Re: no global admin with virtual domains? [was Re: saslpasswd and virtual domains]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi Baltasar!

former03 | Baltasar Cevc wrote:
Hi Rudy,

On 15.05.2006, at 08:49, Rudy Gevaert wrote:

mitrohin a.s. wrote:

defaultdomain always is removed from username. imho, sasl routines
use hostname as realm for this case.



Sadly If I set the default domain to the hostname from the machine and add the user 'cyrus' with saslpasswd it can't login yet.

jura:/mail/mail1# cat etc/imapd.conf:
defaultdomain: jura
admins: cyrus@xxxxxxxxxxxxx cyrus

The first address would be the virtual domain admin of mail.ugent.be, the second is a global admin - you have to set a SASL secret for cyrus@<servername>. In case your servername is mail.ugent.be you should delete the first entry. I haven't completely undestood the domain conversions, however, if I'm not misunderstood, defaultdomain has only one function: to be replaced by the servername - meaning that in your example if you try to login as user1@jura, you'd end up with the same result as user1@xxxxxxxxxxxxx (supposing that that's your servername).

Hope that helps,


It gave me a bit of help. The hostname of the server is jura so I have added a user cyrus@jura to the /etc/sasldb2 file. I have removed the default domain parameter.

jura:/usr/lib/sasl2# sasldblistusers2
cyrus@jura: userPassword
cyrus@xxxxxxxxxxxxx: userPassword


jura:/usr/lib/sasl2# head /mail/mail1/etc/imapd.conf
admins: cyrus cyrus@xxxxxxxxxxxxx
allowanonymouslogin: no
altnamespace: yes
configdirectory: /mail/mail1/var/imap
#defaultdomain: mail.ugent.be
defaultpartiton: default
duplicatesuppression: 1
expunge_mode: delayed
hashimapspool: 1
mboxkey_db: skiplist


I can now log in as cyrus@xxxxxxxxxxxxx and cyrus@jura:

jura:/usr/lib/sasl2# cyradm -u cyrus@xxxxxxxxxxxxx mail1.ugent.be
Password:
mail1.ugent.be> lm
user/foo.bar (\HasNoChildren)       user/rudy.gevaert (\HasNoChildren)
user/foo.fafa (\HasNoChildren)      user/testuser2 (\HasNoChildren)
mail1.ugent.be> quit
jura:/usr/lib/sasl2# cyradm -u cyrus@jura mail1.ugent.be
Password:
mail1.ugent.be> lm
mail1.ugent.be> cm user/fifie
createmailbox: Permission denied
mail1.ugent.be> cm user/fifie@jura
createmailbox: Permission denied
mail1.ugent.be> cm user/fifi@xxxxxxxxxxxxx
createmailbox: Invalid mailbox name
mail1.ugent.be> quit

But as you can see the cyrus@jura user doesn't list any mailboxes or create any mailboxes.

Does anybody have any clues?

--
-- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
Rudy Gevaert                             e-mail: Rudy.Gevaert@xxxxxxxx
Directie ICT, Afdeling Infrastructuur
Groep Systemen                                      tel: +32 9 264 4734
Universiteit Gent / Ghent University                fax: +32 9 264 4994
Krijgslaan 281, gebouw S9, 9000 Gent, Belgie               www.UGent.be
-- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
----
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

[Index of Archives]     [Cyrus SASL]     [Squirrel Mail]     [Asterisk PBX]     [Video For Linux]     [Photo]     [Yosemite News]     [gtk]     [KDE]     [Gimp on Windows]     [Steve's Art]

  Powered by Linux