[Fwd: Migration of Cyrus IMAP from one server to another (realm problem?)]

[Andrew Barnes]

Hi Guys,

Just wondering if any has any thoughts on my email (below)?

Cheers,
  Andrew

-------- Original Message --------
Subject: Migration of Cyrus IMAP from one server to another (realm problem?)
From: "Andrew Barnes" <andrewbarnes at mosina.com.au>
Date: Mon, March 10, 2003 9:11
To: <info-cyrus at lists.andrew.cmu.edu>

Hi Guys,

I'm in the process of migrating an email server from one physical server
to a new server.

Old Server = Cyrus IMAP v2.1.11, Cyrus-SASL v2.1.10
New Server = Cyrus IMAP v2.1.12, Cyrus-SASL v2.1.12

I have compiled both servers with DB3 support.  New server is FreeBSD
v4.7.

After compiling on new server, I have migrated the /var/imap and
/var/spool/imap directories, and my original sasldb2 auth file to the
new server.  I have configured both servers the same (imapd.conf,
cyrus.conf) - using auxprops for plaintext authentication.

My problem is that I am unable to authenticate/login to the new server
using my web-based email client (hence requirement for plaintext login).
 When I try to login, I get the following error in the /var/log/messages
on my new server

Mar 10 08:32:46 newserver imapd[1259]: badlogin: localhost.domain.com
[127.0.0.1] plaintext user1 SASL(-13): user not found: checkpass failed

I get the exact same messages in my /var/log/imapd.conf log.

FQDN of servers are (for example) oldserver.domain.com and
newserver.domain.com

/usr/local/sbin/sasldblistusers2 shows the following:

user1 at oldserver.domain.com: cmusaslsecretDIGEST-MD5
user1 at oldserver.domain.com: cmusaslsecretPLAIN
user1 at oldserver.domain.com: cmusaslsecretCRAM-MD5

I'm presuming that I need to somehow change the realm for these servers
(at the very least) to "user1 at newserver.domain.com" - ideally, they
would use "user1 at domain1.com" and "user2 at domain2.co.za"

So I guess an obvious question is - how do I migrate the user logins to
a new domain, while retaining the links to their existing emails, etc.

At the moment - all users login using simply "user1" and "<passwd>" - as
oppose to "user1 at domain.com" - any ideas on how do to this?

I'm kind of presuming that these questions are one in the same questions
- just a slight variation on a theme!

I hope that this information helps - please let me know if there's any
more information you might require.

Many Thanks for any help that you might be able to offer.
  Andrew

-- 
Andrew Barnes
Email:  andrewbarnes at mosina dot com dot au