• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 3534
  • Last Modified:

cyradm: cannot authenticate to server with as cyrus

I just installed cyrus-imap2 and cyrus-sasl2, the build went fine, and after some poking around and finding out you need to install the Perl modules by hand, cyradm will at least execute, however, it comes up with : cyradm: cannot authenticate to server with  as cyrus

I have made sure that saslauthd is runiing as well as master and I have built a new sendmail.cf file and restarted all services. I made all the imap.conf and cyrus.conf files with user cyrus listed as an admin.

I'm obviously missing something. PLz help.
1 Solution
Hi psimation,

I had exactly the same problem when setting up cyrus2 and have been struggling around for several hours. then I did something unusual, yes, I've read the documentation...;-)
Unfortunately I cannot remember which exactly was the point, but the following worked for me:
- starting saslauthd
- assigning user cyrus a password via "passwd cyrus"
- "cyradm --auth login localhost --user cyrus"

( I think "--auth login" was the point)

Since you use RH as far as I remember, I could email you the complete SuSE-cyrus-Readme if the above shouldn't work for you.


PS: for using "login" as authentication mechanism, you probably have to start saslauthd with the "-a pam" option.
psimationAuthor Commented:
Thanks, will try that.
I did see that cyrus didn't want to install before I gave it the ./configure --with-auth=unix ..
What does this means regarding my auth capabilities?
I'm used to cyrus "1"...
psimationAuthor Commented:
Well, at least I'm getting different errors...

[root@dell root]# cyradm --auth login localhost --user cyrus
IMAP Password:

Login failed: no mechanism available at /usr/lib/perl5/5.8.0/Cyrus/IMAP/Admin.pm line 114
cyradm: cannot authenticate to server with login as cyrus
[root@dell root]#
Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

psimationAuthor Commented:
Hi XoF

Any news?
I don't know if Kerberos is causing my headaches, but I tried to compile the cyrus-imap server with Kerberos as the auth , but it told me that it couldn't find the DES library, so I got the DES library, installed it, but now it moans about not finding kerberos, even though I have it installed in /usr/kerberos/
psimationAuthor Commented:
Hi XOF, are you still there?

I don't know what is happening.
I can use the newly installed cyradm to administer one of my webservers with
cyradm --auth login myserver.com --user cyrus
without problem, but as soon as it's localhost, it won't authenticate.
I did do a saslpasswd2 cyrus , and saslauthd is running...


I've been struggling with this for weeks and it's been driving me NUTS!!!  So let's see if I can help out...

Which version of RH are you running?

What auth mechanism is being used by cyrus (from compile time)?  What auth mechanism would be your choice?  (as in do you want to use the separate SASLDB, or the OS authentication like PAM or shadow?)

Which version of SASL are you using?  Are you using the one that was preloaded, or did you compile and install a new SASL library?

Which auth is saslauthd set to use? (check run-time options with "ps ax |grep sasl")

You can also start by making sure you're setting the password for the cyrus user (or other users) in the correct version.  i.e.:

/usr/sbin/saslpasswd2 cyrus

check to make sure the user has been added by:


You may also need to make sure the following line is added to your /etc/imapd.conf file:

allowplaintext: yes

Start there, answer those questions, and let me know where you end up.

This old question needs to be finalized -- accept an answer, split points, or get a refund.  For information on your options, please click here-> http:/help/closing.jsp#1 
Post your closing recommendations!  No comment means you don't care.
No comment has been added lately, so it's time to clean up this TA.
I will leave a recommendation in the Cleanup topic area that this question is to:

Be PAQ'd/Points No Refunded

Please leave any comments here within the next seven days.


EE Cleanup Volunteer
PAQed per request/recommendation - No Refund

Community Support Moderator

Featured Post

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now