I'm running a "Test" murder setup using
cyrus-imapd-2.3.6 trying to use kerberos V
authentication between front-end and Mupdate Master. I
have a couple of questions regarding kerberos
principals.
1) Do I need a user principal on front-end along with
mupdate service key?
2) Do Mupdate Master and front-end need imap service
principals?
Front-end cyrus.conf:
# standard standalone server implementation
START {
auth cmd="/usr/kerberos/bin/kinit -k -t
/etc/imap/mupdate.keytab mupdate/fe.example.com"
recover cmd="ctl_cyrusdb -r"
}
SERVICES {
mupdate cmd="/usr/lib/cyrus-imapd/mupdate"
listen=3905 prefork=1
imap cmd="proxyd" listen="imap" prefork=10
maxchild=750
imaps cmd="proxyd -s" listen="imaps"
prefork=10 maxchild=750
imapp cmd="proxyd" listen="imap-priv"
prefork=2 maxchild=5
lmtp cmd="proxyd"
listen="/var/lib/imap/socket/lmtp" prefork=5
maxchild=10
sieve cmd="timsieved" listen="sieve"
prefork=1 maxchild=10
# lmtpunix cmd="porxyd"
listen="/var/lib/imap/socket/lmtpproxy" prefork=1
}
EVENTS {
checkpoint cmd="ctl_cyrusdb -c" period=5
delprune cmd="cyr_expire -E 3" period=1440
tlsprune cmd="tls_prune" period=1440
reauth cmd="/usr/kerberos/bin/kinit -k -t
/etc/imap/mupdate.keytab mupdate/fe.example.com"
period="300"
}
Mupdate master cyrus.conf:
# standard standalone server implementation
START {
auth cmd="/usr/kerberos/bin/kinit -k -t
/etc/krb5.keytab mupdate/master.example.com"
recover cmd="ctl_cyrusdb -r"
idled cmd="idled"
}
SERVICES {
mupdate cmd="/usr/lib/cyrus-imapd/mupdate -m"
listen=3905 prefork=1
imap cmd="imapd" listen="imap" prefork=5
imaps cmd="imapd -s" listen="imaps"
prefork=1
pop3 cmd="pop3d" listen="pop3" prefork=3
pop3s cmd="pop3d -s" listen="pop3s"
prefork=1
sieve cmd="timsieved" listen="sieve"
prefork=0
lmtpunix cmd="lmtpd"
listen="/var/lib/imap/socket/lmtp" prefork=1
}
EVENTS {
checkpoint cmd="ctl_cyrusdb -c" period=30
delprune cmd="cyr_expire -E 3" at=0400
tlsprune cmd="tls_prune" at=0400
reauth cmd="/usr/kerberos/bin/kinit -k -t
/etc/krb5.keytab mupdate/master.example.com"
period="300"
}
Regards
KMK
__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com
----
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
