auxprop vs saslauthd

[Ken Murchison]

Will Prater wrote:
> List,
> 
> I am authenticating users to a MySQL backend and currently I am using 
> PAM and saslauthd, however, I wish to restrict certain users to only 
> using POP.
> 
> I can create different service names in cyrus.conf, however, this does 
> not allow the different service identifiers in PAM and the only other 
> workaround I can seem to find is using auxprop. Auxprop will let me have 
> a different MySQL select statement for any cyrus service. This is ideal 
> for restriction users access. Is there a way to do such a thing with 
> PAM.  Can cyrus send a different service identifier for PAM when 
> creating a new service in Cyrus.conf?

The SASL service name for each protocol is always passed to saslauthd 
which in turn is passed to PAM.  I currently have different PAM configs 
for IMAP (employees) and POP3 (family members).

-- 
Kenneth Murchison     Oceana Matrix Ltd.
Software Engineer     21 Princeton Place
716-662-8973 x26      Orchard Park, NY 14127
--PGP Public Key--    http://www.oceana.com/~ken/ksm.pgp
---
Home Page: http://asg.web.cmu.edu/cyrus
Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html