>> Hello,
>>
>> I want to desactivate completely imap service to keep only imaps.
>> But I can't manage to connect to my server with cyradm.
>> (Everything is working fine if I keep regulat imap service)
>>
>> I tried this (thanx to Simon Matter) but it doesn't work for me :
>> cyradm --auth login --tls -u cyrus@xxxxxxxxxxxx localhost
>> cyradm --auth login --tls --port 931 -u cyrus@xxxxxxxxxxxx localhost
>
> Port should be 993 I guess?
>
Of course, my mistake (but already tried with the good value)
-bash-3.1$ cyradm --auth login --port 993 -u cyrus@xxxxxxxxxxxx localhost
IMAP Password:
-bash-3.1$
-> Exits witthout doing anything (no core either)
-bash-3.1$ cyradm --tls --auth login --port 993 -u cyrus@xxxxxxxxxxxx
localhost
TLS disabled.
cyradm: cannot authenticate to server with login as cyrus@xxxxxxxxxxxx
-bash-3.1$
>>
>> same result each time :
>> cyradm: cannot connect to server
>
> 1) Does server listen on localhost? Check with netstat.
> 2) Any firewall rule, SELinux?
>
> Simon
>
1)
[root@atlantis ~]# netstat -a
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address Foreign Address
State
tcp 0 0 *:imaps *:*
LISTEN
[...]
2)
Selinux : no :
selinuxenabled(1) SELinux Command Line documentation
selinuxenabled(1)
NAME
selinuxenabled - tool to be used within shell scripts to determine if
selinux is enabled
SYNOPSIS
selinuxenabled
DESCRIPTION
selinuxenabled Indicates whether SELinux is enabled or disabled. It
exits with status 0 if SELinux is enabled and 1 if it is not enabled.
[root@atlantis ~]# selinuxenabled ; echo $?
1
-> Disabled
Iptables : should be OK (I can connect remotely through imaps to access my
mailboxes) :
[root@atlantis ~]# iptables -L
Chain INPUT (policy ACCEPT)
target prot opt source destination
RH-Firewall-1-INPUT all -- anywhere anywhere
Chain FORWARD (policy ACCEPT)
target prot opt source destination
RH-Firewall-1-INPUT all -- anywhere anywhere
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
Chain RH-Firewall-1-INPUT (2 references)
target prot opt source destination
ACCEPT all -- anywhere anywhere
ACCEPT icmp -- anywhere anywhere icmp any
ACCEPT all -- anywhere anywhere state
RELATED,ESTABLISHED
ACCEPT tcp -- anywhere anywhere state NEW tcp
dpt:ssh
ACCEPT tcp -- anywhere anywhere state NEW tcp
dpt:imaps
ACCEPT tcp -- anywhere anywhere state NEW tcp
dpt:smtp
REJECT all -- anywhere anywhere reject-with
icmp-host-prohibited
>>
>> My configuration is (running Cyrus imapd 2.3.7) :
>> [root@atlantis ~]# more /etc/cyrus.conf
>> # standard standalone server implementation
>>
>> START {
>> # do not delete this entry!
>> recover cmd="ctl_cyrusdb -r"
>>
>> # this is only necessary if using idled for IMAP IDLE
>> idled cmd="idled"
>> }
>>
>> # UNIX sockets start with a slash and are put into /var/lib/imap/sockets
>> SERVICES {
>> # add or remove based on preferences
>> # imap cmd="imapd" listen="localhost:imap" prefork=0
>> imaps cmd="imapd -s" listen="imaps" prefork=5
>> # pop3 cmd="pop3d" listen="pop3" prefork=3
>> # pop3s cmd="pop3d -s" listen="pop3s" prefork=1
>> sieve cmd="timsieved" listen="sieve" prefork=0
>>
>> # these are only necessary if receiving/exporting usenet via NNTP
>> # nntp cmd="nntpd" listen="nntp" prefork=3
>> # nntps cmd="nntpd -s" listen="nntps" prefork=1
>>
>> # at least one LMTP is required for delivery
>> # lmtp cmd="lmtpd" listen="localhost:lmtp" prefork=0
>> lmtpunix cmd="lmtpd" listen="/var/lib/imap/socket/lmtp" prefork=1
>>
>> # this is only necessary if using notifications
>> # notify cmd="notifyd" listen="/var/lib/imap/socket/notify"
>> proto="udp" prefork=1
>> }
>>
>> EVENTS {
>> # this is required
>> checkpoint cmd="ctl_cyrusdb -c" period=30
>>
>> # this is only necessary if using duplicate delivery suppression,
>> # Sieve or NNTP
>> delprune cmd="cyr_expire -E 3" at=0400
>>
>> # this is only necessary if caching TLS sessions
>> tlsprune cmd="tls_prune" at=0400
>> }
>>
>> [root@atlantis ~]# more /etc/imapd.conf
>> configdirectory: /var/lib/imap
>> partition-default: /var/spool/imap
>> admins: cyrus@xxxxxxxxxxxx cyrus@xxxxxxxxxxxx
>> sievedir: /var/lib/imap/sieve
>> sendmail: /usr/sbin/sendmail
>> hashimapspool: true
>> sasl_pwcheck_method: auxprop
>> sasl_mech_list: PLAIN
>> tls_cert_file: /etc/pki/cyrus-imapd/cyrus-imapd.pem
>> tls_key_file: /etc/pki/cyrus-imapd/cyrus-imapd.pem
>> tls_ca_file: /etc/pki/tls/certs/ca-bundle.crt
>> virtdomains: yes
>>
>> Thanx for any help
>> ----
>> Cyrus Home Page: http://cyrusimap.web.cmu.edu/
>> Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
>> List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
>
>
>
----
Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
