Hi Philippe! > I've set up a Cyrus/Postfix/MySQL/Webcyradmin-Host about a > year ago. And it works almost perfect. I just have a little problem. > Sometimes users of the webmail(Squirrelmail) can't login or > are locked out of their session (they have just to try again > or reauthenticate). In this case I got the following log: > saslauthd[29777]: DEBUG: auth_pam: pam_authenticate failed: > Permission denied > saslauthd[29777]: do_auth : auth failure: > [user=aebi.chaosnet] [service=imap] [realm=] [mech=pam] > [reason=PAM auth error] >
I think the squirrelmail does many sql lookups each times you navigate in the programm. So you should try saslauthd to cache his user informations. There is a parameter to start up the saslauthd -> "-c Enable cacheing of authentication credentialstion" to store all requests after a successful login in RAM. In this case, if a user logs in many times after a while, the pam_mysql must only lookup the sql database ones a day, and stores the informations in memory. After this the saslauthd gives direct informations to squirrelmail, and does no lokkup over pam_mysql. You can test it, and look if it is solve your problem. I hope it does. :) > I turned one some verbosity in SASL and MySQL. Then I can see > that this seems only to happen if there are two requests at > the same time (the first ist OK but the second gets refused). > Can this be true? Is there any way to fix this or am I > completely wrong? You can look up in the pam_mysql code and search the sql query string, whitch gets the data from mysql. There must be a "SELECT ...". MySQL has a good feature. "LOCK TABLES", if you use this select syntax, and there are more than one query to the same table/id, then the second, third, ... will be wait until the threat before is ready. In this case there comes no error, pam_mysql becomes the data a little bit later in this case, and this would be only increase the pageload after login or navigate in squirrelmail. You can try this too. > > Tanks > Philippe > Regards Marcel .::::::::::::::::::::::::::::::::::::::::::::::::::::::. Marcel Hartmann Tel. 04 41 - 960 34 49 Fax 04 41 - 960 34 47 Internet www.marcel-hartmann.com e-Mail [EMAIL PROTECTED] `::::::::::::::::::::::::::::::::::::::::::::::::::::::` _______________________________________________ This mailing list is hosted and supported by bit-heads GmbH | http://www.bit-heads.ch _______________________________________________ Web-cyradm mailing list [email protected] http://www.web-cyradm.org/mailman/listinfo/web-cyradm
