From: Marten Lehmann (no email)
Date: Thu Jan 04 2007 - 11:14:53 EST
Hello,
> >> What do I have to enter at "admins" in /etc/imapd.conf?
> Something that matches your special regexp. In my following example it
> is cyrus.
>
> I.e. <snip>
> authz-regexp uid=cyrus,cn=[^,]*,cn=auth
> dn:cn=admin,dc=mailservices
> authz-regexp uid=([^,]*),cn=[^,]*,cn=auth
> dn.regex:cn=$1,ou=users,dc=mailservices
> <snap>
where can I find more examples of this?
My saslauthd.conf looks like this:
/etc/saslauthd.conf
ldap_servers: ldap://1.2.3.4/
ldap_timeout: 10
ldap_time_limit: 10
ldap_search_base: ou=users,dc=mailservices
ldap_auth_method: bind
ldap_filter: (cn=%u)
ldap_debug: 0
ldap_verbose: off
ldap_ssl: no
ldap_start_tls: no
ldap_referrals: no
And this is my imapd.conf:
/etc/imapd.conf
configdirectory: /var/cyrus/config
partition-default: /var/cyrus/spool
admins: cyrus
sievedir: /var/cyrus/config/sieve
sendmail: /usr/sbin/sendmail
altnamespace: true
hashimapspool: true
unixhierarchysep: true
virtdomains: userid
allowusermoves: true
sasl_pwcheck_method: saslauthd
servername: imap.localhost
munge8bit: true
username_tolower: true
From what I can see, the user cyrus would never be passed to LDAP,
since the saslauthd.conf defines which searchbase to use. And sasl would
never simply pass "cyrus" but attach the hostname on an empty realm, so
LDAP would get something like cyrus at imap dot localhost dot
Regards
Marten
---- Cyrus Home Page: http://cyrusimap.web.cmu.edu/ Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
|
|
|