty field as demonstrated above. Who knew? -- ibis:~~$ cyradm --user pgoetz --tlskey

Re: cyradm and allowing only encrypted passwords with 2.3.16?

2010-10-04 Thread Dan White
On 04/10/10 11:51 -0500, Patrick Goetz wrote: On 10/04/2010 11:07 AM, Dan White wrote: You can connect via a non plaintext mechanism, like digest-md5. This seems like a straightforward case of RTFM, but how does one determine the auth mechanism? I'm using saslauthd, pam, and have a

Re: cyradm and allowing only encrypted passwords with 2.3.16?

2010-10-04 Thread Wesley Craig
On 04 Oct 2010, at 13:37, Patrick Goetz wrote: On 10/04/2010 12:29 PM, Andrew Morgan wrote: cyrus-be4:~# cyradm --user cyrus --tlskey '' localhost That did it! The trick is to use --tlskey with an empty field as demonstrated above. Who knew? That's a bug, please report it. It ought to