Re: LDAP auth, and Cyrus mailboxes..

2004-09-02 Thread Mike Beattie
On Wed, Jun 16, 2004 at 11:59:08AM -0400, Rob Siemborski wrote: Ok, well, it's known behaviour, perhaps I'll need to think up another solution. (an ugly patch to cyrus that adds a loginrequiresinbox: option?) This is not unreasonable. I'd probably implement it as part of the PROXY_POLICY

Re: LDAP auth, and Cyrus mailboxes..

2004-09-02 Thread Mike Beattie
On Fri, Sep 03, 2004 at 12:32:07AM +1200, Mike Beattie wrote: + if (strchr(auth_identity, '.') || strlen(auth_identity)+6 = sizeof(inboxname)) return 0; ... + if (strchr(auth_identity, '.') || strlen(auth_identity)+6 = sizeof(inboxname)) return 0; It occurred to me that I'd not

Re: LDAP auth, and Cyrus mailboxes..

2004-06-16 Thread Rob Siemborski
On Wed, 16 Jun 2004, Mike Beattie wrote: Ok, well, it's known behaviour, perhaps I'll need to think up another solution. (an ugly patch to cyrus that adds a loginrequiresinbox: option?) This is not unreasonable. I'd probably implement it as part of the PROXY_POLICY callbacks to sasl (e.g.

LDAP auth, and Cyrus mailboxes..

2004-06-15 Thread Mike Beattie
Hi folks... I've just discovered some behaviour from our cyrus installation, which serves ~17000 student accounts, that I don't want. We have a centralised LDAP directory containing all user accounts that have ever existed, which I have saslauthd authenticating against. The problem I'm having is

Re: LDAP auth, and Cyrus mailboxes..

2004-06-15 Thread Henrique de Moraes Holschuh
On Wed, 16 Jun 2004, Mike Beattie wrote: Is this possible, and if so, any pointers to documentation? Teach saslauthd (or the LDAP auxprop method) to filter out accounts that should not log into Cyrus, by using a proper filter/LDAP URI. -- One disk to rule them all, One disk to find them. One

Re: LDAP auth, and Cyrus mailboxes..

2004-06-15 Thread Mike Beattie
On Wed, Jun 16, 2004 at 12:13:02AM -0300, Henrique de Moraes Holschuh wrote: On Wed, 16 Jun 2004, Mike Beattie wrote: Is this possible, and if so, any pointers to documentation? Teach saslauthd (or the LDAP auxprop method) to filter out accounts that should not log into Cyrus, by using a

Re: LDAP auth, and Cyrus mailboxes..

2004-06-15 Thread Carl P. Corliss
Mike Beattie wrote: [snip] Erp. well, that's not possible, since the LDAP directory contains nothing other than dn: and userPassword:. Your directory structure contains only two attributes for each user..? Ok, well, it's known behaviour, perhaps I'll need to think up another solution. (an ugly

Re: LDAP auth, and Cyrus mailboxes..

2004-06-15 Thread Mike Beattie
On Tue, Jun 15, 2004 at 09:27:46PM -0700, Carl P. Corliss wrote: Erp. well, that's not possible, since the LDAP directory contains nothing other than dn: and userPassword:. Your directory structure contains only two attributes for each user..? Correct. The directory is there for