Hello,

Let me ask you the other way.
When you create a new user via web-cyradm interface, this user is also created 
in Cyrus DB on your system?

When you do 'lm' command on cyradm interface, can you see this user?
cyradm --user cyrus --server localhost --auth plain
Password: # This is the SASL2 password
IMAP Password: # This is the IMAP password that you need to enter in the 
mysql-table »accountusers«
localhost> lm

Regards,
Leon Kolchinsky

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED]
Sent: Sunday, September 18, 2005 1:32 PM
To: [email protected]
Subject: Re: [Web-cyradm] Convert auth db from sasldb to mysql

Hi Leon,

I have checked the lines in imapd.conf again and I have everything correctly.
I have not 'PLAIN LOGIN', I only have 'PLAIN', but I think this is correct.
Nevertheless , I have tried with 'PLAIN LOGIN' also and results are the same.

I don't understand what do you want to say when you write:
'Update password of the user you have created with your scripts with the 
password of the new user you've created with web-cyradm'

I can create new users under web-cyradm interface and they are added into mysql 
table, but they cannot be added to cyrus system ..  For example, If I try to 
add an user called 'probe' with web-cyradm:

106 Init DB     mail
106 Query       INSERT INTO accountuser (username, password, prefix, 
domain_name) VALUES ('probe','59hWoSrXv6oSZrQ','anna','localhost.com')
106 Init DB     mail
106 Query       INSERT INTO virtual (alias, dest, username, status) values
( '[EMAIL PROTECTED]' , 'probe' , 'probe' , '1')

User is added correctly to mysql table, but:

anna imap[29276]: accepted connection
anna master[29342]: about to exec /usr/lib/cyrus-imapd/imapd anna imap[29276]: 
executed anna imap[29276]: badlogin: anna.localhost.com [127.0.0.1] plaintext 
probe
SASL(-13):
authentication failure: checkpass failed

It's the same.

When I execute web-cyradm and Cyrus-system is running with sasldb2 database 
auth method, web-cyradm can read users and their email quotas assigned to every 
account and logs into cyrus correctly:

anna imap[29621]: accepted connection
anna master[29738]: about to exec /usr/lib/cyrus-imapd/imapd anna imap[29621]: 
login: anna.localhost.com [127.0.0.1] cyrus plaintext User logged in anna 
imap[29738]: executed

And I can create new users with quotas that are listed OK with lm command into 
cyradm!!!
Cyrus works correctly but with pam-sasldb2 auth. I need pam-mysql auth.
When I change /etc/pam.d/imap to obtain pam-mysql auth, auth system crashes. 
web-cyradm
cannot read email quotas and cannot log into cyrus.

System works fine when users database is sasldb2, but when I try to run the 
system over mysql database, it does not work. Any ideas??

MhBeyle ___


----- Original Message -----
From: <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>; <[email protected]>
Sent: Sunday, September 18, 2005 11:04 AM
Subject: RE: [Web-cyradm] Convert auth db from sasldb to mysql


Hi,

Make sure you have the following lines in imapd.conf:
sasl_pwcheck_method: saslauthd
allowplaintext: yes
sasl_mech_list: PLAIN LOGIN

Now try to create user with web-cyradm interface.
Update password of the user you have created with your scripts with the 
password of the new user you've created with web-cyradm.

Try to login with the username you've created via script and new password 
from web-cyradm created user.

Post here the results.

Regards,
Leon Kolchinsky

-----Original Message-----
From: [EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED]
Sent: Saturday, September 17, 2005 2:31 PM
To: [email protected]
Subject: [Web-cyradm] Convert auth db from sasldb to mysql

OK. I'm trying to install web-cyradm in a fedora core 4 system with 
cyrus-imapd and postfix already installed. The mail system logins through
sasldb2 database with contains user names. Users have been added with 
saslpasswd methods and everything works fine. Mailsystem is working fine.
Now I want to authenticate users through mysql database and I want to use 
web-cyradm.

First, I have tried cyrus-imapd server works correctly. I have changed 
/etc/pam.d/imap file and I have added the neccesary lines for mysql and 
crypt auth. I have added some lines to /etc/imapd.conf to configure 
cyrus-imapd correctly. saslauthd is using pam as auth mechanism.
I have added users to mysql database *manually* because I had users created 
into cyrus system. I think I have added users correctly. I have used scripts 
from web-cyradm to create databases and admin users and I have added new 
users with ENCRYPT commands. Domain names and prefixes are inserted OK. I 
have compared the new database with another one created for web-cyradm (that 
works OK) and they have the same things (certainly with domain names 
changed).

I have tried to login into cyrus-imap with cyradm --user cyrus --server 
localhost --auth plain (this command worked fine with sasldb2 database) and 
logs show me the following things:

maillog:
anna imap[16006]: accepted connection
anna imap[16006]: badlogin: anna.localhost.com [127.0.0.1] PLAIN [SASL(-16):
encryption needed to use mechanism: security flags do not match required] 
anna imap[16006]: badlogin: anna.localhost.com [127.0.0.1] plaintext cyrus
SASL(-13): authentication failure: checkpass failed

mysql log:
69 Connect     [EMAIL PROTECTED] on mail
69 Init DB     mail
69 Query       SELECT password FROM accountuser WHERE username='cyrus'
69 Query       insert into log (msg, user, host, pid, time) values('AUTH
SUCCESSFUL', 'cyrus', '', '15719', NOW())
69 Quit

With testsaslauthd -u cyrus -p password -s imap I obtain:
0: NO "authentication failed"

I think mysql authentication is working OK ('AUTH SUCCESSFUL') but something 
is wrong near pam-auth when cyrus-imap server try to authenticate users and 
I don't know what it is.

I need suggestions, please.



MhBeyle __

_______________________________________________
This mailing list is hosted and supported by bit-heads GmbH | 
http://www.bit-heads.ch

_______________________________________________
Web-cyradm mailing list
[email protected]
http://www.web-cyradm.org/mailman/listinfo/web-cyradm 

_______________________________________________
This mailing list is hosted and supported
by bit-heads GmbH | http://www.bit-heads.ch

_______________________________________________
Web-cyradm mailing list
[email protected]
http://www.web-cyradm.org/mailman/listinfo/web-cyradm
_______________________________________________
This mailing list is hosted and supported
by bit-heads GmbH | http://www.bit-heads.ch

_______________________________________________
Web-cyradm mailing list
[email protected]
http://www.web-cyradm.org/mailman/listinfo/web-cyradm

Reply via email to