Hi, list. I try use ldap-autentication. When I try work with imap-server without TLS/SSL -- all work. When I try use starttls -- autentication not work and, as I can see in slapd debug -- nobody try connect to server in this moment.
My configs: ----------- $ cat /usr/local/etc/imapd.conf configdirectory: /var/imap partition-default: /var/spool/imap sieveusehomedir: false sievedir: /var/imap/sieve sasl_pwcheck_method: saslauthd servername: free2.mow.oilspace.com admins: cyrus root dkirhlarov tls_ca_file: /usr/local/etc/ssl/cacert.pem tls_cert_file: /usr/local/etc/ssl/imap-free2.crt tls_key_file: /usr/local/etc/ssl/imap-free2.key ----------- $ cat /usr/local/etc/saslauthd.conf ldap_servers: ldaps://free2.mow.oilspace.com/ ldap_search_base: ou=users,o=oilspace ldap_tls_cacert_file: /usr/local/etc/openldap/ssl/cacert.pem ----------- /var/log/messages in moment of connect I get: Jul 25 12:38:29 free2 imap[66302]: auxpropfunc error invalid parameter supplied Jul 25 12:38:29 free2 imap[66302]: OTP unavailable because can't read/write key database /etc/opiekeys: Permission denied Jul 25 12:38:30 free2 imap[66302]: starttls: TLSv1 with cipher RC4-SHA (128/128 bits new) no authentication Jul 25 12:38:30 free2 imap[66302]: no user in db Jul 25 12:38:30 free2 imap[66302]: no user in db Jul 25 12:38:30 free2 imap[66302]: no secret in database Jul 25 12:38:30 free2 imap[66302]: badlogin: dkirhlarov.mow.oilspace.com [172.17.1.254] CRAM-MD5 [SASL(-13): user not found: no secret in database] ----------- $ uname -rs FreeBSD 5.4-STABLE I try use plaintext password over SSL for autentication. I must use only crypted connection between imap client-server, saslauthd-slapd. PS. Sorry for my english. -- Dmitriy Kirhlarov OILspace, 26 Leninskaya sloboda, bld. 2, 2nd floor, 115280 Moscow, Russia P:+7 095 105 7247 F:+7 095 105 7246 E:[EMAIL PROTECTED] OILspace - The resource enriched - www.oilspace.com --- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
