when I run cyradm authentication failures and when I look in the log, I find:

May  1 15:15:22 mail imapd[29838]: unknown password verifier saslauthd
May  1 15:15:22 mail imapd[29838]: badlogin: localhost.localdomain[127.0.0.1] 
plaintext root SASL(-4): no mechanism available: checkpass failed
May  1 15:18:09 mail perl: No worthy mechs found

so I test using imtest and I get:

[cyrus@mail cyrus]$  imtest -m login -p imap  localhost
C: C01 CAPABILITY
S: * OK mail.andrewandsons.com Cyrus IMAP4 v2.1.4 server ready
S: * CAPABILITY IMAP4 IMAP4rev1 ACL QUOTA LITERAL+ MAILBOX-REFERRALS NAMESPACE UIDPLUS 
ID NO_ATOMIC_RENAME UNSELECT CHILDREN MULTIAPPEND SORT THREAD=ORDEREDSUBJECT 
THREAD=REFERENCES IDLE
S: C01 OK Completed
Password:
C: L01 LOGIN cyrus {8}
+ go ahead
C: <omitted>
L01 NO Login failed: no mechanism available
Authentication failed. generic failure
Security strength factor: 0

May  1 15:33:47 mail imapd[29876]: unknown password verifier saslauthd
May  1 15:33:47 mail imapd[29876]: badlogin: localhost.localdomain[127.0.0.1] 
plaintext cyrus SASL(-4): no mechanism available: checkpass failed

and I tested saslauthd which works OK (as you'd expect)

[root@mail saslauthd]# ./testsaslauthd -u cyrus -p <no peeking>
OK "Success."

and I compiled IMAP with:

 ./configure  --with-auth=unix --without-gssapi --with-sasl=/usr/local/sasl
--disable-sample --disable-krb4 --with-saslauthd --enable-plain --enable-login

and sasl2 with

./configure  --prefix=/usr/local/sasl --disable-krb4 --without-gssapi -with-auth=unix 
--with-pwcheck --with-saslauthd

my imapd.conf is:

configdirectory: /var/spool/imap-config
partition-default: /var/spool/imap
admins: root cyrus
srvtab:/var/spool/imap-config/srvtab
allowplaintext: yes
sasl_pwcheck_method: saslauthd
sasl_mech_list: plain

I'm really at a loss here.  According to all the documentation I have read and
the help I've gotten on the mailing list it should be working.  But it's
not and I don't know why.  I've been staring at this stuff for so long that 
if there is a typo, I'm not seeing it.   

---eric



Reply via email to