Koozali.org: home of the SME Server

IMAP password rejection

Steven Curren

IMAP password rejection
« on: February 01, 2003, 06:55:29 AM »
Folks,

Wondering if any-one can help me here.. I seem to have never ending problems with IMAP.

Heres the deal, I set up an internal e-mail account that I would like anyone on the internal network to access.

I set up a common e-mail account and setup up outlook express on windows 98 while loged in under my SME server account, after a bit of trail an error I got the thing to work. Logs in reads mail, sends mail.

I just assumed that because I set outlook express to remember the password / UID that anyone would be able to log into the IMAP server, but this does not seem to be the case. When I use another account (domain login) the IMAP server rejects the outlook remembered login / password.

Here some log extracts (names changed):

While logged in using my domain account (using OE UID/PW):
Feb  1 14:33:46 PAM_pwdb[17928]: (imap) session opened for user by (uid=0)
Feb  1 14:33:47 PAM_pwdb[17928]: (imap) session closed for user


Login with a different domain account account:
Feb  1 14:31:06 PAM_pwdb[17814]: authentication failure; (uid=0) -> for imap service
Feb  1 14:31:42 PAM_pwdb[17846]: authentication failure; (uid=0) -> for imap service


Looks like PAM, anyone have any ideas, do the SMB and IMAP UID/PW have to be same?

Steven Curren

Re: IMAP password rejection
« Reply #1 on: February 01, 2003, 07:47:48 AM »
Have noted that I am able to log into the IMAP account, if I do not log into the domain? Is this a PAM configuration issue (uid=0)?

Charlie Brady

Re: IMAP password rejection
« Reply #2 on: February 01, 2003, 08:08:37 PM »
Steven Curren wrote:
 
> Have noted that I am able to log into the IMAP account, if I
> do not log into the domain? Is this a PAM configuration issue
> (uid=0)?

It's most likely an Outlook issue. The imap daemon has no information as to whether the user is logged onto a domain or not. If Outlook sends the right username and password, the user will be authenticated.

The (uid=0) is normal. Imap needs to start out as root in order to be able to switch id to the authenticated user. So authentication is done as the root user, before the switch in uid.

> Looks like PAM, anyone have any ideas, do the SMB and IMAP
> UID/PW have to be same?

Each user has only one SME password. But different users can in theory be logged in for file sharing and for IMAP access.

Charlie

Bill Talcott

Re: IMAP password rejection
« Reply #3 on: February 03, 2003, 06:26:17 PM »
By default, each Windows logon has a separate memory of OE passwords. If you logon as Joe, and setup an OE account for common@here.com with a saved password, the password will not still be there when Bob logs into that PC. If you want to save the password for each user of the PC, you'll have to login as each user and enter the password for the common account in OE. There may be a way to accomplish the same thing with default profiles or registry entries or something, but that's what you need to do.

Note that the account name is shared among the different Windows logons though. I had problems with this, where multiple users would end up changing the actual OE logon names, screwing things up for the other users of that PC.

Jeroen

Re: IMAP password rejection
« Reply #4 on: February 04, 2003, 12:08:54 AM »
You could of course try another email client, like the Bat or Pegasus mail. Don't think they have that issue.
I for that reason use OE...every client logging on get's it's own mail :-)

Jeroen