Re: disallow bind_anon creates problem in cyrus

From: Roland Felnhofer (no email)
Date: Tue Mar 20 2007 - 05:04:57 EDT

  • Next message: Rudy Gevaert: "Re: how to force cyrus to honor domain name with user name ?"

    Hi,

    that should give you a hint:

            saslauthd.conf

    ldap_servers: ldap://127.0.0.1
    ldap_search_base: ou=people,dc=example,dc=com
    ldap_bind_dn: cn=proxyagent,ou=special_users,dc=example,dc=com
    ldap_password: password
    ldap_scope: one
    ldap_uidattr: uid
    ldap_filter_mode: yes
    ldap_filter: uid=%u

    The first 4 (ldap_servers, ldap_search_base, ldap_bind_dn, ldap_password) should be sufficient.

     

    Best regards
    Roland

    JOYDEEP wrote:
    > Dear list,
    >
    > to secure my ldap server I have added the line "disallow bind_anon" in
    > slapd.conf.
    > I have checked by "ldapsearch" command and now my ldap doesn't allow
    > anonymous bind.
    > But I have now problem to use cyrus as it also based on LDAP authentication.
    > I can't log in in cyrus with Correct userid and passwd but if I disable
    > the "disallow bind_anon" I can again use cyrus.
    >
    > Could any one kindly sugeest me to fix it ?
    >
    > here is my /etc/imapd.conf
    >
    > ==============================================================
    > configdirectory: /var/lib/imap
    > partition-default: /var/spool/imap
    > sievedir: /var/lib/sieve
    > admins: cyrus
    > allowplaintext: yes
    > sasl_mech_list: LOGIN PLAIN
    > allowanonymouslogin: no
    > autocreatequota: 10000
    > reject8bit: no
    > quotawarn: 90
    > timeout: 30
    > poptimeout: 10
    > dracinterval: 0
    > drachost: localhost
    > sasl_pwcheck_method: saslauthd
    > servername:linux.kolkatainfoservices.in
    > lmtp_overquota_perm_failure: no
    > lmtp_downcase_rcpt: yes
    > unixhierarchysep: yes
    > loginrealms: kolkatainfoservices.in
    > hashimapspool: true
    > lmtpsocket: /var/lib/imap/socket/lmtp
    > ==============================
    >
    >
    >
    >
    >
    >
    > ----
    > Cyrus Home Page: http://cyrusimap.web.cmu.edu/
    > Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
    > List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
    >



    ----
    Cyrus Home Page: http://cyrusimap.web.cmu.edu/
    Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
    List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
    


  • Next message: Rudy Gevaert: "Re: how to force cyrus to honor domain name with user name ?"





    Hosted Email Solutions

    Invaluement Anti-Spam DNSBLs



    Powered By FreeBSD   Powered By FreeBSD