Next message: (no email): "Solved: Virtual users setup"
Hi there,
I came to a closer analysis of an issue I posted some time ago. For some
very strange reason I can authenticate to imapd via imap, but the same
procedure fails with imaps, although SSL appears to be sane. This is
what happens:
telnet verdani imap
[stripped standard messages]
* OK verdani Cyrus IMAP4 v2.1.18-IPv6-Debian-2.1.18-1 server ready
a001 login mgr ******
a001 OK User logged in
a002 logout
* BYE LOGOUT received
a002 OK Completed
Connection closed by foreign host.
openssh s_client -connect verdani:imaps
[stripped most of certificates and such]
Verify return code: 19 (self signed certificate in certificate chain)
---
* OK verdani Cyrus IMAP4 v2.1.18-IPv6-Debian-2.1.18-1 server ready
a001 login mgr ******
and it simply does not return anymore.
There is no difference in /var/log/auth.log, which however reports all
the steps it goes through by using DIGEST-MD5 with ldapdb for
authentication. There is a difference in /var/log/mail.log:
The telnet case:
May 17 22:57:37 verdani cyrus/master[4209]: about to exec
/usr/lib/cyrus/bin/imapd
May 17 22:57:37 verdani cyrus/imap[4209]: executed
May 17 22:57:37 verdani cyrus/imapd[4209]: accepted connection
May 17 22:57:51 verdani cyrus/imapd[4209]: login:
sleipnir.mgr[172.16.1.3] mgr plaintext
The openssl case:
May 17 22:58:27 verdani cyrus/master[4219]: about to exec
/usr/lib/cyrus/bin/imapd
May 17 22:58:27 verdani cyrus/imaps[4219]: executed
May 17 22:58:27 verdani cyrus/imapd[4219]: accepted connection
May 17 22:58:28 verdani cyrus/imapd[4219]: mystore: starting txn 2147483777
May 17 22:58:28 verdani cyrus/imapd[4219]: mystore: committing txn
2147483777
May 17 22:58:28 verdani cyrus/imapd[4219]: starttls: TLSv1 with cipher
AES256-SHA (256/256 bits new) no authentication
in particular there is no login line.
I checked /dev/random, since all these DIGEST-MD5 etc. eat a lot of
entropy. Actually I did
#>ln -s /dev/urandom /dev/random
and checked
#>dd if=/dev/random bs=8 count=1
during the hanging authentication. There are random numbers available,
but still the authentication hangs.
I'm lost. I would appreciate some help in further troubleshooting.
Regards,
- lars.
---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
