Why is SASL authentication have to be so difficult? Round 2

2004-12-06 Thread Robert Lubbers
I am still working on getting this IMAP server authenticating against my Windows domain PDC, and I did manage to get the POP server authenticating, which is a giant step forward. But both the IMAP component and the cyradm component are complaining: They both give me the same error message: c

Re: Why is SASL authentication have to be so difficult? Round 2

2004-12-07 Thread Derrick J Brashear
On Mon, 6 Dec 2004, Robert Lubbers wrote: * OK cyrus.domain.com Cyrus IMAP4 v2.2.9 server ready . login cyrususer secret . NO Login failed: can't request info until later in exchange . logout * BYE LOGOUT received . OK Completed Ken pointed something out to me about this yesterday, notably, that i

Re: Why is SASL authentication have to be so difficult? Round 2

2004-12-07 Thread Igor Brezac
On Tue, 7 Dec 2004, Derrick J Brashear wrote: On Mon, 6 Dec 2004, Robert Lubbers wrote: * OK cyrus.domain.com Cyrus IMAP4 v2.2.9 server ready . login cyrususer secret . NO Login failed: can't request info until later in exchange . logout * BYE LOGOUT received . OK Completed Ken pointed something o

Re: Why is SASL authentication have to be so difficult? Round 2

2004-12-07 Thread Derrick J Brashear
The commit log on 1.398.2.81 is "don't canonify a userid twice" Derrick, There was a long discussion about this on cyrus-sasl and cyrus-devel lists awhile back: http://asg.web.cmu.edu/archive/message.php?mailbox=archive.cyrus-sasl&searchterm=saslpasswd2%20and%20virtdomains&msg=3683 this isn't qui

Re: Why is SASL authentication have to be so difficult? Round 2

2004-12-07 Thread Derrick J Brashear
But it looks like I also miss the scope; sasl_check_pass canonifies (which means auxprop_verify_password canonifies twice from sasl_check_pass, and from sasl_user_exists is the only verify_password backend which canonifies... sigh) anyway, i think there is something more subtle doing on here ma

Re: Why is SASL authentication have to be so difficult? Round 2

2004-12-07 Thread Igor Brezac
On Tue, 7 Dec 2004, Derrick J Brashear wrote: The commit log on 1.398.2.81 is "don't canonify a userid twice" Derrick, There was a long discussion about this on cyrus-sasl and cyrus-devel lists awhile back: http://asg.web.cmu.edu/archive/message.php?mailbox=archive.cyrus-sasl&searchterm=saslpass

Re: Why is SASL authentication have to be so difficult? Round 2

2004-12-07 Thread Derrick J Brashear
On Tue, 7 Dec 2004, Igor Brezac wrote: There was a long discussion about this on cyrus-sasl and cyrus-devel lists awhile back: http://asg.web.cmu.edu/archive/message.php?mailbox=archive.cyrus-sasl&searchterm=saslpasswd2%20and%20virtdomains&msg=3683 this isn't quite the same thing. further investi

Re: Why is SASL authentication have to be so difficult? Round 2

2004-12-07 Thread Ken Murchison
Robert Lubbers wrote: I am still working on getting this IMAP server authenticating against my Windows domain PDC, and I did manage to get the POP server authenticating, which is a giant step forward. But both the IMAP component and the cyradm component are complaining: They both give me the

Re: Why is SASL authentication have to be so difficult? Round 2

2004-12-07 Thread Igor Brezac
On Tue, 7 Dec 2004, Derrick J Brashear wrote: But it looks like I also miss the scope; sasl_check_pass canonifies (which means auxprop_verify_password canonifies twice from sasl_check_pass, and from sasl_user_exists is the only verify_password backend which canonifies... sigh) anyway, i think t