problem with user rights in imapd
Dear all, i have installed Cyrus Imapd with saslauthd authentication on a FreeBSD Box with the FreeBSD ports. It is running good. I can login to cyradm with the user cyrus and can create mailboxes. With saslpasswd2 i can give the user a password. The user can access his mailbox with imap client. Also sendmail is delivering mails to the mailboxes very well. My problem is now 1. in cyradm (logged in as cyrus who is defined as admin in imapd.conf) i can´t delete mailboxes. Message is permission denied. 2. The User have no permission to create his own folders into his mailbox. best regards, Stefan Fritze
Re: problem with user rights in imapd
[EMAIL PROTECTED] wrote: Dear all, i have installed Cyrus Imapd with saslauthd authentication on a FreeBSD Box with the FreeBSD ports. It is running good. I can login to cyradm with the user cyrus and can create mailboxes. With saslpasswd2 i can give the user a password. The user can access his mailbox with imap client. Also sendmail is delivering mails to the mailboxes very well. My problem is now 1. in cyradm (logged in as cyrus who is defined as admin in imapd.conf) i can´t delete mailboxes. Message is permission denied. 2. The User have no permission to create his own folders into his mailbox. best regards, Stefan Fritze I just went through this myself. Make sure you create mail boxes in the user.username directory; or user/username if using UNIX pathing. Here is a very good link regarding your problem, as well as proper setup of mailboxes: http://asg.web.cmu.edu/cyrus/download/imapd/install-admin-mb.html Good luck! -- Jim Sabatke Hire Me!! - See my resume at http://my.execpc.com/~jsabatke Do not meddle in the affairs of Dragons, for you are crunchy and good with ketchup. --- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: problem with user rights in imapd
- Original Message - From: [EMAIL PROTECTED] 1. in cyradm (logged in as cyrus who is defined as admin in imapd.conf) i can´t delete mailboxes. Message is permission denied. Administrators don't have permission to delete mailboxes by default. It must be given explicitly. I'm using version 2.1.15, so this informatio is correct for that version: Only users who have create c permission on a mailbox can also delete it. Use the listacelmailbox command in cyradm to see mailbox permissions: lam user.x To give cyrus create permission in order to be able to delete a mailbox: sam user.x cyrus c Now the mailbox can be deleted: dm user.x 2. The User have no permission to create his own folders into his mailbox. Not sure about that one. What does lam user.x say? Does the user have create permission? John best regards, Stefan Fritze --- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: domain stripping in virtual domain addresses
Chris Harms wrote: After going into production from a working test installation, I cannot seem to get mail to cyrus from sendmail without the domain getting stripped and summarily replaced by the local host name. At present I'm attempting to use the new cyrusv2d mailer defs as follows: [ sendmail.mc ] define(`confLOCAL_MAILER', `cyrusv2d')dnl MAILER(`cyrusv2')dnl MAILER(`local')dnl MAILER(`smtp')dnl [cyrusv2.m4] [ http://anfi.homeunix.net/sendmail/cyrusv2.html ] mail to [EMAIL PROTECTED] bounces with a user unknown error (from imap.log) append_check() of 'host!user.myacctname' failed (Mailbox does not exist) any advice at this point would be much appreciated. cyrusv2d mailer unlike cyrusv2 does not strip recipient domain in its recipient parsing rule sets *BUT* * you use cyrusv2d as local mailer replacement (confLOCAL_MAILER) * sendmail.cf generated from sendmail.org m4 files strips recipient's domain before passing recipient address to local mailer (or its replacement) You may use sticky hub version of RTCyrus2 to fix it http://anfi.homeunix.net/sendmail/rtcyrus2.html FYI: I hope I will publish soon a method for making mailertable process recipients in local email domains. -- Andrzej [en:Andrew] Adam Filip [EMAIL PROTECTED] [EMAIL PROTECTED] http://anfi.homeunix.net/ http://slashdot.org/~anfi --- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Authentication problem
