On 16/07/10 23:49 -0300, Lucas Zinato Carraro wrote: > Can i use differentes methods for authentication ( user: ldap, mupdate + >backend, backend + backend : sasldb )? >( for example users auth in frontend with saslauthd: ldap but frontends >auth in mupdate and backends using /etc/sasldb2 , and auth between backend >using another mech) > >Consider that im not using REFERALL ( proxyd_disable_mailbox_referrals: 1 >).
Yes. The authentication method is determined by the server (or the per service SASL configuration on a given server). On the frontends, you could configure SASL as: sasl_pwcheck_method: saslauthd sasl_mech_list: plain login In which case you'll need to enable allowplaintext, or provide an SSL/TLS method to encrypt traffic. And on the backends and mupdate master: sasl_pwcheck_method: auxprop sasl_auxprop_plugin: sasldb >+ How to test if proxy user is working correctly ? Its correctly to use: >imtest -t "" -a proxyuser -u user backendserver.domain Looks correct. >Its possible to do this with imap commands in telnet session ?? Yes, but you'll need to use the SASL PLAIN mechanism (or other mechanism that supports proxy authentication). Like: perl -MMIME::Base64 -e 'print encode_base64("proxied_user\0proxy_user\0password")' cHJveGllZF91c2VyAHByb3h5X3VzZXIAcGFzc3dvcmQ= telnet localhost 143 a01 authenticate plain cHJveGllZF91c2VyAHByb3h5X3VzZXIAcGFzc3dvcmQ= a02 select INBOX and you'll need to enable allowplaintext regardless of your sasl_pwcheck_method configuration. -- Dan White ---- Cyrus Home Page: http://cyrusimap.web.cmu.edu/ Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html