ldap/imapd

[Igor Brezac]

On Tue, 7 Jun 2005, Dmitriy Kirhlarov wrote:

> Hi, list.
>
> I want use cyrus-imapd with ldap authentication.
> ldap-server not local.
>
> Many stories in the internet with using saslauthd and NOT using ldapS.

What stories?  saslauthd can use ldaps just fine.

> I not want use saslauthd and want use ldap-over-ssl.

Are you saying you want to use auxprop rather than saslauthd or your only 
requirement is to use ldaps.  Both auxprop and saslauthd can be configured 
to use ldaps.

> My system and packages:
> uname -rs && pkg_info -Ix cyrus
> FreeBSD 5.4-RELEASE-p1
> cyrus-imapd-2.2.12  The cyrus mail server, supporting POP3 and IMAP4 protocols
> cyrus-sasl-2.1.20_1 RFC 2222 SASL (Simple Authentication and Security Layer)
> cyrus-sasl-ldapdb-2.1.21 SASL LDAPDB auxprop plugin
>
> my imapd.conf:
> admins: root cyrus khamits
> allowanonymouslogin: 1
> configdirectory: /var/imap
> defaultdomain: clh.cluster
> partition-default: /var/spool/imap
> fulldirhash: 1
> hashimapspool: 1
> imapidresponse: 1
> ldap_filter: (uid=%D)
> ldap_member_attribute: uid
> ldap_member_base: ou=users,o=higis
> ldap_member_method: filter
> ldap_restart: 1
> ldap_uri: ldaps://clh.cluster/
> sasl_pwcheck_method: auxprop
> sievedir: /var/imap/sieve
> sieveusehomedir: 1
> servername: clh.cluster
> singleinstancestore: 1
> tls_ca_file: /etc/ssl/CA/cacert.pem
> tls_cert_file: /etc/ssl/CA/certs/cyrus-imapd.crt
> tls_key_file: /etc/ssl/CA/ssl.key/cyrus-imapd.key
>

You setup pts/ldap.

You do not have any ldapdb related configuration.

I suggest you learn more about sasl.  See 
https://bugzilla.andrew.cmu.edu/cgi-bin/cvsweb.cgi/src/sasl/doc/options.html?rev=1.30&content-type=text/x-cvsweb-markup 
for ldapdb options.

-Igor

> I install cmu-backend.conf as cyrus.conf
>
> When I run
> /usr/local/etc/rc.d/imapd.sh start
>
> I get this messages in the log:
> Jun  7 17:25:30 clh0 master[65028]: process started
> Jun  7 17:25:31 clh0 master[65032]: about to exec /usr/local/bin/ksrvtgt
> Jun  7 17:25:31 clh0 master[65032]: can't exec /usr/local/bin/ksrvtgt for startup: No such file or directory
> Jun  7 17:25:31 clh0 master[65028]: process 65032 exited, status 71
> Jun  7 17:25:31 clh0 master[65033]: about to exec /usr/local/cyrus/bin/ctl_cyrusdb
> Jun  7 17:25:31 clh0 ctl_cyrusdb[65033]: recovering cyrus databases
> Jun  7 17:25:31 clh0 ctl_cyrusdb[65033]: skiplist: recovered /var/imap/mailboxes.db (0 records, 144 bytes) in 0 seconds
> Jun  7 17:25:31 clh0 ctl_cyrusdb[65033]: skiplist: recovered /var/imap/annotations.db (0 records, 144 bytes) in 0 seconds
> Jun  7 17:25:31 clh0 ctl_cyrusdb[65033]: done recovering cyrus databases
> Jun  7 17:25:31 clh0 master[65034]: about to exec /usr/local/cyrus/bin/ctl_mboxlist
> Jun  7 17:25:31 clh0 master[65028]: process 65034 exited, status 75
> Jun  7 17:25:31 clh0 master[65028]: unable to create notifyd listener socket: No such file or directory
> Jun  7 17:25:31 clh0 master[65028]: unable to create lmtpunix listener socket: No such file or directory
> Jun  7 17:25:31 clh0 master[65028]: unable to create ptloader listener socket: No such file or directory
> Jun  7 17:25:31 clh0 master[65028]: ready for work
> Jun  7 17:25:31 clh0 master[65035]: about to exec /usr/local/bin/ksrvtgt
> Jun  7 17:25:31 clh0 master[65035]: can't exec /usr/local/bin/ksrvtgt on schedule: No such file or directory
>
>
> Where is error in my config?
>
>

-- 
Igor
---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html