This is the first time I am using cyrus-imapd package.
I am unable to retrieve messages (pop3). At first, I had not entered the cyrus-master in /etc/hosts.allow and was getting connection refused. After adding the entry I am able to connect to port 110 but for some reason the pop3 server is failing the password authentication (see below). With the same userid/passwd I am able to ssh into the server.
What other configuration am I missing.
$ telnet 192.168.1.21 110 Trying 192.168.1.21... Connected to 192.168.1.21. Escape character is '^]'. +OK saraswati.surya-group.com Cyrus POP3 v2.2.12-Invoca-RPM-2.2.12-3.RHEL4.1 server ready 82952692.1123769502@saraswati.surya-group.com USER arunk +OK Name is a valid mailbox PASS ******** -ERR [AUTH] Invalid login
TIA,
Arun K. Khan wrote:
This is the first time I am using cyrus-imapd package.
I am unable to retrieve messages (pop3). At first, I had not entered the cyrus-master in /etc/hosts.allow and was getting connection refused. After adding the entry I am able to connect to port 110 but for some reason the pop3 server is failing the password authentication (see below). With the same userid/passwd I am able to ssh into the server.
What other configuration am I missing.
$ telnet 192.168.1.21 110 Trying 192.168.1.21... Connected to 192.168.1.21. Escape character is '^]'. +OK saraswati.surya-group.com Cyrus POP3 v2.2.12-Invoca-RPM-2.2.12-3.RHEL4.1 server ready <82952692.1123769502@saraswati.surya-group.com> USER arunk +OK Name is a valid mailbox PASS ******** -ERR [AUTH] Invalid login
TIA,
Do you have saslauthd setup and running ?
- KB
Quoting "Arun K. Khan" knura@yahoo.com:
This is the first time I am using cyrus-imapd package.
I am unable to retrieve messages (pop3). At first, I had not entered the cyrus-master in /etc/hosts.allow and was getting connection refused. After adding the entry I am able to connect to port 110 but for some reason the pop3 server is failing the password authentication (see below). With the same userid/passwd I am able to ssh into the server.
Cyrus must be told how to authenticate users. Normally, it doesn't do the authentication itself (it's not running as root, so it can't access /etc/shadow file). What is the value of sasl_pwcheck_method and sasl_mech_list in /etc/imapd.conf file? You most likely want to set those to:
sasl_pwcheck_method: saslauthd sasl_mech_list: PLAIN LOGIN
If sasl_pwcheck_method is set to saslauthd, is saslauthd running? If not fire it up. The configuration file for saslauthd (actually, it is config file for /etc/init.d/saslauthd startup script, unless you want to use LDAP, saslauthd does need/use any config files) is in /etc/sysconfig/saslauthd. Again, to have saslauthd authenticate against local user accounts in /etc/passwd and /etc/shadow files, you would set it to:
MECH=shadow FLAGS=
Other often used values for MECH are pam, ldap and kerberos5 (in case you have LDAP server or Kerberos KDC that you want to use for authentication, in which case you do not need local user accounts on the machine). In case you want to use LDAP, you'd also need to create file /etc/saslauthd.conf and set at least ldap_servers and ldap_search_base options in it.
Said all that, default configuration on CentOS is sasl_pwcheck_method set to saslauthd in /etc/imapd.conf and MECH set to shadow in /etc/sysconfig/saslauthd (although "pam" would be better default value for MECH variable). If you use this default configuration, most likely you forgot to enable saslauthd to start during boot. Just start it (/etc/init.d/saslauthd start) and enable its startup script so that it is started during boot (chkconfig saslauthd reset). If you use local user accounts for authentication, and your users are not listed in /etc/passwd and /etc/shadow file (for example, you are using NIS or LDAP), change value of MECH variable in /etc/sysconfig/saslauthd to pam.
---------------------------------------------------------------- This message was sent using IMP, the Internet Messaging Program.
On 11/08/2005 16:20, Aleksandar Milivojevic wrote:
Cyrus must be told how to authenticate users. Normally, it doesn't do the authentication itself (it's not running as root, so it can't access /etc/shadow file). What is the value of sasl_pwcheck_method and sasl_mech_list in /etc/imapd.conf file? You most likely want to set those to:
sasl_pwcheck_method: saslauthd sasl_mech_list: PLAIN LOGIN
Or, if you want to be able to use DIGEST-MD5 and CRAM-MD5 as well as PLAIN, set
sasl_pwcheck_method: auxprop
and set passwords with /usr/sbin/saslpasswd2.
Mike.
This message has been scanned for viruses by MailController - www.MailController.altohiway.com
On Thu, 2005-08-11 at 10:20 -0500, Aleksandar Milivojevic wrote:
Cyrus must be told how to authenticate users. Normally, it doesn't do the authentication itself (it's not running as root, so it can't access /etc/shadow file). What is the value of sasl_pwcheck_method and sasl_mech_list in /etc/imapd.conf file? You most likely want to set those to: sasl_pwcheck_method: saslauthd sasl_mech_list: PLAIN LOGIN
My /etc/imapd.conf is stock - I have made no changes to it.
If sasl_pwcheck_method is set to saslauthd, is saslauthd running? If not fire it up. The configuration file for saslauthd (actually, it is config file for
saslauthd was not turned on. Turned on saslauthd and now the POP3 session is able to authenticate the users. However, I am now getting a different error:
$ telnet saraswati 110 Trying 192.168.1.21... Connected to saraswati. Escape character is '^]'. +OK saraswati.surya-group.com Cyrus POP3 v2.2.12-Invoca-RPM-2.2.12-3.RHEL4.1 server ready 1361606062.1123870902@saraswati.surya-group.com user arunk +OK Name is a valid mailbox pass ********** -ERR [SYS/PERM] Unable to locate maildrop: Mailbox does not exist
Looked through the man pages for imapd.conf but I am not sure which option I need to set. I experimented with "partition-default: /var/spool/mail" - no luck.
Any pointers highly appreciated.
Thanks.
On 13/8/05 11:41, Arun K. Khan wrote:
Looked through the man pages for imapd.conf but I am not sure which option I need to set. I experimented with "partition-default: /var/spool/mail" - no luck.
Cyrus is primarily an IMAP server and it stores mail in it's own database - it does NOT use /var/spool/mail. You have to create the correct folder structure in /var/spool/imap and /var/lib/imap then create the users (mailboxes) with cyradm.
You will also need to arrange for your MTA to deliver mail to these mailboxes using LMTP.
It's all explained in the documentation which comes with cyrus (/usr/share/doc/cyrus-imapd-2.2.12/ under CentOS 4).
If you just want simple POP3 access to /var/spool/mail then use dovecot.
Mike.
This message has been scanned for viruses by MailController - www.MailController.altohiway.com