why does salspasswd2 always append a realm?

2007-01-03 Thread Marten Lehmann
Hello, I would like to insert an admin-user without a domain/realm into an sasldb2. But saslpasswd2 always appends the hostname to the userid I provide. Example: echo "test" | saslpasswd2 -c admin sasldblistusers2 [EMAIL PROTECTED]: userPassword How can I avoid this? I have "virtdomains: us

Re: why does salspasswd2 always append a realm?

2007-01-03 Thread Andreas Winkelmann
On Wednesday 03 January 2007 22:38, Marten Lehmann wrote: > I would like to insert an admin-user without a domain/realm into an > sasldb2. But saslpasswd2 always appends the hostname to the userid I > provide. > > Example: > > echo "test" | saslpasswd2 -c admin > sasldblistusers2 > [EMAIL PROTECTE

Re: why does salspasswd2 always append a realm?

2007-01-03 Thread Marten Lehmann
Hello, Use a defaultdomain (man imapd.conf). that doesn't solve the problem. As soon as an admin-user contains a realm (e.g. not just "admin" but "[EMAIL PROTECTED]") this admin-user can only manage accounts for mydomain.com. But I need an admin-user that can create and manage users for arb

Re: why does salspasswd2 always append a realm?

2007-01-03 Thread Jo Rhett
On Jan 3, 2007, at 4:30 PM, Marten Lehmann wrote: that doesn't solve the problem. As soon as an admin-user contains a realm (e.g. not just "admin" but "[EMAIL PROTECTED]") this admin- user can only manage accounts for mydomain.com. But I need an admin- user that can create and manage users fo

[ Re: why does salspasswd2 always append a realm?]

2007-01-03 Thread Uroš Gruber
Jo Rhett wrote: On Jan 3, 2007, at 4:30 PM, Marten Lehmann wrote: that doesn't solve the problem. As soon as an admin-user contains a realm (e.g. not just "admin" but "[EMAIL PROTECTED]") this admin-user can only manage accounts for mydomain.com. But I need an admin-user that can create and m

Re: why does salspasswd2 always append a realm?

2007-01-04 Thread Marten Lehmann
Hello, So I really need to login without a realm. Wrong. You need a login where the realm matches the hostname of the machine, which will solve the problem for you. Even while using "virtdomains: userid"? If you check the sasl debug, you'll see that "no realm" becomes the result of get

Re: why does salspasswd2 always append a realm?

2007-01-04 Thread Jo Rhett
Marten Lehmann wrote: Well, would it also be possible to set this in imapd.conf: admins: cyrus defaultdomain: imap.localhost and add a user [EMAIL PROTECTED] in sasldb? Sure, but I don't think that cyradm reads imapd.conf. In our implementation the defaultdomain goes to one domain, but the

Re: [ Re: why does salspasswd2 always append a realm?]

2007-01-04 Thread Jo Rhett
Uroš Gruber wrote: So I really need to login without a realm. Wrong. You need a login where the realm matches the hostname of the machine, which will solve the problem for you. If you check the sasl debug, you'll see that "no realm" becomes the result of gethostbyname() during the sasl que

Re: [ Re: why does salspasswd2 always append a realm?]

2007-01-04 Thread Rudy Gevaert
Uroš Gruber wrote: If I can add here because it's more about virtual users. I still don't understand is how can I create global admin user. I think in previous versions of cyrus this works but in latest I can only see users from primary domain or server hostname. See Cyrus Wiki/FAQ: http://c

Re: [ Re: why does salspasswd2 always append a realm?]

2007-01-05 Thread Alex Prinsier
Rudy Gevaert wrote: > See > >> Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki > > Under virtual domains > I think I have the _exactly_ same problem as Mr. Gruber. This is my setup: (important part of) imapd.conf: virtdomains: userid defaultdomain: mail.internal.ejibe.net servername: mail.i

Re: [ Re: why does salspasswd2 always append a realm?]

