Re: [0.9] Re: -authz no longer working?

2009-09-04 Thread John Masterson
Dan White wrote: > On 04/09/09 15:01 -0600, John Masterson wrote: >> Sep 4 14:59:09 mbe1 cyrus/imap[18587]: badlogin: mgmt.modwest.com >> [204.11.245.21] PLAIN [SASL(-16): encryption needed to use mechanism: >> security flags do not match required] >> Sep 4 14:59:39 mbe1 cyrus/imap[18587]: lo

Re: -authz no longer working?

2009-09-04 Thread Dan White
On 04/09/09 15:01 -0600, John Masterson wrote: > Sep 4 14:59:09 mbe1 cyrus/imap[18587]: badlogin: mgmt.modwest.com > [204.11.245.21] PLAIN [SASL(-16): encryption needed to use mechanism: > security flags do not match required] > Sep 4 14:59:39 mbe1 cyrus/imap[18587]: login: mgmt.modwest.com

Re: -authz no longer working?

2009-09-04 Thread John Masterson
Dan White wrote: > Looks like this problem is related to the mechanism that you are connecting > with. If I explicitly request the 'PLAIN' mechanism, then I see: > > Sep 4 15:06:25 neo cyrus/imap[28930]: login: vpn.olp.net [67.217.151.100] > dwhite PLAIN User logged in > > but if I do the LOGIN

Re: -authz no longer working?

2009-09-04 Thread Dan White
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 04/09/09 13:50 -0600, John Masterson wrote: > Thanks. The server I'm connecting to has the 'cyrus' user listed in > proxyservers in /etc/imapd.conf: > > proxyservers: cyrus mupdate > > When i connect via cyradm and an authz argument, the log on th

Re: Re: -authz no longer working?

2009-09-04 Thread John Masterson
Dan White wrote: > The ability to authz is controlled by the proxyservers option within > /etc/imapd.conf. > > In your syslog (auth) log, you should not see the administrator > connecting. When you successfully authz, you should see the proxied user > connecting. Thanks. The server I'm connecting

Re: -authz no longer working?

2009-09-04 Thread Dan White
On 04/09/09 11:49 -0600, John Masterson wrote: >If I use cyradm to authenticate directly as the user in question, then I >correctly see the shared mailboxes. > >But when I authenticate as the cyrus admin user and -authz as the user I >am interested in, no such luck. The ability to authz is contr

-authz no longer working?

2009-09-04 Thread John Masterson
I have searched high and low but am coming up with nothing on this: For years we used a simple script that invoked Cyrus::IMAP::Admin to connect as the cyrus admin user with -authz for a user we were interested in seeing what shared mailboxes they had access to. It stopped working last year som