<div dir="ltr">Running testsaslauthd -u cyrus-admin -p mypassword<div><br></div><div>Works fine (success) also</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Mon, Aug 24, 2015 at 8:24 PM, Thomas Spuhler <span dir="ltr"><<a href="mailto:thomas.spuhler@btspuhler.com" target="_blank">thomas.spuhler@btspuhler.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="HOEnZb"><div class="h5">On Monday, August 24, 2015 08:21:09 PM Paul Bronson wrote:<br>
> So I am running into a whirlwind of issues with my cyrus install. I am<br>
> setting up a multi-domain kolab groupware solution. I am on centos 6.7<br>
><br>
> I am getting this flooding my error logs when I try to make a new user on a<br>
> fresh multi domain setup:<br>
><br>
> Aug 24 19:01:19 gmx1 imaps[1911]: badlogin: localhost [::1] PLAIN<br>
> [SASL(-13): authentication failure: bad userid authenticated]<br>
> Aug 24 19:01:23 gmx1 imaps[1916]: starttls: TLSv1.2 with cipher<br>
> ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits new) no authentication<br>
> Aug 24 19:01:23 gmx1 imaps[1916]: SASL unable to open Berkeley db<br>
> /etc/sasldb2: No such file or directory<br>
> Aug 24 19:01:23 gmx1 imaps[1916]: SASL unable to open Berkeley db<br>
> /etc/sasldb2: No such file or directory<br>
> Aug 24 19:01:23 gmx1 imaps[1916]: ptload(): bad response from ptloader<br>
> server: ptsmodule_canonifyid() failed<br>
> Aug 24 19:01:23 gmx1 imaps[1916]: ptload completely failed: unable to<br>
> canonify identifier: 'john'[0:1]<a href="mailto:doe@domain.com">doe@domain.com</a><br>
> Aug 24 19:01:23 gmx1 imaps[1916]: SASL bad userid authenticated<br>
><br>
><br>
> The users do NOT show up on kolab webadmin... It keeps trying to add a test<br>
> user I made and won't stop trying. I reboot the server and it goes away.<br>
><br>
> I tried playing with:<br>
><br>
> /etc/imapd.conf<br>
><br>
> ldap_domain_base_dn: cn=kolab,cn=config<br>
> ldap_domain_filter:<br>
> (&(objectclass=domainrelatedobject)(associateddomain=%s))<br>
> ldap_domain_name_attribute: associatedDomain<br>
> ldap_domain_scope: sub<br>
> ldap_domain_result_attribute: inetdomainbasedn<br>
><br>
><br>
> I also noticed these at the top.. Should this be "PLAIN" ? see below..<br>
><br>
> sasl_pwcheck_method: auxprop saslauthd<br>
> sasl_mech_list: PLAIN LOGIN<br>
> allowplaintext: no<br>
</div></div>I have (Mageia5)<br>
pwcheck_method: saslauthd<br>
mech_list: plain login<br>
<div class="HOEnZb"><div class="h5"><br>
<br>
><br>
><br>
> My imapd config:<br>
><br>
> configdirectory: /var/lib/imap<br>
> partition-default: /var/spool/imap<br>
> admins: cyrus-admin<br>
> sievedir: /var/lib/imap/sieve<br>
> sendmail: /usr/sbin/sendmail<br>
> sasl_pwcheck_method: auxprop saslauthd<br>
> sasl_mech_list: PLAIN LOGIN<br>
> allowplaintext: no<br>
> tls_server_cert: /etc/pki/cyrus-imapd/cyrus-imapd.pem<br>
> tls_server_key: /etc/pki/cyrus-imapd/cyrus-imapd.pem<br>
> # uncomment this if you're operating in a DSCP environment (RFC-4594)<br>
> # qosmarking: af13<br>
> auth_mech: pts<br>
> pts_module: ldap<br>
> ldap_servers: ldap://localhost:389<br>
> ldap_sasl: 0<br>
> ldap_base: dc=domain,dc=com<br>
> ldap_bind_dn: uid=kolab-service,ou=Special Users,dc=domain,dc=com<br>
> ldap_password: WIY0DNbAYPc8uY5<br>
> ldap_filter:<br>