2007-01-05 Thread Marten Lehmann
Hello, I think I have the _exactly_ same problem as Mr. Gruber. This is my setup: hey, originally it was _my_ problem :-) (important part of) imapd.conf: virtdomains: userid defaultdomain: mail.internal.ejibe.net servername: mail.internal.ejibe.net admins: cyrus sasl_pwcheck_method: auxprop

Re: [ Re: why does salspasswd2 always append a realm?]

2007-01-05 Thread Andreas Winkelmann
On Friday 05 January 2007 09:51, Alex Prinsier wrote: > I think I have the _exactly_ same problem as Mr. Gruber. This is my setup: > > (important part of) imapd.conf: > virtdomains: userid > defaultdomain: mail.internal.ejibe.net > servername: mail.internal.ejibe.net > admins: cyrus > sasl_pwcheck

Re: [ Re: why does salspasswd2 always append a realm?]

2007-01-05 Thread Alex Prinsier
That does work, however cyrus think I'm a domain admin then, not a global admin. # cyradm --user cyrus localhost IMAP Password: mail.internal.ejibe.net> lm mail.internal.ejibe.net> cm user.test mail.internal.ejibe.net> cm [EMAIL PROTECTED] createmailbox: Permission denied mail.intern

Re: [ Re: why does salspasswd2 always append a realm?]

2007-01-06 Thread Alex Prinsier
Marten Lehmann wrote: > I don't know the reason for this error, but authentication with sasldb2 > only works in my setup when I'm writing > > sasl_pwcheck_method: saslauthd auxprop > > into imapd.conf (no auxpro_plugin option) and have saslauthd running, > even when it isn't used. I tried this,

Re: [ Re: why does salspasswd2 always append a realm?]

2007-01-06 Thread Jo Rhett
Marten Lehmann wrote: I don't know the reason for this error, but authentication with sasldb2 only works in my setup when I'm writing sasl_pwcheck_method: saslauthd auxprop into imapd.conf (no auxpro_plugin option) and have saslauthd running, even when it isn't used. I'm sorry, but this sta

Re: [ Re: why does salspasswd2 always append a realm?]

2007-01-06 Thread Jo Rhett
And have you tried reading the logs? There is nothing mystical here -- everything is logged, including how your login and realm are parsed for authentication. Alex Prinsier wrote: That does work, however cyrus think I'm a domain admin then, not a global admin. # cyradm --user cyrus localhost

Re: [ Re: why does salspasswd2 always append a realm?]

2007-01-07 Thread Alex Prinsier
I think I'm running cyrus v2.1, not 2.2, and I just found out that virtual domain support came in in version 2.2... The error in the logs was: Jan 7 08:54:46 smtp cyrus/imapd[29903]: badlogin: mail.internal.ejibe.net[10.1.1.1] plaintext [EMAIL PROTECTED] SASL(-13): authentication failure: cross-r

Re: [ Re: why does salspasswd2 always append a realm?]

2007-01-07 Thread Jo Rhett
Alex Prinsier wrote: I think I'm running cyrus v2.1, not 2.2, and I just found out that virtual domain support came in in version 2.2... Thanks all for the help, I'll have to upgrade :) Don't upgrade to 2.2. Upgrade to 2.3.7, so that you won't have to run circles around any other "problem" w

Re: [ Re: why does salspasswd2 always append a realm?]

2007-01-08 Thread Marten Lehmann
Hello, I'm sorry, but this statement parses as nonsense. You have saslauthd running but it isn't used, and you have auxprop listed even though you don't have an auxprop. How exactly are you being authenticated? there seems to be a default auxprop, because saslauthd was configured to use pa

Re: [ Re: why does salspasswd2 always append a realm?]

2007-01-30 Thread Jo Rhett
On Jan 8, 2007, at 8:33 AM, Marten Lehmann wrote: And have you tried reading the logs? There is nothing mystical here -- everything is logged, including how your login and realm are parsed for authentication. There is a lot of mystical in Cyrus, especially because it lacks sufficient doc