<div>I am working with a custom java webmail application that accesses Cyrus imap configured with sasl/pam_ldap for authentication. The user's login names for the webmail client are based on the ldap cn attribute but the mailboxes in Cyrus are based on the ldap mailNickname attribute. The webmail client passes the mailNickname attribute as the username when it authenticates to Cyrus.</div>
<div><br></div><div>example:</div>cn=john.smith<div>mailNickname=ea9d92f15f608c44a7b4fdccf3f02bc5<br></div><div><br></div><div>I am introducing SSO via JA-SIG CAS and pam-cas. I would like to authenticate to IMAP using the cn (since that's what pam-cas will get when it validates the CAS service ticket) but I still want the mailboxes to be based on the mailNickname attribute. <br>
</div><div><br></div><div>Is there a way to have the user's mailbox be based on a different ldap attribute than their authentication id? </div><div><br></div><div><br></div><div>Thanks for any pointers. </div><div><br>
</div><div><br></div><div><br></div>