POP/IMAP authentication error

Hi All,

 Platform: Mandriva 2006.0
 Package Versions: cyrus-imapd-2.2.12, cyrus-sasl-2.1.22, openldap-2.3.6

I have been able to work out the problems I was having previously with 
importing the LDIF data, etc.  I have have a working ISPMan install 
(everything on one box).

I have added one domain and one user.  When I test POP log in, I get the 
following error in my mail log:

plaintext alan_murrell_ca SASL(-13): authentication failure: checkpass 
failed

(I have not yet installed Perdition, so I am of course logging in using 
the 'user_domain_tld' form of the username, which is, of course, the 
"true" username)

Here are the relevent files:

--- slapd.conf ---
include         /etc/openldap/schema/core.schema
include         /etc/openldap/schema/cosine.schema
include         /etc/openldap/schema/nis.schema
include         /etc/openldap/schema/misc.schema
include         /etc/openldap/schema/inetorgperson.schema
include         /etc/openldap/schema/dnszone.schema
include         /etc/openldap/schema/pureftpd.schema
include         /etc/openldap/schema/ispman.schema
include         /etc/openldap/schema/RADIUS-LDAPv3.schema

pidfile     /var/run/slapd.pid
argsfile    /var/run/slapd.args

loglevel 256

database    ldbm
directory   /var/lib/ldap

suffix "o=ispman"
rootdn "cn=admin, o=ispman"
rootpw {crypt}JvTtW9pZLY0qY

# Indices to maintain
index   objectClass eq
index   uid,sn,cn   pres,eq,sub
index   uidnumber,gidnumber pres,eq
index   memberuid   pres,eq
index   mail,mailLocalAddress,mailAlias pres,eq
--- slapd.conf ---


--- ldap.conf ---
host 127.0.0.1
base o=ispman
rootbinddn cn=admin,o=ispman
--- ldap.conf ---


--- imapd.conf ---
configdirectory: /var/lib/imap
partition-default: /var/spool/imap
admins: cyrus
popminpoll: 0
allowanonymouslogin: no
sieveusehomedir: no
sievedir: /var/lib/imap/sieve
sendmail: /usr/sbin/sendmail
hashimapspool: true
sasl_minimum_layer: 0
sasl_pwcheck_method: saslauthd
sasl_mech_list: PLAIN LOGIN
allowplaintext: yes
lmtp_downcase_rcpt: yes
tls_ca_file: /etc/ssl/cyrus-imapd/cyrus-imapd.pem
tls_cert_file: /etc/ssl/cyrus-imapd/cyrus-imapd.pem
tls_key_file: /etc/ssl/cyrus-imapd/cyrus-imapd.pem
--- imapd.conf ---


--- cyrus.conf ---
START {
 recover   cmd="ctl_cyrusdb -r"
}

SERVICES {
 imap      cmd="imapd -s -U 30" listen="imap" prefork=0 maxchild=100
 imaps     cmd="imapd -s" listen="imaps" prefork=1
 pop3      cmd="pop3d -U 30" listen="pop3" prefork=0 maxchild=50
 pop3s     cmd="pop3d -s" listen="pop3s" prefork=1
 sieve     cmd="timsieved" listen="sieve" prefork=0

 lmtp      cmd="lmtpd" listen="lmtp" prefork=0

listen="/var/lib/imap/socket/notify" proto="udp" prefork=1
}

EVENTS {
 checkpoint    cmd="ctl_cyrusdb -c" period=30
 delprune  cmd="cyr_expire -E 3" at=0400
 tlsprune  cmd="tls_prune" at=0400
}

--- cyrus.conf ---


--- /etc/pam.d/imap ---
auth    sufficient      pam_ldap.so service=system-auth
account sufficient      pam_ldap.so service=system-auth
--- /etc/pam.d/imap ---

--- /etc/pam.d/pop ---
auth    sufficient      pam_ldap.so service=system-auth
account sufficient      pam_ldap.so service=system-auth
--- /etc/pam.d/pop ---

--- /etc/pam.d/system-auth ---
auth        required      pam_nologin.so
auth        required      pam_env.so
auth        sufficient    pam_unix.so likeauth nullok
auth        sufficient    pam_ldap.so use_first_pass
auth        required      pam_deny.so

account     sufficient    pam_unix.so
account     sufficient    pam_ldap.so
account     required      pam_deny.so

password    required      pam_cracklib.so retry=3 minlen=4 dcredit=0 
ucredit=0
password    sufficient    pam_unix.so nullok use_authtok md5 shadow 
use_first_pass
password    sufficient    pam_ldap.so use_authtok use_first_pass
password    required      pam_deny.so

session     required      pam_limits.so
session     sufficient    pam_ldap.so
session     sufficient    pam_unix.so
session     required      pam_deny.so
--- /etc/pam.d/system-auth ---


--- /etc/sysconfig/saslauthd ---
SASL_AUTHMECH=ldap
# Ldap configuration file (if ldap auth mech is used)
SASL_MECH_OPTIONS=/etc/saslauthd.conf
# Extra options (for list see saslauthd -h)
SASLAUTHD_OPTS=
--- /etc/sysconfig/saslauthd ---


--- /etc/saslauthd.conf ---
ldap_servers: ldap://127.0.0.1
ldap_bind_dn: cn=admin,o=ispman
ldap_password: XXXXXXXXXXXX
--- /etc/saslauthd.conf ---

Thanks again, for your help.

-Alan



-------------------------------------------------------
This SF.Net email is sponsored by xPML, a groundbreaking scripting language
that extends applications into web and mobile media. Attend the live webcast
and join the prime developer group breaking into this new coding territory!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642