<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#ffffff">
On 01/13/2011 02:35 AM, Lucas Zinato Carraro wrote:
<blockquote
cite="mid:AANLkTin9J+wHJ7chJtNjzixZBo+L8Xu4DVNfS_TXevy2@mail.gmail.com"
type="cite">
<div> Its possible to limit imap admin logins ?</div>
<div><br>
</div>
<div>For example limit admin only for a specific IP.</div>
<div><br>
</div>
<div><br>
</div>
<div> Exist a way to grant permission for a specific user for
administratives tasks but limit this user</div>
<div>to delete accounts ?</div>
<div><br>
</div>
<div><br>
</div>
<div>Regards</div>
<div>Zinato</div>
<div><br>
</div>
<div><br>
</div>
<div> </div>
<pre wrap="">
<fieldset class="mimeAttachmentHeader"></fieldset>
----
Cyrus Home Page: <a class="moz-txt-link-freetext" href="http://www.cyrusimap.org/">http://www.cyrusimap.org/</a>
List Archives/Info: <a class="moz-txt-link-freetext" href="http://lists.andrew.cmu.edu/pipermail/info-cyrus/">http://lists.andrew.cmu.edu/pipermail/info-cyrus/</a></pre>
</blockquote>
You may want to setup your conf files like:<br>
<br>
/etc/cyrus.conf<br>
<br>
# standard standalone server implementation<br>
<br>
START {<br>
# do not delete this entry!<br>
recover cmd="ctl_cyrusdb -r"<br>
<br>
# this is only necessary if using idled for IMAP IDLE<br>
idled cmd="idled"<br>
}<br>
<br>
# UNIX sockets start with a slash and are put into /var/lib/imap/sockets<br>
SERVICES {<br>
# add or remove based on preferences<br>
imaplocal cmd="imapd -C /etc/imapd-local.conf"
listen="127.0.0.1:8888" prefork=0<br>
imap cmd="imapd" listen="imap"
listen="your-imapd-server-ip:imap" prefork=5<br>
imaps cmd="imapd -s" listen="imaps" prefork=1<br>
# pop3 cmd="pop3d" listen="pop3" prefork=3<br>
# pop3s cmd="pop3d -s" listen="pop3s" prefork=1<br>
sieve cmd="timsieved" listen="sieve" prefork=1<br>
<br>
# these are only necessary if receiving/exporting usenet via NNTP<br>
# nntp cmd="nntpd" listen="nntp" prefork=3<br>
# nntps cmd="nntpd -s" listen="nntps" prefork=1<br>
<br>
# at least one LMTP is required for delivery<br>
# lmtp cmd="lmtpd" listen="lmtp" prefork=0<br>
lmtpunix cmd="lmtpd" listen="/var/lib/imap/socket/lmtp" prefork=1<br>
<br>
# this is only necessary if using notifications<br>
# notify cmd="notifyd" listen="/var/lib/imap/socket/notify"
proto="udp" prefork=1<br>
}<br>
<br>
EVENTS {<br>
# this is required<br>
checkpoint cmd="ctl_cyrusdb -c" period=30<br>
<br>
# this is only necessary if using duplicate delivery suppression,<br>
# Sieve or NNTP<br>
delprune cmd="cyr_expire -E 3" at=0400<br>
<br>
# this is only necessary if caching TLS sessions<br>
tlsprune cmd="tls_prune" at=0400<br>
}<br>
<br>
/etc/imapd.conf<br>
<br>
configdirectory: /var/lib/imap<br>
partition-default: /var/spool/imap<br>
## comment for local admins: cyrus<br>
#admins: cyrus<br>
sievedir: /var/lib/imap/sieve<br>
sendmail: /usr/sbin/sendmail<br>
hashimapspool: true<br>
sasl_pwcheck_method: saslauthd<br>
allowplaintext: yes<br>
<br>
lmtp_downcase_rcpt: yes<br>
defaultdomain: your-domain<br>
autocreatequota: 100000<br>
quotawarn: 90<br>
<br>
servername: your-server<br>
<br>
sasl_saslauthd_path: /var/run/saslauthd/mux<br>
<br>
berkeley_cachesize: 16384<br>
<br>
sasl_mech_list: PLAIN<br>
tls_cert_file: /etc/pki/cyrus-imapd/cyrus-imapd.pem<br>
tls_key_file: /etc/pki/cyrus-imapd/cyrus-imapd.pem<br>
tls_ca_file: /etc/pki/tls/certs/ca-bundle.crt<br>
# uncomment this if you're operating in a DSCP environment (RFC-4594)<br>
# qosmarking af13<br>
<br>
<br>
/etc/imapd-local.conf<br>
<br>
configdirectory: /var/lib/imap<br>
partition-default: /var/spool/imap<br>
admins: cyrus<br>
sievedir: /var/lib/imap/sieve<br>
sendmail: /usr/sbin/sendmail<br>
hashimapspool: true<br>
sasl_pwcheck_method: saslauthd<br>
allowplaintext: yes<br>
<br>
lmtp_downcase_rcpt: yes<br>
defaultdomain: your-domain<br>
quotawarn: 90<br>
<br>
servername: your-server<br>
<br>
sasl_mech_list: PLAIN<br>
tls_cert_file: /etc/pki/cyrus-imapd/cyrus-imapd.pem<br>
tls_key_file: /etc/pki/cyrus-imapd/cyrus-imapd.pem<br>
tls_ca_file: /etc/pki/tls/certs/ca-bundle.crt<br>
# uncomment this if you're operating in a DSCP environment (RFC-4594)<br>
# qosmarking af13<br>
<br>
<br>
As you see your default imapd.conf config file dosen't have admin
account defined.<br>
Admin accunt is defined in imapd-local.conf.<br>
<br>
You can access your admin account like:<br>
<br>
cyradm --user cyrus --port 8888 localhost <br>
<br>
You can changet localhost to your host IP and control access to cyrus
admin port with e.g. iptables.<br>
<br>
Best regards,<br>
<br>
Damijan<br>
<br>
<br>
</body>
</html>