<html><head><style type='text/css'>p { margin: 0; }</style><style type='text/css'>body { font-family: 'Arial'; font-size: 8pt; color: #000000}</style></head><body>Well..... this sort of works, and yes, the system authentication is already going through ldap.<br>The system is a free-bsd 6.0 system, and I am able to authenticate using what you described but I am not able to create mailboxes, which is something for the cyrus imap list. I was just seeing if anyone had any luck doing this or if there were specific options that had to be enabled or modified for this to work with the FDS.<br><br><br>----- Original Message -----<br>From: "Anthony M. Farrell" <tfar@smc.co.nz><br>To: "General discussion list for the Fedora Directory server project." <fedora-directory-users@redhat.com><br>Sent: Wednesday, January 23, 2008 5:57:58 PM (GMT-0800) America/Los_Angeles<br>Subject: Re: [Fedora-directory-users] Saslauthd Authentication Issues<br><br>On Thu, 24 Jan 2008 13:39:08 Jared B. Griffith wrote:<br>> I am trying to see if I can't get an existing Cyrus Imap server to<br>> authenticate against our directory server. The people at cyrus recommend<br>> the followng configuration in saslauthd.conf ldap_servers: <br>> ldap://your.ldap-host.tld<br>> ldap_version: 3<br>> ldap_timeout: 10<br>> ldap_time_limit: 10<br>> ldap_search_base: o=what-ever-you-may-have,dc=your-domain,dc=tld<br>> ldap_bind_dn: cn=your-ldap-admin-name,dc=your-domain,dc=tld<br>> ldap_password: your-ldap-admin-password<br>> ldap_scope: sub<br>> ldap_uidattr: the-attribute-name-in-which-you-store-usernames, es: uid<br>> ldap_filter_mode: yes<br>> ldap_filter: (uid=%u%R)<br>> This doesn't work, I have tried different variations of this and have had<br>> no luck. I am wondering if anyone has had experience with this and what<br>> sort of tricks (if any) they did to get this to work properly. Are there<br>> any docs out there that I am missing?<br>> Any help would be appreciated.<br><br>The easiest way if you are using Cyrus IMAP on Fedora or Redhat is to use PAM <br>to authenticate. The following assumes you have first enabled directory <br>authentication on the mail server using 'authconfig' to set up LDAP <br>in '/etc/pam.d/system-auth' as required.<br><br>1. Edit '/etc/sysconfig/saslauthd' and ensure that 'MECH="pam" is set.<br><br>2. Edit '/etc/imapd.conf' and make sure that 'sasl_pwcheck_method' is set <br>to 'saslauthd' even though you will be using PAM.<br><br>3. Edit '/etc/pam.d/imap' to read as follows:<br><br>auth sufficient /lib/security/$ISA/pam_ldap.so<br>account sufficient /lib/security/$ISA/pam_ldap.so<br><br>4. Start saslauthd and cyrus-imapd and set chkconfig to on.<br><br>5. Create some mailboxes and away you go!<br><br>A more complete blurb can be found at 'www.wlug.org.nz/CyrusNotes'<br><br>Tony<br><br>-- <br>This message has been scanned for viruses and<br>dangerous content by MailScanner, and is<br>believed to be clean.<br><br>--<br>Fedora-directory-users mailing list<br>Fedora-directory-users@redhat.com<br>https://www.redhat.com/mailman/listinfo/fedora-directory-users<br></body></html>