I sent this to cyrus-sasl first, but have not gotten any replies. I was trying to look through the archives. There are thousands of authentication emails. I hope this is the right list. Please let me know if it's not. I'm running posfix/cyrus/mysql on SuSE 9.0. I can't connect to an account where the user name is not also a UNIX user (in /etc/passwd). This is driving me nuts. If I create a UNIX user, the authentication works fine. I deleted the user and now I get in /var/log/messages: May 8 16:58:52 yoda imapd[2821]: Login disabled user=farmerg auth=farmerg host=ripley.kitty.cat [192.168.0.98] Any help out there? TIA -- Jim Sabatke Hire Me!! - See my resume at http://my.execpc.com/~jsabatke Do not meddle in the affairs of Dragons, for you are crunchy and good with ketchup. --- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: problem with user rights in imapd
Hi, and thak you all for your help. Now with the c right for the admin it works and i can delete the mailboxes. with the creation of the folders was my mistake ... this also works now. I have tried to create the folder on the same layer like the inbox ... but it is only possible in the layer below. Stefan - Original Message - From: Jim Sabatke [EMAIL PROTECTED] To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Sent: Sunday, May 09, 2004 2:41 PM Subject: Re: problem with user rights in imapd [EMAIL PROTECTED] wrote: Dear all, i have installed Cyrus Imapd with saslauthd authentication on a FreeBSD Box with the FreeBSD ports. It is running good. I can login to cyradm with the user cyrus and can create mailboxes. With saslpasswd2 i can give the user a password. The user can access his mailbox with imap client. Also sendmail is delivering mails to the mailboxes very well. My problem is now 1. in cyradm (logged in as cyrus who is defined as admin in imapd.conf) i can´t delete mailboxes. Message is permission denied. 2. The User have no permission to create his own folders into his mailbox. best regards, Stefan Fritze I just went through this myself. Make sure you create mail boxes in the user.username directory; or user/username if using UNIX pathing. Here is a very good link regarding your problem, as well as proper setup of mailboxes: http://asg.web.cmu.edu/cyrus/download/imapd/install-admin-mb.html Good luck! -- Jim Sabatke Hire Me!! - See my resume at http://my.execpc.com/~jsabatke Do not meddle in the affairs of Dragons, for you are crunchy and good with ketchup. --- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html --- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: Authentication problem
Am Sonntag, 9. Mai 2004 21:50 schrieb Jim Sabatke: I'm running posfix/cyrus/mysql on SuSE 9.0. I can't connect to an account where the user name is not also a UNIX user (in /etc/passwd). This is driving me nuts. If I create a UNIX user, the authentication works fine. I deleted the user and now I get in /var/log/messages: May 8 16:58:52 yoda imapd[2821]: Login disabled user=farmerg auth=farmerg host=ripley.kitty.cat [192.168.0.98] Because Suse uses as default saslauthd with pam as backend. This is configured in /etc/imapd.conf as sasl_pwcheck_method: saslauthd. Where do you want your user-accounts instead? -- Andreas --- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Mailbox aliases on cyrus
Hi, I have setup mailoxes for my server like this : Sent Trash Draft Junk This way Mozilla automaticaly use the right folder so it helps a lot. My main concern with this setup is when i want to sent direct mail to one of those. For exemple if i put for Sent the p right and then send to username+Sent it goes to username because it search for username+sent (With lower case S). But if you name the directory in lowercase then mozilla do not automaticaly recognize them. I wanted to know if there is a way to have a mailbox alias, for exemple making Sent a symbolic link to sent. As Cyrus is a blackbox i fear to create strange behavior doing that. Any of you had some experiences with this ? best regards, Ghislain. --- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: Authentication problem
