[opensuse] Authentication Question Cyrus-Imap / Postfix



Dear list,

after reading several posts and websites, I finally got stuck with my configuration on a openSUSE 11.4 box and help in any form is highly appreciated.

I want to make sure that both SMTP (on submission port: 587) and IMAPs (on port: 993) services are working with encryption, so that no clear text passwords are send over the wire.

If I configure my Thunderbird mail client to work with Postfix on port 587, STARTTLS and non encrypted passwords, everything seems to work fine. My problem results from Cyrus and everything seems to work if I send out the passwords in plain and over the wire (no encryption at all). Unfortunately, as far as I get it, I am not able to establish a secure connection via STARTTLS or SSL/TLS. The thunderbird client always loses its connection.

Here are some details about my configuration:

$> cat /etc/imapd.conf
<<<< SNIP
allowplaintext: yes
sasl_pwcheck_method: auxprop
sasl_mech_list: PLAIN LOGIN
sasl_auxprop_plugin: sasldb
tls_ca_file: /etc/postfix/certs/cacert.pem
tls_cert_file: /etc/postfix/certs/mail_signed_cert.pem
tls_key_file: /etc/postfix/certs/mailkey.pem
<<<<

$>cat /etc/sasl2/smtpd.conf
pwcheck_method: auxprop
auxprop_plugin: sasldb
mech_list: plain login

$> cat /etc/cyrus.conf
START {
recover cmd="ctl_cyrusdb -r"
idled cmd="idled"
}
SERVICES {
imap cmd="imapd" listen="imap" prefork=0
imaps cmd="imapd -s" listen="imaps" prefork=0
sieve cmd="timsieved" listen="sieve" prefork=0
lmtpunix cmd="lmtpd" listen="/var/lib/imap/socket/lmtp" prefork=0
}
EVENTS {
checkpoint cmd="ctl_cyrusdb -c" period=30
delprune cmd="cyr_expire -E 3" at=0400
tlsprune cmd="tls_prune" at=0400
}

Whenever I try to connect via thunderbird, the following messages appear:

$> tail /var/log/messages
Apr 12 15:22:42 hostXYZ imaps[32135]: executed
Apr 12 15:22:42 hostXYZ imaps[32135]: IOERROR: opening /var/lib/imap/user_deny.db: No such file or directory
Apr 12 15:22:42 hostXYZ imaps[32135]: accepted connection
Apr 12 15:22:42 hostXYZ imaps[32135]: DBERROR db4: Database handles still open at environment close
Apr 12 15:22:42 hostXYZ imaps[32135]: DBERROR db4: Open database handle: /var/lib/imap/tls_sessions.db
Apr 12 15:22:42 hostXYZ master[32114]: process 32135 exited, status 75
Apr 12 15:22:42 hostXYZ master[32114]: service imaps pid 32135 in BUSY state: terminated abnormally

Hope that somebody is able to help.

Thank you in advance.

Best regards
Thomas

--
To unsubscribe, e-mail: opensuse+unsubscribe@xxxxxxxxxxxx
To contact the owner, e-mail: opensuse+owner@xxxxxxxxxxxx



Relevant Pages

  • Re: PC antivirus software question
    ... I want to be in control of every aspect of the interface. ... Anyone can install Firefox or Thunderbird. ... So far as configuring them goes, depends on how far you take "configuration". ... A lot of settings are available in the Account Settings and Options menus, true, but I doubt most users would even venture so far as the about:config settings you mention below. ...
    (alt.home.repair)
  • [NEWS] Weak Password Protection in WebSphere XML Configuration Export
    ... Passwords in WebSphere XML configuration export are not sufficiently ... WebSphere Advanced Server Edition 4.0.4 offers a management functionality ... The obfuscation algorithm is as follows: ...
    (Securiteam)
  • Re: Debian default ssh configuration problem with public/private key checking
    ... This is a vanilla sshd configuration. ... What changes should I make to enable the public/private key Authentication? ... # To enable empty passwords, ... debug1: Server accepts key: pkalg ssh-rsa blen 277 ...
    (Debian-User)
  • Re: [kde-linux] Trouble with Kmail
    ... Now I'm sending this message with Thunderbird:( ... your Thunderbird must have a broken wing;-)) ... Have you double checked the configuration in Kmail, ...
    (KDE)
  • Default Gnome Dbus error when starting Thunderbird
    ... Thunderbird v8.0 ... An error occurred while loading or saving configuration information ... moe dot james at sohnen-moe dot com ... Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ ...
    (GNOME)