On Fri, September 25, 2009 11:40 am, Patrick Boutilier wrote:
> Eric Luyten wrote:
>
>> Colleagues,
>>
>>
>> I am in the process of moving Cyrus service from a Cyrus 2.2.13 / Solaris9
>> system to a Cyrus 2.3.15 / Solaris10 system and all is running pretty well
>>
>> EXCEPT
>>
>>
>> for authenticated IMAP/POP sessions.
>>
>> CSRs and key on the first server were generated using OpenSSL 0.9.7e while
>> there is OpenSSL 0.9.8k on the second one (if that matters).
>>
>> I copied the three files referenced by
>> tls_cert_file:
>> tls_key_file:
>> tls_ca_file:
>> in /etc/imapd.conf to the new server but appear to have overlooked
>> something, because my logfile now shows :
> Does the cyrus user have permissions to read the cert and key?
>
Patrick,
Head on !
File access bits on the files themselves and directories above were correct
but *group ownership* of the three files (by which I make the 'cyrus' user
read them) had not been preserved.
Thx a lot for your hint (should've found out by myself but long working
days are starting to take their toll :-)
Eric Luyten.
----
Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
