Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 9 Sep 2022 16:51:24 -0400
From:      Janos Dohanics <web@3dresearch.com>
To:        FreeBSD Questions <freebsd-questions@freebsd.org>
Subject:   cyrus sieve authentication
Message-ID:  <20220909165124.df7a80e061ecfe3ded9d5c87@3dresearch.com>

next in thread | raw e-mail | index | archive | help
Hello,

I run an instance of mail/cyrus-imapd32 for a small number of users
with saslauthd authentication.

However, sieve authentication doesn't work.

Cyrus-imapd was compiled as below:

# make showconfig
===> The following configuration options are available for cyrus-imapd32-3.2.9_1:
     AUTOCREATE=on: Enable autocreate support
     BACKUP=off: Enable backup support (experimental)
     CLAMAV=off: Use ClamAV
     DOCS=on: Build and/or install documentation
     HTTP=off: Enable HTTP support
     IDLED=on: Enable IMAP idled support
     LDAP=off: Enable LDAP support (experimental)
     MURDER=off: Enable IMAP Murder support
     MYSQL=off: MySQL database support
     NNTP=off: Enable NNTP support
     PGSQL=off: PostgreSQL database support
     REPLICATION=off: Enable replication (experimental)
     SNMP=off: SNMP network protocol support
     SQLITE=on: SQLite database support
     SQUAT=on: Enable Squat support
     SRS=on: Enable Sender Rewriting Scheme support
     XAPIAN=off: Enable Xapian support
====> GSSAPI Security API support: you can only select none or one of them
     GSSAPI_HEIMDAL=off: GSSAPI support via security/heimdal
     GSSAPI_MIT=off: GSSAPI support via security/krb5
     GSSAPI_BASE=on: GSSAPI support via base system (needs Kerberos)
====> Command line editing via libreadline: you can only select none or one of them
     READLINE_GNU=off: Use Term::Readline::GNU for cyradm
     READLINE_PERL=off: Use Term::Readline::Perl for cyradm
===> Use 'make config' to modify these settings

When I try to connect:

# telnet localhost sieve
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
"IMPLEMENTATION" "Cyrus timsieved 3.2.7"
"VERSION" "1.0"
"SASL" "PLAIN"
"SIEVE" "comparator-i;ascii-numeric fileinto reject ereject vacation vacation-seconds imapflags notify enotify include editheader ihave envelope environment body imap4flags date mailbox mboxmetadata servermetadata duplicate relational regex extlists subaddress copy index variables mailboxid"
"NOTIFY" "mailto"
"EXTLISTS" "urn:ietf:params:sieve:addrbook"
"STARTTLS"
"UNAUTHENTICATE"
OK

The example on the Cyrus web site shows:

[...]
Escape character is '^]'.
"IMPLEMENTATION" "Cyrus timsieved v1.1.0"
"SASL" "ANONYMOUS PLAIN KERBEROS_V4 GSSAPI"
"SIEVE" "fileinto reject envelope vacation imapflags notify subaddress regex"
OK

Someone on the Cyrus mailing list suggested that KERBEROS_V4 and GSSAPI
are required for sieve authentication.

Is that correct? If so, what compile options should I choose?

Please advise.

-- 
Janos Dohanics



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20220909165124.df7a80e061ecfe3ded9d5c87>