Quoting Morten <lists@xxxxxxxxxx>:
> My /etc/imapd.conf has:
>
> sasl_pwcheck_method: saslauthd
>
> So I guess the question is, how to make SASL authenticate OS users. Any tips?
Check if saslauthd is running. If not, "/etc/init.d/saslauthd start" (don't
forget to enable it to start during boot, "chkconfig saslauthd on"). You'll
find saslauthd logs in /var/log/messages. My guess is that most likely you
haven't started saslauthd service.
The config file for saslauthd is /etc/sysconfig/saslauthd. To be more
precise,
it is config file for the startup script. Check the MECH line. If
your system
accounts are all in local files (/etc/passwd, /etc/shadow), the default
MECH=shadow is fine. If they are on NIS or something similar, you might
consider changing MECH line to MECH=pam. See manual page for saslauthd for
more info.
There's also testsaslauthd program that you can use to test if
saslauthd itself
works correctly. However, you must give it password on command line,
so change
it to something dummy before using this program.
If saslauthd is running, and it runs correctly (test with
testsaslauthd), user's
INBOX folder probably doesn't exist. It can be created automatically
when user
logins for the first time, or you can create it manually.
To have it automatically created, add this option to imapd.conf:
autocreatequota: -1
You can also use autocreateinboxfolders and autosubscribeinboxfolders
options to
automatically create some subfolders for user (such as Drafts or Sent
Items for
example) when INBOX folder is automatically created. See imapd.conf manual
page for more details.
If you prefer to create mailboxes manually, you can use cyradm command
for that:
cyradm --user cyrus localhost
Make sure you set password for cyrus account first.
Than, in cyradm, you would use "cm" (create mailbox) command to create the
mailbox under the user tree (yes, you must type "user." part, otherwise you
would be creating shared folder):
> cm user.username
----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.