> (|(&(|(uid=cyrus-admin)(uid=cyrus-murder))(uid=%U))(&(|(uid=%U)(mail=%U@<br>
> %d)(mail=%U@%r))(objectclass=kolabinetorgperson)))<br>
> ldap_user_attribute: mail<br>
> ldap_group_base: dc=domain,dc=com<br>
> ldap_group_filter:<br>
> (&(cn=%u)(objectclass=ldapsubentry)(objectclass=nsroledefinition))<br>
> ldap_group_scope: one<br>
> ldap_member_base: ou=People,dc=domain,dc=com<br>
> ldap_member_method: attribute<br>
> ldap_member_attribute: nsrole<br>
> ldap_restart: 1<br>
> ldap_timeout: 10<br>
> ldap_time_limit: 10<br>
> unixhierarchysep: 1<br>
> virtdomains: userid<br>
> annotation_definitions: /etc/imapd.annotations.conf<br>
> sieve_extensions: fileinto reject envelope body vacation imapflags<br>
> notify include regex subaddress relational copy date index<br>
> allowallsubscribe: 0<br>
> allowusermoves: 1<br>
> altnamespace: 1<br>
> hashimapspool: 1<br>
> anysievefolder: 1<br>
> fulldirhash: 0<br>
> sieveusehomedir: 0<br>
> sieve_allowreferrals: 0<br>
> lmtp_downcase_rcpt: 1<br>
> lmtp_fuzzy_mailbox_match: 1<br>
> username_tolower: 1<br>
> deletedprefix: DELETED<br>
> delete_mode: delayed<br>
> expunge_mode: delayed<br>
> postuser: shared<br>
><br>
> ldap_domain_base_dn: cn=kolab,cn=config<br>
> ldap_domain_filter:<br>
> (&(objectclass=domainrelatedobject)(associateddomain=%s))<br>
> ldap_domain_name_attribute: associatedDomain<br>
> ldap_domain_scope: sub<br>
> ldap_domain_result_attribute: inetdomainbasedn<br>
><br>
><br>
> Cyrus version:<br>
><br>
> name : Cyrus IMAPD<br>
> version : git2.5+0-Kolab-2.5-108.1.el6.kolab_3.4<br>
> vendor : Project Cyrus<br>
> support-url: <a href="http://www.cyrusimap.org" rel="noreferrer" target="_blank">http://www.cyrusimap.org</a><br>
> os : Linux<br>
> os-version : 2.6.32-042stab108.7<br>
> environment: Built w/Cyrus SASL 2.1.23<br>
> Running w/Cyrus SASL 2.1.23<br>
> Built w/OpenSSL 1.0.1e-fips 11 Feb 2013<br>
> Running w/OpenSSL 1.0.1e-fips 11 Feb 2013<br>
> Built w/zlib 1.2.3<br>
> Running w/zlib 1.2.3<br>
> CMU Sieve 2.4<br>
> TCP Wrappers<br>
> NET-SNMP<br>
> mmap = shared<br>
> lock = fcntl<br>
> nonblock = fcntl<br>
> idle = idled<br>
><br>
><br>
><br>
> Kolab web-admin is in turn unable to write the entry to Cyrus as the user<br>
> doesn't showing the roundcube DB.<br>
><br>
><br>
> I think my main problem is that this "ptloader" cannot canonify the user.<br>
> Should I turn on canonicalization?<br>
><br>
> This article states to use it:<br>
> <a href="https://docs.kolab.org/howtos/multi-domain.html#cyrus-imap-changes" rel="noreferrer" target="_blank">https://docs.kolab.org/howtos/multi-domain.html#cyrus-imap-changes</a><br>
><br>
> This one does not:<br>
> <a href="http://bmts.us/wiki/doku.php?id=article:kolab:multidomain" rel="noreferrer" target="_blank">http://bmts.us/wiki/doku.php?id=article:kolab:multidomain</a><br>
<br>
</div></div><span class="HOEnZb"><font color="#888888">--<br>
Best regards<br>
Thomas Spuhler<br>
<br>
All of my e-mails have a valid digital signature<br>
ID 60114E63</font></span><br>_______________________________________________<br>
users mailing list<br>
<a href="mailto:users@lists.kolab.org">users@lists.kolab.org</a><br>
<a href="https://lists.kolab.org/mailman/listinfo/users" rel="noreferrer" target="_blank">https://lists.kolab.org/mailman/listinfo/users</a><br></blockquote></div><br></div>