4.0 RC1 imapsync with admin???

[kirme3]

This is in reference to Admin account allowed access to other mailboxes via IMAP

I am testing using imapsync with the --authuser2 adminAcct option on Zimbra 4.0 RC1. I am having trouble getting it to work. Is there anything I need to set up on the Zimbra server to allow this?

Thanks!

[phoenix]

Have you tried enabling clear text login on the server?

[kirme3]

Yes...as far as I know...in both the Admin UI and when I do a zmprov gacf, it shows:

zimbraImapCleartextLoginEnabled: TRUE

I've also done a zmcontrol stop|start and zmperditionctl stop|start

[dkarp]

You're going to have to imapsync directly to the target server rather than going through perdition, as perdition resolutely refuses to support AUTH PLAIN (the mechanism used when the --authuser2 switch is specified).

[kirme3]

This is the only server in the whole thing....do you mean to use port 7143 instead?

Thanks

[dkarp]

From what you wrote, it looks like you're running perdition. Don't point imapsync at perdition. Point it at the Zimbra server.

If you still get failures, please post the logfiles so we can try to debug!

[kirme3]

I know I am running perdition on the Zimbra server...how do I point it to something different when it's installed on the same server by default?

Here is the excerpt from the zimbra.log file from when I try to do the login:

2006-08-31 14:14:17,118 INFO [ImapServer-8] [] imap - [x.x.x.x] connected
2006-08-31 14:14:17,127 WARN [ImapServer-8] [ip=x.x.x.x;] imap - LOGIN failed
com.zimbra.cs.account.AccountServiceException: authentication failed for acct@zimbra.tst
at com.zimbra.cs.account.AccountServiceException.AUTH _FAILED(AccountServiceException.java:78)
at com.zimbra.cs.account.ldap.LdapProvisioning.verify Password(LdapProvisioning.java:2344)
at com.zimbra.cs.account.ldap.LdapProvisioning.authAc count(LdapProvisioning.java:2184)
at com.zimbra.cs.account.ldap.LdapProvisioning.authAc count(LdapProvisioning.java:2168)
at com.zimbra.cs.imap.ImapHandler.authenticate(ImapHa ndler.java:733)
at com.zimbra.cs.imap.ImapHandler.login(ImapHandler.j ava:702)
at com.zimbra.cs.imap.ImapHandler.doLOGIN(ImapHandler .java:690)
at com.zimbra.cs.imap.ImapHandler.executeRequest(Imap Handler.java:423)
at com.zimbra.cs.imap.ImapHandler.processCommand(Imap Handler.java:227)
at com.zimbra.cs.tcpserver.ProtocolHandler.processCon nection(ProtocolHandler.java:231)
at com.zimbra.cs.tcpserver.ProtocolHandler.run(Protoc olHandler.java:198)
at EDU.oswego.cs.dl.util.concurrent.PooledExecutor$Wo rker.run(Unknown Source)
at java.lang.Thread.run(Thread.java:613)
2006-08-31 14:14:17,129 INFO [ImapServer-8] [] ProtocolHandler - Handler exiting normally

[marcmac]

Read the imapsync documentation, and point it at the port that tomcat's listening on for IMAP (probably 7143)

[kirme3]

I've tried it already...When I do a packet capture of the conversation I get:

* OK IMAP4 Ready clipper.eiu.edu 00020788
1 CAPABILITY
* CAPABILITY IMAP4rev1 STARTTLS BINARY CHILDREN ID LITERAL+ LOGIN-REFERRALS NAMESPACE QUOTA SASL-IR UIDPLUS UNSELECT
1 OK CAPABILITY
2 CAPABILITY
* CAPABILITY IMAP4rev1 STARTTLS BINARY CHILDREN ID LITERAL+ LOGIN-REFERRALS NAMESPACE QUOTA SASL-IR UIDPLUS UNSELECT
2 OK CAPABILITY
3 Login "test" {8}
+ OK ready for additional input
adminPass
3 NO Re-Authentication Failure

....test is the account I want to copy to...should I be seeing something about using my admin account?

[marcmac]

What command are you running? And are you trying to log into the account with the account's password, or the admin password?