IMAP auths even without valid mailboxes.

[Ezsra McDonald]

Greetings,

I have been running Cyrus for a couple years now and
just discovered that any user in my LDAP db can login
to imap even if I have not created an IMAP account for
them.

Is there a setting to tell IMAP not to allow
authenticated users who don't have cyrus accounts?

I am using IMAP4 v2.1.9

--Ez


__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 
---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html