According to http://www.virtualmin.com/component/option,com_openwiki/Itemid,48/id,frequently_asked_questions/#what_s_the_deal_with_in_mailbox_usernames it’s a bad idea to use '@'s in usernames, but my client really wants it.
I’ve configured postfix and cyrus nicely and can login with webmin and usermin on IMAP. However, if I try to connect with a mailclient I get a login error:
saslauthd[23135]: do_auth : auth failure: [user=testuser] [service=imap] [realm=boor.ebrius.nl] [mech=pam] [reason=PAM auth error]
I’ve tried the suggestion in the above mentioned article and this is my
File Edit Options Buffers Tools Help
Path: System/Security/SASL
Type: list(getpwent,kerberos5,pam,rimap,shadow,ldap)
Default: pam
ServiceRestart: saslauthd
Authentication mechanism to use by saslauthd.
See man 8 saslauthd for available mechanisms.
SASLAUTHD_AUTHMECH=pam
(I don’t know which option applies for my OS, so I’ve tried all permutations).
So, I’m kind of stuck and hope to hear from someone how to continue.
Eric
March 12, 2009, 11:19pm
2
Yeah, using an ‘@’ in the username should work.
What does this show:
ps auxw | grep saslauth
Also, what’s the full username that you’re attempting to use in the example above?
Boor:/home/ths # ps auxw | grep saslauth
full username: thijs@boor.ebrius.nl (maybe because it’s a subdomain it doesn’t work?)
nope, on a testdomain without subdomain logging in also fails.
Eric
March 13, 2009, 10:10am
5
Okay, first, I’m not seeing the “-r” option being passed into saslauthd above.
When you say a “test domain without a subdomain fails”, are you saying a user without an “@” in it’s name can’t log in either?
Are you seeing any other errors in the mail log? Or just the one you showed in your first post with the "PAM auth error"?
That’s strange, because I’ve specified it in /etc/sysconfig/saslauthd with the FLAGS and the PARAMS option.
With the testdomain I’ve used a username@sub.domain.tld instead of username@domain.tld, but I don’t think it makes a difference.
And the error is still the same. It looks like you’re right and the -r option is ignored.
btw, I tried to edit, but the forum claimed it had a bug…
Eric
March 13, 2009, 11:00am
8
Sweet, Joe said I get a nickel for every forum bug run into – and I’ve been pretty financially sound ever since
Just to be sure – did you restart saslauthd after adding in the -r param?
Eric
March 14, 2009, 12:51am
10
Yeah, I’m not sure why that’s not taking then
Perhaps just to get things started, you might consider adding the "-r" param directly to the init script in /etc/init.d?
That’s certainly not desirable for the long term, but might at least help you get that up and running
Okay, I’ve changed the line (in )
[code:1]
into
[code:1]
and now the -r flag is accepted:
Starting service saslauthd done
However, when I try to login I recieve another error:
Mar 14 11:41:02 Boor imap[14849]: cross-realm login test@testdomein.nl denied
So a whole new error…
I’ve also tried enabling imaps in /etc/cyrus.conf and login with that, but I first have to arange certs etc.
Aaaaaaand… I’ve fixed it!
Just add virtdomains: on
Only problem now is that my Mail client (Thunderbird) doesn’t show the mails correctly…
Eric
March 14, 2009, 9:52am
14
I’m glad you got sending email going.
What do you mean by it doesn’t show them correctly?
Well, mail is generated when I send it through webmin, in maildir format. However, Thunderbird seems to save the mail in another format, because I can’t see maildir mails in thunderbird and when I save a draft for example, they don’t show up in the maildir.
So it looks like Cyrus doesn’t use the same mailfolders?
Joe
March 14, 2009, 1:25pm
16
thunderbird and when I save a draft for example, they don't show up in the maildir.
Thunderbird can be configured to use local storage for folders…e.g. on the client machine. This might also explain the behavior you’re seeing.
No, because IonCube (an webmail client) also shows this behaviour. I think Cyrus uses different folders then webmin.
Should I use dovecot or courier instead?
Eric
March 14, 2009, 1:48pm
19
Well, Dovecot is part of the standard Virtualmin stack, it’s known to work pretty well in conjunction with Virtualmin.
That said, I imagine any IMAP server should work fine. You just need to make sure that Postfix, Usermin, and Cyrus all agree on where emails should be stored.
Yeah… I’m kind of doubtfull- should I either:
-Try to install Dovecot although it isn’t supported by SLES or
