From: Mustafa A. Hashmi (no email)
Date: Thu Aug 09 2007 - 10:40:44 EDT
Hello all:
I am noticing the following while implementing cyrus on our systems
when working with GSSAPI authentication.
Firstly:
OS: Debian Etch (4.0)
Cyrus Version: 2.2.13
Please note: Cyrus is configured to work with both plain and well as
gssapi authentication.
Please find log below:
--- Authentication via GSSAPI ---
samwise:/# imtest -m GSSAPI samwise.emergen.biz
S: * OK samwise.emergen.biz Cyrus IMAP4 v2.2.13-Debian-2.2.13-10 server ready
C: C01 CAPABILITY
S: * CAPABILITY IMAP4 IMAP4rev1 ACL QUOTA LITERAL+ MAILBOX-REFERRALS
NAMESPACE UIDPLUS ID NO_ATOMIC_RENAME UNSELECT CHILDREN MULTIAPPEND
BINARY SORT THREAD=ORDEREDSUBJECT THREAD=REFERENCES ANNOTATEMORE IDLE
STARTTLS AUTH=GSSAPI SASL-IR
S: C01 OK Completed
C: A01 AUTHENTICATE GSSAPI
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
S: + YIGZBgkqhkiG9xIBAgICAG+BiTCBhqADAgEFoQMCAQ+iejB4oAMCARKicQRvsXC9xdOfToafJ2pnaLm9PKEm8Kg3nvrA57rBxOOqPOTgamiFbQYdkgu1KIO5qU0pzszYCDTau6NKyHugt5/n4ACWF3LmPIODtGSbgo61D23CAhsDVUeUXDXTuigx9f/MO+3vbd6L0eRA8h5463un
C:
S: + BQQF/wAMAAAAAAAAJx6sewcAEABJrP3DM691T6WIuOw=
C: BQQE/wAMAAAAAAAACv73jgQABAB0NwsarHU++17uNwo=
S: A01 OK Success (privacy protection)
Authenticated.
Security strength factor: 56
a logout
* BYE LOGOUT received
a OK Completed
Connection closed.
--- Log in mail.log upon authentication request: ---
Aug 9 14:32:04 samwise cyrus/master[6957]: set maximum file
descriptors to 256/256
Aug 9 14:32:04 samwise cyrus/master[6957]: about to exec
/usr/lib/cyrus/bin/imapd
Aug 9 14:32:04 samwise cyrus/imap[6957]: executed
Aug 9 14:32:04 samwise cyrus/imap[6957]: telling master 2
Aug 9 14:32:04 samwise cyrus/imap[6957]: accepted connection
Aug 9 14:32:04 samwise cyrus/imap[6957]: telling master 3
Aug 9 14:32:04 samwise cyrus/master[6863]: service imap pid 6957 in
READY state: now unavailable and in BUSY state
Aug 9 14:32:04 samwise cyrus/master[6863]: service imap now has 0
ready workers
Aug 9 14:32:04 samwise cyrus/master[6863]: service imap pid 6957 in
BUSY state: now serving connection
Aug 9 14:32:04 samwise cyrus/master[6863]: service imap now has 0
ready workers
Aug 9 14:32:04 samwise cyrus/imap[6957]: login: samwise.emergen.biz
[192.168.0.118] mhashmi GSSAPI User logged in
Aug 9 14:32:07 samwise cyrus/imap[6957]: telling master 1
Aug 9 14:32:07 samwise cyrus/master[6863]: service imap pid 6957 in
BUSY state: now available and in READY state
Aug 9 14:32:07 samwise cyrus/master[6863]: service imap now has 1 ready workers
--- login again via the same command (3 seconds later) ---
samwise:/# imtest -m GSSAPI samwise.emergen.biz
S: * OK samwise.emergen.biz Cyrus IMAP4 v2.2.13-Debian-2.2.13-10 server ready
C: C01 CAPABILITY
S: * CAPABILITY IMAP4 IMAP4rev1 ACL QUOTA LITERAL+ MAILBOX-REFERRALS
NAMESPACE UIDPLUS ID NO_ATOMIC_RENAME UNSELECT CHILDREN MULTIAPPEND
BINARY SORT THREAD=ORDEREDSUBJECT THREAD=REFERENCES ANNOTATEMORE IDLE
STARTTLS AUTH=GSSAPI SASL-IR
S: C01 OK Completed
C: A01 AUTHENTICATE GSSAPI
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
failure: prot layer failure
--- log in mail.log ---
Aug 9 14:32:11 samwise cyrus/imap[6957]: telling master 2
Aug 9 14:32:11 samwise cyrus/master[6863]: service imap pid 6957 in
READY state: now unavailable and in BUSY state
Aug 9 14:32:11 samwise cyrus/master[6863]: service imap now has 0
ready workers
Aug 9 14:32:11 samwise cyrus/imap[6957]: accepted connection
Aug 9 14:32:11 samwise cyrus/imap[6957]: telling master 3
Aug 9 14:32:11 samwise cyrus/master[6863]: service imap pid 6957 in
BUSY state: now serving connection
Aug 9 14:32:11 samwise cyrus/master[6863]: service imap now has 0
ready workers
Aug 9 14:32:11 samwise cyrus/master[6863]: process 6957 exited,
signaled to death by 11
Aug 9 14:32:11 samwise cyrus/master[6863]: service imap pid 6957 in
BUSY state: terminated abnormally
Aug 9 14:32:11 samwise cyrus/master[6863]: service imap now has 0 ready workers
---- If I work via plain authentication, no problems are encountered. The same is observed when working with cyradm and GSSAPI authentication as opposed to PLAIN auth. If I can provide further information please do let me know. I appreciate any help. Thank you. -- Mustafa A. Hashmi ---- Cyrus Home Page: http://cyrusimap.web.cmu.edu/ Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
|
|
|