[Dovecot] LDAP imaps,pop3s authentication problem
Hi, i'm using LDAP authentication with dovecot, and it's working
flawlessly,until i enable SSL.. (even imaps or pop3s) i can't log in...
if i test the certificates, and the login with the openssl s_client - host example.com -port 993 -verify -debug
command, it works, until i
want to log in... it lists the capibilities, but when i login it says
"01 NO LOGIN failed"... no log messages appears in the logfile, only
when i login without SSL... i've tried the newest beta8 and older
versions of the server, but the effect is the same.. i'm really
confused, becouse i have lots servers running dovecot, but with mysql
authentication, and i didn't have any problems with them... the
biggest problem is, that no log messages being generated during the
process (with or without auth_debug, and auth_verbose options
enabled), so i can't figure it out why is it happening.. it's
working if i authenticate from other sources, just like passdb, or
mysql...
thx for the answers in advance,
->Peter Susán tel.: +36-20-395-3751 mail: peter@susinet.hu
On Fri, 2006-05-19 at 15:57 +0200, Peter Susán wrote:
Hi, i'm using LDAP authentication with dovecot, and it's working
flawlessly,until i enable SSL.. (even imaps or pop3s) i can't log in... if i test the certificates, and the login with theopenssl s_client - host example.com -port 993 -verify -debug
command, it works, until i
want to log in... it lists the capibilities, but when i login it says
"01 NO LOGIN failed"... no log messages appears in the logfile, only
when i login without SSL... i've tried the newest beta8 and older
versions of the server, but the effect is the same.. i'm really
confused, becouse i have lots servers running dovecot, but with mysql
authentication, and i didn't have any problems with them... the
biggest problem is, that no log messages being generated during the
process (with or without auth_debug, and auth_verbose options
enabled), so i can't figure it out why is it happening.. it's
working if i authenticate from other sources, just like passdb, or
mysql...
Did you figure this out yet? If openssl s_client allows you to give commands, you have auth_debug=yes and you manually try to give the LOGIN command, then there must be messages in the log file showing something. If you don't see them, you're looking into wrong place..
participants (2)
-
Peter Susán
-
Timo Sirainen