IMAP auths even without valid mailboxes.

[John Wade]

Not that I am aware off.  We use the presence of a matching email
address in LDAP,  (combined with a filter is salsauthd) to prevent
this.  For student mail, it also depends on other attributes,  (i.e.
whether or not they are an active student.)    The filter feature is
very powerful as long as you have this info somewhere in ldap.

Hope this helps,
John

Ezsra McDonald wrote:

> Greetings,
>
> I have been running Cyrus for a couple years now and
> just discovered that any user in my LDAP db can login
> to imap even if I have not created an IMAP account for
> them.
>
> Is there a setting to tell IMAP not to allow
> authenticated users who don't have cyrus accounts?
>
> I am using IMAP4 v2.1.9
>
> --Ez
>
> __________________________________________________
> Do You Yahoo!?
> Tired of spam?  Yahoo! Mail has the best spam protection around
> http://mail.yahoo.com
> ---
> Cyrus Home Page: http://asg.web.cmu.edu/cyrus
> Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
> List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html