Andreas Winkelmann wrote: Am Sonntag, 9. Mai 2004 21:50 schrieb Jim Sabatke: I'm running posfix/cyrus/mysql on SuSE 9.0. I can't connect to an account where the user name is not also a UNIX user (in /etc/passwd). This is driving me nuts. If I create a UNIX user, the authentication works fine. I deleted the user and now I get in /var/log/messages: May 8 16:58:52 yoda imapd[2821]: Login disabled user=farmerg auth=farmerg host=ripley.kitty.cat [192.168.0.98] Because Suse uses as default saslauthd with pam as backend. This is configured in /etc/imapd.conf as sasl_pwcheck_method: saslauthd. Where do you want your user-accounts instead? I want to have cyrus user accounts where no system user exists. Is that possible? The reason is, I have a number of cyrus accounts for the same user. I need to do this because different accounts have different user email addresses for sending. If an email client could have different send-from addresses based on folder, then this wouldn't be an issue, however Mozilla doesn't do this, and I don't know of a client that does. Thanks, -- Jim Sabatke Hire Me!! - See my resume at http://my.execpc.com/~jsabatke Do not meddle in the affairs of Dragons, for you are crunchy and good with ketchup. --- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: Authentication problem
Am Sonntag, 9. Mai 2004 23:07 schrieb Jim Sabatke: Where do you want your user-accounts instead? I want to have cyrus user accounts where no system user exists. Is that possible? The reason is, I have a number of cyrus accounts for the same user. Yes of course, this is possible. You can use sasldb for example. Create your useraccounts with saslpasswd2 or saslpasswd. And tell it Cyrus in /etc/ imapd.conf: sasl_pwcheck_method: auxprop sasl_auxprop_plugin: sasldb I need to do this because different accounts have different user email addresses for sending. If an email client could have different send-from addresses based on folder, then this wouldn't be an issue, however Mozilla doesn't do this, and I don't know of a client that does. Cyrus-Imap is not related to sending Mails outside. -- Andreas --- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
remove
--- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: Authentication problem
Andreas Winkelmann wrote: Am Sonntag, 9. Mai 2004 23:07 schrieb Jim Sabatke: Where do you want your user-accounts instead? I want to have cyrus user accounts where no system user exists. Is that possible? The reason is, I have a number of cyrus accounts for the same user. Yes of course, this is possible. You can use sasldb for example. Create your useraccounts with saslpasswd2 or saslpasswd. And tell it Cyrus in /etc/ imapd.conf: sasl_pwcheck_method: auxprop sasl_auxprop_plugin: sasldb I did that, and now ALL users fail with the same user disabled error. I've searched the web for this error and there are thousands of references, most with different solutions. One that I tried involved modifying the pam.conf file. The recomendation made it so my box woudn't boot. Fortunately I was able to recover the original conf file. I'm afraid to keep trying solutions that may not work and may hurt my install. Is there an easy answer to this? I need to do this because different accounts have different user email addresses for sending. If an email client could have different send-from addresses based on folder, then this wouldn't be an issue, however Mozilla doesn't do this, and I don't know of a client that does. Cyrus-Imap is not related to sending Mails outside. I know Cyrus isn't related to this. I was just trying to explain why I needed so many accounts. Thank you, -- Jim Sabatke Hire Me!! - See my resume at http://my.execpc.com/~jsabatke Do not meddle in the affairs of Dragons, for you are crunchy and good with ketchup. --- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Disaster Recovery
Hi, I am working through various Cyrus crash scenarios. In the event of losing a disk containing /var/spool/imap/users and having no backup. How can I reconstruct the user directory hierarchy. EG /var/spool/imap/users/testuser testuser2 testuser3 etc etc. The reconstruct utility seems to require the users directory already exists. Is it a case of having to script something based on the contents of the mailboxes.db file ? Thanks. Gordon.
