cm non-INBOX folder: Permission denied

[Steven Feil]

Whenever I try to create a folder that is not a sub-folder of INBOX I
get the error "createmailbox: Permission denied". This happens
regardless of whether I use cyradm or a user mail program such as
squirrelmail.

I have set up a normal user named tester, with a home directory. I
would like cyrus-imapd to store the users mail inside of the users
home directory. However whenever I try to create a non-inbox folder I
get the error. Here is an example using cyradm

# cyradm -u tester localhost

Password:
localhost> lm
lm
INBOX (\HasChildren)               INBOX.foo2 (\HasNoChildren)
INBOX.Drafts (\HasNoChildren)      INBOX.notanother (\HasNoChildren)
INBOX.Sent (\HasNoChildren)        INBOX.try100 (\HasNoChildren)
INBOX.Trash (\HasNoChildren)       INBOX.whynot (\HasNoChildren)
INBOX.foo1 (\HasNoChildren)
localhost> cm INBOX.try200
cm INBOX.try200
localhost> lm
lm
INBOX (\HasChildren)               INBOX.foo2 (\HasNoChildren)
INBOX.Drafts (\HasNoChildren)      INBOX.notanother (\HasNoChildren)
INBOX.Sent (\HasNoChildren)        INBOX.try100 (\HasNoChildren)
INBOX.Trash (\HasNoChildren)       INBOX.try200 (\HasNoChildren)
INBOX.foo1 (\HasNoChildren)        INBOX.whynot (\HasNoChildren)
localhost> cm try201
cm try201
createmailbox: Permission denied


I tried changing the owner of the mail dir such that ..

# ls -l /home/tester
drwxrwxrwx  2 cyrus mail 1024 Nov 11 23:20 mail

# ls -l /var/spool/imap/t/user/tester

total 12
drwx------  2 cyrus mail 1024 Nov 12 12:14 Drafts
drwx------  2 cyrus mail 1024 Nov 10 15:40 Sent
drwx------  2 cyrus mail 1024 Nov 10 12:44 Trash
-rw-------  1 cyrus mail    4 Nov 12 14:28 cyrus.cache
-rw-------  1 cyrus mail  152 Nov  8 21:27 cyrus.header
-rw-------  1 cyrus mail   76 Nov 12 14:28 cyrus.index
drwx------  2 cyrus mail 1024 Nov  8 21:29 foo1
drwx------  2 cyrus mail 1024 Nov  8 21:29 foo2
drwx------  2 cyrus mail 1024 Nov 12 12:57 notanother
drwx------  2 cyrus mail 1024 Nov 12 14:29 try100
drwx------  2 cyrus mail 1024 Nov 12 15:59 try200
drwx------  2 cyrus mail 1024 Nov 11 22:47 whynot


At one time I was having an authentication problem with tester.  The
user tester seamed to have one password with saslpasswd2 and a
different one with passwd, but I changed them both so that they are
the same now. I don't seam to be having an authentication problem with
tester now, however I seam to have a nagging feeling this might cause
problems.

Here is a copy of my /etc/imapd.conf

# $Header: /var/cvsroot/gentoo-x86/net-mail/cyrus-imapd/files/imapd.conf,v 
1.5 2004/08/27 06:02:45 langthang Exp $

# Don't forget to use chattr +S (if you are using ext[23])
# when you change these directories (read the docs).
configdirectory:	/var/imap
partition-default:	/var/spool/imap
sievedir:		/var/imap/sieve

tls_ca_path:            /etc/ssl/certs
tls_cert_file:		/etc/ssl/cyrus/server.crt
tls_key_file:		/etc/ssl/cyrus/server.key

# Don't use an everyday user as admin.
admins:			cyrus2

hashimapspool:		yes
allowanonymouslogin:	no
allowplaintext:		no

# Allow renaming of top-level mailboxes.
#allowusermoves:         yes

# Use this if sieve-scripts could be in ~user/.sieve.
#sieveusehomedir:	yes

# Use saslauthd if you want to use pam for imap.
# But be warned: login with DIGEST-MD5 or CRAM-MD5
# is not possible using pam.
sasl_pwcheck_method:	saslauthd

####################################################
## This is a recommended authentication method if you
## emerge cyrus-sasl with 'postgres' or 'mysql'
## To use with mysql database uncomment those lines below.

#sasl_pwcheck_method: auxprop
#sasl_auxprop_plugin: sql

## possible values for sasl_auxprop_plugin 'mysql', 'pgsql', 'sqlite'.
#sasl_sql_engine: mysql

## all possible values.
#sasl_mech_list: LOGIN PLAIN CRAM-MD5 DIGEST-MD5 NTLM
## or limit to CRAM-MD5 only
#sasl_mech_list: CRAM-MD5

## change below to suit your setup.
sasl_sql_user: mailsqluser
sasl_sql_passwd: password
sasl_sql_database: mailsqldb
sasl_sql_hostnames: localhost
sasl_sql_select: SELECT clear FROM users WHERE email = '%u@%r'


-- My Setup --

Version: 2.2.12 cyrus-imapd
          2.1.20 cyrus-sasl
          2.2.10 cyrus-imap-admin
Distro:  Gentoo Linux 2005.0 (2005-03-30)
Kernel:  version 2.4.29-linode39-1um  (User Mode Linux)