courier IMAP login setup

[david at thekramers.net (David Kramer)]

I'm trying to get Courier IMAP set up on my new server, and I can't get
the login to work.  As far as I can tell, the Courier docs hardly
discuss the authentication setup.  I'm moving from UW-IMAP on the old
server, so I'm a Courier virgin.  I'm using Postfix for SMTP.  I'm
testing using Thunderbird on the server itself for now to rule out any
firewall issues.

I would like to set it up so I'm doing IMAP over SSL and/or TLS (I've
seen conflicting info on exactly what TLS is, but I think it's an
initial handshake before going over SSL, right?).  I would like to use
regular UNIX userid/password to authenticate against, which I assume
means using PAM authentication.

When I try to log in, I get "Login to server localhost failed."

In my /var/log/mail, I get
-------------------------------------------------
Nov 27 17:35:53 uninew imapd-ssl: LOGIN: DEBUG: ip=[::ffff:127.0.0.1],
command=LOGIN
Nov 27 17:35:53 uninew imapd-ssl: LOGIN: DEBUG: ip=[::ffff:127.0.0.1],
username=david
Nov 27 17:35:53 uninew imapd-ssl: authdaemon: starting client module
Nov 27 17:35:54 uninew imapd-ssl: authdaemon: TEMPFAIL - no more modules
will be tried
Nov 27 17:35:59 uninew imapd-ssl: LOGIN FAILED, ip=[::ffff:127.0.0.1]
-------------------------------------------------

Sure smells to me like the authdaemon stuff is not set up right.  This
is what's running:
-------------------------------------------------
uninew:/etc/pam.d # ps -elf | grep courier (edited for brevity)
/usr/sbin/courierlogger -pid=/var/run/authdaemon.courier-imap/pid -start

/usr/lib/courier-imap/authlib/authdaemond.ldap

/usr/lib/courier-imap/authlib/authdaemond.ldap

/usr/lib/courier-imap/authlib/authdaemond.ldap

/usr/lib/courier-imap/authlib/authdaemond.ldap

/usr/lib/courier-imap/couriertcpd -address=0
-stderrlogger=/usr/sbin/courierlogger -stderrloggername=imapd-ssl
-maxprocs=4 -maxperip=4 -pid=/var/run/imapd-ssl.pid -nodnslookup
-noidentlookup 993 /usr/sbin/couriertls -server -tcpd
/usr/sbin/imaplogin /usr/lib/courier-imap/authlib/authdaemon
/usr/sbin/imapd Maildir

/usr/sbin/courierlogger imapd-ssl
-------------------------------------------------

Here's my config files:
/etc/courier/imap:
http://thekramers.net/tmp/courier.imap

/etc/courier/imap-ssl:
http://thekramers.net/tmp/courier.imap-ssl

/etc/courier/authdaemonrc:
http://thekramers.net/tmp/courier.authdaemonrc

/etc/pam.d/imap:
http://thekramers.net/tmp/courier.etc.pamd.imap


Thanks in advance for any clues.