sasl / sieveshell can't authenticate

[meone]

Hi,

i am setting up a Debian (testing) Email-Server with cyrus. My last Cyrus mailserver was fed with mails through fetchmail, spamd and procmail (wich i used to run "| /usr/sbin/cyrdeliver -a user -m folder user" as a workaround-mailfilter )
now i want to use the included mailfilter with sieve-scripts, but i am stuck with sasl authentication and the sieveshell

this is my config:

• pusteblume:/etc# cat imapd.conf | grep -v "^#" | grep -v "^$"
  configdirectory: /var/lib/cyrus
  defaultpartition: default
  partition-default: /var/spool/cyrus/mail
  partition-news: /var/spool/cyrus/news
  newsspool: /var/spool/news
  altnamespace: yes
  unixhierarchysep: no
  admins: cyrus
  allowanonymouslogin: no
  umask: 077
  sieveusehomedir: false
  sievedir: /var/spool/sieve
  hashimapspool: true
  allowplaintext: yes
  sasl_mech_list: PLAIN
  allowapop: no
  sasl_minimum_layer: 0
  sasl_maximum_layer: 256
  sasl_pwcheck_method: auxprop
  sasl_auxprop_plugin: sasldb
  tls_ca_path: /etc/ssl/certs
  tls_session_timeout: 1440
  tls_cipher_list: TLSv1:SSLv3:SSLv2:!NULL:!EXPORT:!DES:!LOW:@STRENGTH
  lmtpsocket: /var/run/cyrus/socket/lmtp
  idlesocket: /var/run/cyrus/socket/idle
  notifysocket: /var/run/cyrus/socket/notify

and this is what i get:
cyradm works fine

• pusteblume:/etc# cyradm -u cyrus localhost
  IMAP Password:
  localhost.mydomain> lm
  user.micha (\HasNoChildren)
  localhost.mydomain>quit

but when i try to use the sieveshell it fails

• pusteblume:/etc# sieveshell -u cyrus -a cyrus localhost
  connecting to localhost
  Please enter your password:
  unable to connect to server at /usr/bin/sieveshell line 174, <STDIN> line 1.

and here are the logs, that is what it throws out:

• pusteblume:/etc# tail -n 1 /var/log/auth.log
  Feb 6 02:53:08 pusteblume perl: No worthy mechs found
  pusteblume:/etc# tail -n 4 /var/log/syslog
  Feb 6 02:53:06 pusteblume cyrus/master[6691]: about to exec /usr/lib/cyrus/bin/timsieved
  Feb 6 02:53:06 pusteblume cyrus/sieve[6691]: executed
  Feb 6 02:53:06 pusteblume cyrus/sieve[6691]: accepted connection
  Feb 6 02:53:08 pusteblume cyrus/master[6666]: process 6691 exited, status 0

it seems like there was no auth-mechanism good enough for sieveshell, when i try with "PLAIN cram-md5" as mechs i get

• pusteblume:/etc# tail -n 2 /var/log/auth.log
  Feb 6 03:01:48 pusteblume cyrus/timsieved[6746]: attempting server step after doneflag
  Feb 6 03:01:48 pusteblume perl: No worthy mechs found

with only cram-md5 it is again "No worthy mechs found"
i am using sieveshell:
# $Id: sieveshell.pl,v 1.19 2002/12/02 19:45:11 rjs3 Exp $

and the latest cyrus-common and cyrus-imapd debian packages (2.1.18-3)

has anyone a hint on this

Sven