Does anyone here have experience solving this mystery?
I would appreciate any assistance.
The scene ----
SuSE8.1
Courier IMAP 1.7.0
Outlook 2002
The testing ----
- Outlook test accounts config'd to 143, non-SSL (no starttls)
- system accounts (in /etc/shadow) succeed on IMAP login
- virtual accounts (in /etc/userdb.dat) succeed on IMAP login
+ change: switch all test accounts in Outlook to use
SSL on 993 (with [and without] restarts)
- system accounts succeed on IMAP SSL login
- virtual accounts (in userdb) *fail* on IMAP SSL login
Additional info ----
* A couriertcpd started for each of port 143 and 993
* authdaemon with userdb, pam (in that order)
* For testing the virtual accounts (/etc/userdb) are reduced to
the [EMAIL PROTECTED] entry, from install (using crypt()).
* It fails similarily when changed to meet the more restrictive
and conflicting requirements of makeuserdb (8)
(viz as johnexamplecom).
* FWIW: pam imaps is permit. Obviously, capa_tls includes plain.
* authtest -m authdaemon succeeds and coughs up the entries
for all tested accounts.
There's probably some information I have that would help the more
expert folks here to see the fault - just let me know and I'll cough
it up.
Thanks in advance.
--Nick
P.S.
Here's something confirming the failure. It compares strace on the
SSL tcpd process between a) system account success and b) virtual
account failure (and (c) virtual account success).
Whereas the system login account (a) proceeds
connect(3, { ..., path=" ../var/authdaemon/socket" ..
write(3, "AUTH 29\nimaps\m\nlogin\nsysaccntuser ...
read(3, "USERNAME=sysaccntuser ...
for the virtual account (b) we get
read(3, "FAIL\n", 8191)
With the same virtual account, set now to connect via 143
non-encrypted (c) we get the successful
read(3, "[EMAIL PROTECTED] ...)
-------------------------------------------------------
This SF.net email is sponsored by: Etnus, makers of TotalView, The debugger
for complex code. Debugging C/C++ programs can leave you feeling lost and
disoriented. TotalView can help you find your way. Available on major UNIX
and Linux platforms. Try it free. www.etnus.com
_______________________________________________
courier-users mailing list
[EMAIL PROTECTED]
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
