saslauthd on a trusted system

[Joe Kanakaraj]

Hi Guys,

I am currently setting up an IMAP server, based on the Cyrus-IMAP Server bundled with iexpress with SASL authentication.

On my test machine I was able to configure both IMAP and SASL, and it worked perfectly.

But the hitch was that the machine was in non trusted mode and got authenticated via the passwd file. I start the saslauthd server with the following command:-

./saslauthd -a getpwent start

I trusted the system and now it is not authenticating. I guess because it has to access /tcb for the password. How can I go about starting SASL so that it authenticates users in a trusted mode? I cannot implement this solution on Production since the machine cannot be untrusted just for this.

Help would be appreciated.

Regards,

Joe

P.S:- Does anybody have an idea where I could get the old IMAP server depot?
(ixUW-IMAP A.03.00-2002e). This version is easy since it integrates well and interacts with the OS well without SASL.

[Steven E. Protter]

Shalom Joe,

You might try uninstalling and re-installing the existing depot into the system. It may be able to figure out the system is trusted and start authenticating.

I've seen this behavior in the past.

SEP

[Joe Kanakaraj]

Hi Steve,

No luck there, I tried it a few times but nothing...

Joe

[Steven E. Protter]

Shalom,

What version of openssl are you running.

An upgrade there might help. I have no idea how to obtain the older version of Cyrus imap.

Also, this may simply be a bug which you need to report to hp for correction, since they ported the software. There may be a note in the readme file.

SEP

[Hemmetter]

Hey Joe

We are running:

# saslauthd -a pam

with a line

"imap session required /usr/lib/security/libpam_unix.1"

in /etc/pam.conf.


rgds
HGH

[Hemmetter]

I've to correct of my last post. There are 3 "imap" lines in my /etc/pam.conf:


# grep imap /etc/pam.conf
imap auth required /usr/lib/security/libpam_unix.1
imap account required /usr/lib/security/libpam_unix.1
imap session required /usr/lib/security/libpam_unix.1

rgds
HGH