Cyrus imap, virtual domains and ldap authentication
cyrus-imapd-utils-2.2.3 cyrus-imapd-2.2.3 cyrus-sasl-2.1.15 Hi, I have a cyrus imap server with virtual domains authenticating against sasldb2 thats been running sucessfully for several weeks now (Thanks to Simon Matters rpms) and I'd like to convert to authenticating against my LDAP server. I've Googled until my fingers bled (quote stolen from a google search) and I'm totaly confused about how to go about it. So I'm looking for some tips/pointers about how to go about it. I've seen references to useing either of sasl_pwcheck_method: saslauthd or sasl_pwcheck_method: ldap in imapd.conf. Which should I use and then what else do I need? Regards John --- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
cyradm auth problem
Hi all, I'm having problem with cyradm and creating mailboxes. The connection goes like this: debian:/# cyradmcyradm connect localhostPassword:localhost cm chriscreatemailbox: Permission denied Here are the versions of everything that we're running. localhost vername : Cyrus IMAPDversion : v2.2.3 2004/01/14 02:11:03vendor : Project Cyrussupport-url: http://asg.web.cmu.edu/cyrusos : Linuxos-version : 2.4.25-1-386environment: Built w/Cyrus SASL 2.1.15 Running w/Cyrus SASL 2.1.15 Built w/Sleepycat Software: Berkeley DB 3.2.9: (June 16, 2003) Running w/Sleepycat Software: Berkeley DB 3.2.9: (June 16, 2003) Built w/OpenSSL 0.9.7d 17 Mar 2004 Running w/OpenSSL 0.9.7d 17 Mar 2004 CMU Sieve 2.2 mmap = shared lock = fcntl nonblock = fcntl auth = unix idle = polllocalhost I've set /var/spool/imap to own/group of cyrus:mail and done it recursively. The sasldb passwords do work fine, and I can auth into the server as a user. Any help is greatly appreciated. Thanks! Chris
Re: Authentication problem
Am Montag, 10. Mai 2004 00:58 schrieb Jim Sabatke: I did that, and now ALL users fail with the same user disabled error. I've searched the web for this error and there are thousands of references, most with different solutions. One that I tried involved modifying the pam.conf file. The recomendation made it so my box woudn't boot. Fortunately I was able to recover the original conf file. I'm afraid to keep trying solutions that may not work and may hurt my install. Is there an easy answer to this? The login disabled-Stuff can be from uw-imap. It happens sometimes on Suse, that someone installed both and started up uw-imap. Make a telnet to localhost if you really see Cyrus. $ telnet localhost imap [...] * OK linux-test2 Cyrus IMAP4 v2.2.3 server ready [...] -- Andreas --- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: Cyrus imap, virtual domains and ldap authentication
cyrus-imapd-utils-2.2.3 cyrus-imapd-2.2.3 cyrus-sasl-2.1.15 Hi, I have a cyrus imap server with virtual domains authenticating against sasldb2 thats been running sucessfully for several weeks now (Thanks to Simon Matters rpms) and I'd like to convert to authenticating against my LDAP server. I've Googled until my fingers bled (quote stolen from a google search) and I'm totaly confused about how to go about it. So I'm looking for some tips/pointers about how to go about it. I've seen references to useing either of sasl_pwcheck_method: saslauthd or sasl_pwcheck_method: ldap in imapd.conf. Which should I use and then what else do I need? I have never used virtual domains so I don't know about that. I'm using both methods in different configurations and they both work well. However, I think for virtual domains, you have to use 'sasl_pwcheck_method: ldap' because pam doesn't handle what you want. Simon Regards John --- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html --- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
[no subject]
--- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
[no subject]
--- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Cannot log into cyrus using IMAP
