Re: Auto create folders
Hi Andy, Thank you for your prompt reply. How do you create mailboxes now? I used cyradm and createmailbox, e.g. createmailbox user/username@DOMAIN, to create mailboxes. Any idea how to create folder in cyradm? Simply createmailbox user/username@DOMAIN/spam, and then set ACL permissions for user/username@DOMAIN/spam ? Please advise. Thank you, John Mok Cyrus Home Page: http://www.cyrusimap.org/ List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ To Unsubscribe: https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
Auto create folders
Hi, I have been using Cyrus IMAP 2.4.17 on Debian 7 with Kerberos / GSSAPI authentication. I would like to auto-create one or more folders upon mailbox creation, e.g. a spam folder to store potential spam mails for spamassassin learning. On the other hand, how to prevent such folders from deletion by users? Thanks a lot. John Mok Cyrus Home Page: http://www.cyrusimap.org/ List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ To Unsubscribe: https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
Re: Cyrus IMAP GSSAPI for multiple AD domains
Dear Dan, Thank you for your prompt reply. imtest -m GSSAPI imapsv01.grt.citizen.co.jp Is that from the same machine/user running thunderbird? No. I ran the imtest on Linux client using the same principal as on the Windows client. On the Windows client, it was installed with Thuderbird 2.0.0.24 and MIT Kerberos for Windows 3.2.2. Thanks a lot. John Mok Cyrus Home Page: http://cyrusimap.web.cmu.edu/ Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Cyrus IMAP GSSAPI for multiple AD domains
Hi, I have successfully setup Cyrus IMAP 2.2.12 with GSSAPI / Kerberos as authentication for an AD domain grt.citizen.co.jp, which is the default domain in /etc/imapd.conf. However, when I tried to add another AD domain pvd.citizen.co.jp other the default domain. The AD users in the latter domain, i.e. pvd.citizen.co.jp, failed to authenticate from the e-mail client (e.g. Thunderbird). The error message on the server log :- Jul 2 17:56:39 imapsv01 cyrus/imaps[3777]: GSSAPI Error: Miscellaneous failure (Wrong principal in request) I checked with imtest and it passed successfully :- imtest -m GSSAPI imapsv01.grt.citizen.co.jp The IMAP config. /etc/imapd.conf follows :- altnamespace: yes sasl_mech_list: gssapi pam loginrealms: pvd.citizen.co.jp virtdomains: yes defaultdomain: grt.citizen.co.jp sasl_pwcheck_method: saslauthd I hope someone could advise how I could make the IMAP to authenticate users from two or more AD domains. Thanks a lot. John Mok Cyrus Home Page: http://cyrusimap.web.cmu.edu/ Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: cyradm lm returns empty list but mailboxes are accessible via
Hi Dan,
I checked the /var/log/auth.log, and found the following error when
cyradmlm returned a empty list :-
Oct 29 08:36:13 imapsv01 perl: encoded packet size too big (4156 4096)
Does it remind you how to solve the problem?
I googled the problem and the following message advised to patch the
Cyrus SASL as follows :-
http://www.irbs.net/internet/info-cyrus/0404/0226.html
--- src/sasl/plugins/gssapi.c 2004/02/06 17:23:51 1.84
+++ src/sasl/plugins/gssapi.c 2004/04/12 16:36:21 1.85
@@ -1419,7 +1419,7 @@
if(oparams-mech_ssf) {
/* xxx probably too large */
- oparams-maxoutbuf -= 50;
+ oparams-maxoutbuf -= 256;
}
gss_release_buffer(min_stat, output_token);
Is there anyone knows how to solve the problem?
Thanks a lot.
John Mok
Dan White wrote:
I checked the server log and it read that I passed GSSAPI login.
The most interesting point is that cyradm seems get crashed after
first failure :-
Is it a bug in the cyrus-admin-2.2 package on Ubuntu 6.06.2 LTS?
That rings a bell too. I don't recall what my resolution was.
Does it happen when doing non GSSAPI authentication?
Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Re: cyradm lm returns empty list but mailboxes are accessible via
Hi Dan, Thank you for your prompt reply. particularly the Administration section. I've had similar problems as you when not getting the admin config correct: If virtdomains are enabled and you are connecting as 'cyrus', you might need to add 'cy...@my-default-domain.org'. Or in your case, john. My /etc/imapd.conf follows : admins: cyrus john virtdoamins: yes defaultdomain: grt.citizen.co.jp Then, I authenticate with kerberos and login to cyradm console :- kinit j...@grt.citizen.co.jp cyradm --user john imapsv01.grt.citizen.co.jp imap imapsv01.grt.citizen.co.jplm empty list imapsv01.grt.citizen.co.jp I checked the server log and it read that I passed GSSAPI login. The most interesting point is that cyradm seems get crashed after first failure :- kinit j...@grt.citizen.co.jp cyradm --user john imapsv01.grt.citizen.co.jp imap imapsv01.grt.citizen.co.jplm user/c* a list of mailboxes starting with c* imapsv01.grt.citizen.co.jplam user/chkuk show ACL of the mailbox chkuk imapsv01.grt.citizen.co.jplm empty list imapsv01.grt.citizen.co.jplm user/c* empty list imapsv01.grt.citizen.co.jpquit cyradm --user john imapsv01.grt.citizen.co.jp imap imapsv01.grt.citizen.co.jplm user/c* a list of mailboxes starting with c* Is it a bug in the cyrus-admin-2.2 package on Ubuntu 6.06.2 LTS? Thanks a lot. John Mok Cyrus Home Page: http://cyrusimap.web.cmu.edu/ Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
Cyrus IMAP GSSAPI for multiple AD domains
Hi, I have successfully setup Cyrus IMAP 2.2.12 with GSSAPI / Kerberos as authentication for an AD domain grt.citizen.co.jp, which is the default domain in /etc/imapd.conf. However, when I tried to add another AD domain go.citizen.co.jp other the default domain. The AD users in the latter domain, i.e. go.citizen.co.jp, failed to authenticate from the e-mail client (e.g. Thunderbird). The error message on the server log :- Oct 22 15:35:02 imapsv01 cyrus/imap[19466]: badlogin: John.sml.citizen.co.jp [10.144.1.192] GSSAPI [SASL(-13): authentication failure: user komat...@go.citizen.co.jp is not allowed to proxy] I checked with imtest and it passed successfully :- imtest -m GSSAPI imapsv01.grt.citizen.co.jp The IMAP config. /etc/imapd.conf follows :- virtdomains: yes defaultdomain: grt.citizen.co.jp sasl_pwcheck_method: saslauthd I hope someone could advise how I could make the IMAP to authenticate users from two or more AD domains. Thanks a lot. John Mok Cyrus Home Page: http://cyrusimap.web.cmu.edu/ Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
