Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 01 Sep 2004 00:44:03 +0900
From:      Luke Kearney <lukek@meibin.net>
To:        Chris <metrion@gmail.com>
Cc:        FreeBSD-Q <freebsd-questions@freebsd.org>
Subject:   Re: opiekeys and IMAP
Message-ID:  <20040901004038.8B31.LUKEK@meibin.net>
In-Reply-To: <804fd9a30408310838350d2c58@mail.gmail.com>
References:  <804fd9a30408310838350d2c58@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help

On Tue, 31 Aug 2004 08:38:46 -0700
Chris <metrion@gmail.com> spake thus:

> Hi all,
> Having trouble with security features, I think, that I can't seem to
> resolve. I have a fresh install of 4.10 from FTP and am trying to set
> up Cyrus IMAP with Squirrelmail front end. I was following the guide
> at http://www.cse.ucsc.edu/~venkat/tutorial1.html, more for reference
> to FreeBSD as I've completed this mail setup on Linux a couple of
> times ( I  admit I could have been lucky :P  ).
> 
> So, anyway, I get things installed and configured as I have before and
> test my IMAP as the 'cyrus' user and that all works. But when I try to
> log into the 'cyradm' utility to create mailboxes, I get this:
> 
> %cyradm localhost
> Password: <password><enter>
> Segmentation fault
> %
> 
> with these log entries:
> (This is when I first start the 'cyradm localhost')
> Aug 30 16:47:40 vzwmail imapd[13037]: OTP unavailable because can't
> read/write key database /etc/opiekeys: Permission denied

Looks like the user that is running cyradm does not have permission to
open it's user db.

> 
> (and then when I enter my password:)
> 
> Aug 31 08:13:44 vzwmail imapd[14121]: Could not open db
> Aug 31 08:13:44 vzwmail imapd[14121]: Could not open db

Again here the log seems to suggest that the user - possibly cyradm could
not open the user db

> Aug 31 08:13:44 vzwmail imapd[14121]: no secret in database
> Aug 31 08:13:44 vzwmail imapd[14121]: badlogin: localhost[::1]
> DIGEST-MD5 [SASL(-13): user not found: no secret in database]
> Aug 31 08:13:47 vzwmail /kernel: pid 14120 (perl), uid 60: exited on signal 11
> 
> Here are the /etc/opie* Permissions:
> -rw-------  1 root  wheel  466 Aug 30 16:27 opieaccess
> -rw-r--r--  1 root  wheel  200 Aug 30 16:33 opiekeys

If this is where the information is kept then perhaps you would either
need to change the permissions here or run your imap program as root
which is probably not the optimal setup.

> 
> I do have some keys made with 'opiepasswd' (I hope I did it right):
> #cat opiekeys
> cyrus 0499 vz8252           ff3435334004cd3e  Aug 30,2004 16:30:23
> 
> #cat opieaccess
> permit 172.16.0.0 255.255.0.0  (my internal network)
> 
> Only thing I changed in my imapd.conf was this from install (it was auxprop):  
> sasl_pwcheck_method: saslauthd
> 
> and I made a passwd for the cyrus user also using saslpasswd2 program
> 
> I hope this mess all makes sense :) I don't know what to do at this
> point. I don't understand this opeykeys things very well at all. Any
> assistance is greatly appreciated!
> 
> Thanks!
> Chris

Check the permissions out and see what happens.

HTH

LukeK

-- 
Luke Kearney <lukek@meibin.net>



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20040901004038.8B31.LUKEK>