Hi, I've just installed Postfix compiled with SASL2 and Cyrus-SASL / Cyrus-Imap onto a WBEL3 server. I rebuilt both the cyrus-sasl and imap pkgs myself, so I am certain that they were built with the same version of db4. When I try to test my cyrus-Imapd connection with cyradm, I am failing. I am getting an error perl: No worthy mechs found.. I'm somewhat new to all this, so am not sure what this means. Any help will be greatly appreciated. Right now, I have the following packages installed: cyrus-sasl-plain-2.1.18-1 cyrus-sasl-2.1.18-1 cyrus-sasl-gssapi-2.1.18-1 cyrus-sasl-md5-2.1.18-1 cyrus-sasl-devel-2.1.18-1 cyrus-imapd-utils-2.2.3-8 cyrus-imapd-2.2.3-8 postfix-2.1.1.1-1 (compiled for MySQL, sasl2, VDA) I am following the Postfix-Cyrus-Web-cyradm-HOWTO. My command line is the following: saslpasswd2 -c cyrus Password: secret Again (for verification): secret When I try to connect with cyradm: cyradm --user cyrus --server localhost --auth plain Password: secret IMAP Password: secret I get the following errors in my /var/log/auth.log: May 10 00:47:21 linuxmail perl: No worthy mechs found May 10 00:52:01 linuxmail imap(pam_unix)[31961]: authentication failure; logname= uid=0 euid=0 tty= ruser= rhost= user=cyrus May 10 00:52:01 linuxmail saslauthd[31961]: pam_sm_authenticate called. May 10 00:52:01 linuxmail saslauthd[31961]: dbuser changed. May 10 00:52:01 linuxmail saslauthd[31961]: dbpasswd changed. May 10 00:52:01 linuxmail saslauthd[31961]: host changed. May 10 00:52:01 linuxmail saslauthd[31961]: database changed. May 10 00:52:01 linuxmail saslauthd[31961]: table changed. May 10 00:52:01 linuxmail saslauthd[31961]: usercolumn changed. May 10 00:52:01 linuxmail saslauthd[31961]: passwdcolumn changed. May 10 00:52:01 linuxmail saslauthd[31961]: crypt changed. May 10 00:52:01 linuxmail saslauthd[31961]: logtable changed. May 10 00:52:01 linuxmail saslauthd[31961]: logmsgcolumn changed. May 10 00:52:01 linuxmail saslauthd[31961]: logusercolumn changed. May 10 00:52:01 linuxmail saslauthd[31961]: loghostcolumn changed. May 10 00:52:01 linuxmail saslauthd[31961]: logpidcolumn changed. May 10 00:52:01 linuxmail saslauthd[31961]: logtimecolumn changed. May 10 00:52:01 linuxmail saslauthd[31961]: db_connect called. May 10 00:52:01 linuxmail saslauthd[31961]: returning 0 . May 10 00:52:01 linuxmail saslauthd[31961]: db_checkpasswd called. May 10 00:52:01 linuxmail saslauthd[31961]: pam_mysql: where clause = May 10 00:52:01 linuxmail saslauthd[31961]: SELECT password FROM accountuser WHERE username='cyrus' May 10 00:52:01 linuxmail saslauthd[31961]: pam_mysql: select returned an invalid encrypted password May 10 00:52:01 linuxmail saslauthd[31961]: returning 7 . May 10 00:52:01 linuxmail saslauthd[31961]: returning 7 after db_checkpasswd. May 10 00:52:04 linuxmail saslauthd[31961]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure May 10 00:52:04 linuxmail saslauthd[31961]: do_auth : auth failure: [user=cyrus] [service=imap] [realm=] [mech=pam] [reason=PAM auth error] /var/log/maillog: May 10 01:12:50 linuxmail imap[31979]: accepted connection May 10 01:12:50 linuxmail master[32099]: about to exec /usr/lib/cyrus-imapd/imapd May 10 01:12:50 linuxmail imap[32099]: executed May 10 01:13:00 linuxmail imap[31979]: badlogin: localhost.localdomain [127.0.0.1] PLAIN [SASL(-4): no mechanism available: security flags do not match required] May 10 01:13:11 linuxmail imap[31979]: badlogin: localhost.localdomain [127.0.0.1] plaintext cyrus SASL(-13): authentication failure: checkpass failed Like I said, I'm somewhat new to all this, so do not entirely understand what these log messages are telling me. What does No worthy mech found mean? Secondly, why would I get a pam_mysql: select returned an invalid encrypted password? I'm trying to use plain passwords for the moment, until I am certain everything is working. My passwords in my MySql DB are in plain text. Any help would be greatly appreciated! Thanks! Eric --- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
