auth against LDAP

Fred Blaise chapeaurouge at madpenguin.org
Fri Oct 29 09:21:52 EDT 2004


Thank you all for the responses :)

I think I will go for sasl auth directly to ldap.
I couldn't find a debian package for cyrus21-sasl.. did you compile it
from source?
I do have the saslauthd binary, but i dont have the saslauthd.conf...

thanks

fred

On Fri, 2004-10-29 at 11:54 +0200, Ana Ribas/Upcnet wrote:
> 
> 
> 
> 
> Hi,
> 
> We have configured cyrus with sasl against ldap (all with ssl) in a debian
> machine and all works fine.
> We don't use PAM.
> These are our configurations:
> 
> Cyrus 2.1.13      -->   /usr/cyrus/bin/master &
> 
> /etc/imapd.conf:
> ...
> sasl_pwcheck_method: saslauthd
> allowplaintext: yes
> sasl_mech_list: PLAIN
> tls_ca_file: /var/imap/certs/escert.pem
> ...
> 
> SASL 2.1.15 -->   /usr/local/sbin/saslauthd -a ldap
> 
> /usr/local/etc/saslauthd.conf:
> ldap_servers: ldaps://myserver.upc.es
> ldap_port: 636
> ldap_bind_dn: cn=myuser ,o=upc
> ldap_bind_pw: xxxxxxxxxx
> ldap_filter: (&(cn=%u) (objectclass=person))
> ldap_tls_cacert_file: /var/imap/certs/escert.pem
> 
> OpenLDAP 2.1.22
> 
> /etc/openldap/ldap.conf:
> TLS_CACERT   /var/imap/certs/escert.pem
> 
> Regards.
> 
> - ANNA -
> 
> 
>                                                                            
>              Fred Blaise                                                   
>              <chapeaurouge at mad                                             
>              penguin.org>                                               To 
>              Sent by:                  info-cyrus at lists.andrew.cmu.edu     
>              owner-info-cyrus@                                          cc 
>              lists.andrew.cmu.                                             
>              edu                                                   Subject 
>                                        auth against LDAP                   
>                                                                            
>              29/10/2004 06:02                                              
>                                                                            
>                                                                            
>                                                                            
>                                                                            
> 
> 
> 
> 
> Hello all
> 
> I have a regular cyrus install working and an openldap up and running. I
> am running ubuntu on this machine, but the "real" machine will be debian
> sarge.
> 
> I would like to set up cyrus to use ldap.
> 
> Any pointers? any best way to do it? Links? howtos? :)
> 
> thanks a lot
> 
> fred
> 
> ---
> Cyrus Home Page: http://asg.web.cmu.edu/cyrus
> Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
> List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
> 
> 
> ---
> Cyrus Home Page: http://asg.web.cmu.edu/cyrus
> Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
> List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html




More information about the Info-cyrus mailing list