Date: Sat, 9 Feb 2002 18:46:53 -0600 From: "Scot W. Hetzel" <hetzels@westbend.net> To: "Sid Lambert" <sid@jsisign.com>, <freebsd-isp@FreeBSD.ORG> Subject: Re: Cyrus imapd Message-ID: <01c701c1b1cc$6f8338c0$11fd2fd8@westbend.net> References: <003701c1b10a$afaaa4f0$0400a8c0@speedy> <00ba01c1b111$fc70dd20$11fd2fd8@westbend.net> <005a01c1b113$1f53dfd0$0400a8c0@speedy>
next in thread | previous in thread | raw e-mail | index | archive | help
From: "Sid Lambert" <sid@jsisign.com>
> > > I am trying to setup Cyrus with imap and pop3 on a new 4.5-Stable box,
I
> > get
> > > this error via syslogd.
> > >
> > > Feb 8 20:39:29 mail pop3d[18497]: badlogin: Host[ip] plaintext user
> > > Incorrect password
> > >
> > > I can't auth users but I can login and use the cyradm with the cyrus
> user.
> > >
> > > I am using sasl_pwcheck_method: pwcheck in imapd.conf
> > >
> > > I have checked to make sure Kerberos is commented out of pam.conf
> > >
The default pwcheck daemon doesn't use PAM for authentication. Are your
users in another database or are they in the system password file?
If you need to use PAM to authenticate your users you need to run the
pwcheck_pam daemon. With the latest version of Cyrus-SASL port do the
following:
1. Stop pwcheck with:
/usr/local/etc/rc.d/pwcheck.sh stop
2. Add to /etc/rc.conf:
sasl_pwcheck_program="/usr/local/sbin/pwcheck_pam"
3. Start pwcheck_pam:
/usr/local/etc/rc.d/pwcheck.sh start
> > >Can anyone point me in the right direction?
> > >
> > Check if the pwcheck dameon is running:
> >
> > ps -ax | grep pwcheck
>
> It is running, should it switch to the cyrus user after it is started?
>
> <root@mail:/usr/local/etc> ps -awux | grep pwcheck
> root 18690 0.0 0.1 980 484 ?? Ss 9:50PM 0:00.00
> /usr/local/sbin/pwcheck
>
No, it needs to run as root in order to read the /etc/passwd file when
authenticating users.
Scot
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?01c701c1b1cc$6f8338c0$11fd2fd8>