Yes, DIGEST-MD5 don't work too :-(. Why is it working with sasldb2 (auxprop) ?
There exists an patch for cyrus with auxprop/mysql. Have anyone tested it ? Thanks. -Thomas On Mon, 2005-07-11 at 08:19 -0400, Ken Murchison wrote: > Thomas Börnert wrote: > > > hi list, > > > > ntlm with evolution or outlook isn't working: > > > > imap[17765]: badlogin: localhost.localdomain [127.0.0.1] NTLM [SASL > > (-13): authentication failure: incorrect NTLM response] > > > > i've found: if i use sasldb2 then it works. > > > > if i use the mysql setup below that it won't work :-(. > > Do CRAM-MD5 or DIGEST-MD5 work with mysql? > > > > have anyone an idea ? > > My guess is that you are encrypting the passwords in your mysql > database, which will cause non-plaintext mechanisms like NTLM and > DIGEST-MD5 to fail. > > > > > > my imapd.conf > > <---------------------- snip -----------------------> > > configdirectory: /var/lib/imap > > #duplicatesuppression: 0 > > partition-default: /var/spool/imap > > admins: cyrus > > allowanonymouslogin: no > > autocreatequota: 1000000 > > quotawarn: 90 > > timeout: 30 > > poptimeout: 10 > > #popminpoll: 1 > > servername: pop.domain.net > > sievedir: /var/lib/imap/sieve > > sieve_maxscriptsize: 32 > > sieve_maxscripts: 5 > > sendmail: /usr/sbin/sendmail > > hashimapspool: true > > allowplaintext: yes > > sasl_pwcheck_method: saslauthd > > sasl_mech_list: LOGIN PLAIN NTLM DIGEST-MD5 CRAM-MD5 > > tls_cert_file: /usr/share/ssl/certs/cyrus-imapd.pem > > tls_key_file: /usr/share/ssl/certs/cyrus-imapd.pem > > tls_ca_file: /usr/share/ssl/certs/cyrus-imapd.pem > > sasl_sql_engine: mysql > > sasl_sql_hostnames: localhost > > sasl_sql_user: mail > > sasl_sql_passwd: secret > > sasl_sql_database: mail > > sasl_sql_select: select password from accountuser where username = '%u' > > <---------------------- snip -----------------------> > > > > my cyrus.conf > > <---------------------- snip -----------------------> > > # standard standalone server implementation > > > > START { > > # do not delete this entry! > > recover cmd="ctl_cyrusdb -r" > > > > # this is only necessary if using idled for IMAP IDLE > > idled cmd="idled" > > } > > > > # UNIX sockets start with a slash and are put into /var/lib/imap/sockets > > SERVICES { > > # add or remove based on preferences > > imap cmd="imapd" listen="[localhost]:imap" prefork=5 > > imaps cmd="imapd -s" listen="[localhost]:imaps" prefork=1 > > pop3 cmd="pop3d" listen="[pop]:pop3" prefork=3 > > pop3s cmd="pop3d -s" listen="[pop]:pop3s" prefork=1 > > sieve cmd="timsieved" listen="[localhost]:sieve" prefork=0 > > > > # at least one LMTP is required for delivery > > # lmtp cmd="lmtpd" listen="[localhost]:lmtp" prefork=0 > > lmtpunix cmd="lmtpd" listen="/var/lib/imap/socket/lmtp" prefork=1 > > > > # this is only necessary if using notifications > > # notify cmd="notifyd" listen="/var/lib/imap/socket/notify" > > proto="udp" prefork=1 > > } > > > > EVENTS { > > # this is required > > checkpoint cmd="ctl_cyrusdb -c" period=30 > > > > # this is only necessary if using duplicate delivery suppression > > delprune cmd="ctl_deliver -E 3" at=0400 > > > > # this is only necessary if caching TLS sessions > > tlsprune cmd="tls_prune" at=0400 > > > > # create SQUAT indexes for all mailboxes > > squatter cmd="/usr/lib/cyrus-imapd/squatter -r user.%" at=401 > > > > } > > <---------------------- snip -----------------------> > > > > --- > > Cyrus Home Page: http://asg.web.cmu.edu/cyrus > > Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu > > List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html > > > --- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html