RE: POP AUTHFAIL [more info]

2002-11-08 Thread Toomas Vann
HI!

I was just messing around to get LDAP work aswell.
I got it working yesterday, hope it stays this way.
I am using:
Cyrus imapd 2.1.9
cyrus-sasl-2.1.7-2
openldap-2.0.25-1
pam-0.75-40

And file /etc/pam.d/imap looks like :

#%PAM-1.0
auth   required /lib/security/pam_ldap.so
accountrequired /lib/security/pam_ldap.so

And saslauth is started with -a pam

Try it maybe over pam, look what happens then...

Regards,
Toomas

-Original Message-
From: [EMAIL PROTECTED] [mailto:felix;qodiga.com]
Sent: Thursday, November 07, 2002 9:25 PM
To: cyrus
Subject: Re: POP AUTHFAIL [more info]


Well... doing a 100 repeats using testsaslauthd... I discovered that
error is cyclic... :-)

./testsaslauthd -u fcuell -p secret -R 100

[all other tests like 0,1,2,4,5,6,7,9,10, etc. works fine]
 3: NO authentication failed
 8: NO authentication failed
13: NO authentication failed
18: NO authentication failed
23: NO authentication failed
28: NO authentication failed
and continues the error in 33, 38, 43, 48 and so on..

:-)

This is normal?

Thanks 

Felix

-- 
Felix Cuello
[EMAIL PROTECTED]

Qodiga/its
Av.Santa Fe 882 P.13 Of. E
C.P. ABP1059C
Tel.: (54) 011 - 4312-1698
Buenos Aires - Argentina



POP AUTHFAIL

2002-11-07 Thread Felix Cuello
Hello!

   I'm still in troubles... working with Cyrus 2.1.9 and SASL 2.1.9,
   doing authentication into an openldap server... this error appers
   in my /var/log/messages

Nov  7 15:00:11 sinclair pop3d[3432]: login: sinclair[200.xxx.xxx.xxx]
fcuell plaintext
Nov  7 15:00:49 sinclair saslauthd[554]: AUTHFAIL: user=fcuell
service=pop realm=

Why this fails sometimes?,

Thanks a lot,

Felix

-- 
Felix Cuello
[EMAIL PROTECTED]

Qodiga/its
Av.Santa Fe 882 P.13 Of. E
C.P. ABP1059C
Tel.: (54) 011 - 4312-1698
Buenos Aires - Argentina




Re: POP AUTHFAIL

2002-11-07 Thread Igor Brezac

On Thu, 7 Nov 2002, Felix Cuello wrote:

 Hello!

I'm still in troubles... working with Cyrus 2.1.9 and SASL 2.1.9,
doing authentication into an openldap server... this error appers
in my /var/log/messages

 Nov  7 15:00:11 sinclair pop3d[3432]: login: sinclair[200.xxx.xxx.xxx]
 fcuell plaintext
 Nov  7 15:00:49 sinclair saslauthd[554]: AUTHFAIL: user=fcuell
 service=pop realm=

 Why this fails sometimes?,


Does it work other times?  If there are problems with ldap, you will see
more lines in the syslog.  This message alone may indicate a bad password.
Have you tested saslauthd with testsaslauthd?  Check LDAP_SASLAUTHD file
in $cyrus-sasl-src/saslauthd/LDAP_SASLAUTHD for more information.

-Igor




Re: POP AUTHFAIL

2002-11-07 Thread Felix Cuello
On Thu, Nov 07, 2002 at 02:01:02PM -0500, Erik Enge wrote:
 [EMAIL PROTECTED] (Felix Cuello) writes:
 
  Nov  7 15:00:11 sinclair pop3d[3432]: login: sinclair[200.xxx.xxx.xxx]
  fcuell plaintext
  Nov  7 15:00:49 sinclair saslauthd[554]: AUTHFAIL: user=fcuell
  service=pop realm=
 
 Are you authenticating via PAM?  You might need to add an entry for
 pop in /etc/pam.d.
 
 Erik.

no, I'm authenticating via saslauthd -a ldap
[I suppose that unstability could be because sasl is beta...
 but other people in the list told me that sasl works fine with ldap]

Now I'm sniffing connections to understand where is the problem.

thanks!

Felix

-- 
Felix Cuello
[EMAIL PROTECTED]

Qodiga/its
Av.Santa Fe 882 P.13 Of. E
C.P. ABP1059C
Tel.: (54) 011 - 4312-1698
Buenos Aires - Argentina




Re: POP AUTHFAIL

2002-11-07 Thread Erik Enge
[EMAIL PROTECTED] (Felix Cuello) writes:

 Nov  7 15:00:11 sinclair pop3d[3432]: login: sinclair[200.xxx.xxx.xxx]
 fcuell plaintext
 Nov  7 15:00:49 sinclair saslauthd[554]: AUTHFAIL: user=fcuell
 service=pop realm=

Are you authenticating via PAM?  You might need to add an entry for
pop in /etc/pam.d.

Erik.



Re: POP AUTHFAIL

2002-11-07 Thread Felix Cuello
I comiled testsaslauthd to check connections and it fails sometimes!


[root@sinclair saslauthd]# ./testsaslauthd -u fcuell -p secret -R 10
0: OK Success.
1: OK Success.
2: OK Success.
3: NO authentication failed
4: OK Success.
5: OK Success.
6: OK Success.
7: OK Success.
8: NO authentication failed
9: OK Success.


Where can I find more information?

Thanks!!!


-- 
Felix Cuello
[EMAIL PROTECTED]

Qodiga/its
Av.Santa Fe 882 P.13 Of. E
C.P. ABP1059C
Tel.: (54) 011 - 4312-1698
Buenos Aires - Argentina




Re: POP AUTHFAIL [more info]

2002-11-07 Thread Felix Cuello
Well... doing a 100 repeats using testsaslauthd... I discovered that
error is cyclic... :-)

./testsaslauthd -u fcuell -p secret -R 100

[all other tests like 0,1,2,4,5,6,7,9,10, etc. works fine]
 3: NO authentication failed
 8: NO authentication failed
13: NO authentication failed
18: NO authentication failed
23: NO authentication failed
28: NO authentication failed
and continues the error in 33, 38, 43, 48 and so on..

:-)

This is normal?

Thanks 

Felix

-- 
Felix Cuello
[EMAIL PROTECTED]

Qodiga/its
Av.Santa Fe 882 P.13 Of. E
C.P. ABP1059C
Tel.: (54) 011 - 4312-1698
Buenos Aires - Argentina




Re: POP AUTHFAIL [more info]

2002-11-07 Thread Igor Brezac

On Thu, 7 Nov 2002, Felix Cuello wrote:

 Well... doing a 100 repeats using testsaslauthd... I discovered that
 error is cyclic... :-)

 ./testsaslauthd -u fcuell -p secret -R 100

 [all other tests like 0,1,2,4,5,6,7,9,10, etc. works fine]
  3: NO authentication failed
  8: NO authentication failed
 13: NO authentication failed
 18: NO authentication failed
 23: NO authentication failed
 28: NO authentication failed
 and continues the error in 33, 38, 43, 48 and so on..

 :-)

 This is normal?


This is proly caused by a slow ldap query.  Please see my previous email
message.

Just curious, what does 'timex ./testsaslauthd -u fcuell -p secret -R 5'
return.

-- 
Igor