cm non-INBOX folder: Permission denied

[Craig White]

On Sat, 2005-11-12 at 17:09 -0600, Steven Feil wrote:
> Whenever I try to create a folder that is not a sub-folder of INBOX I
> get the error "createmailbox: Permission denied". This happens
> regardless of whether I use cyradm or a user mail program such as
> squirrelmail.
----
the only way you can accomplish this is to use altnamespace: 1 - I
wouldn't recommend doing that. All mail as a subfolder of INBOX is neat
and clean
----
> I have set up a normal user named tester, with a home directory. I
> would like cyrus-imapd to store the users mail inside of the users
> home directory.
----
if you want maildir - use courier. cyrus-imapd doesn't work that way. It
is designed to be self contained and used with users that may be
'virtual' users and don't have home directories.
----
>  However whenever I try to create a non-inbox folder I
> get the error. Here is an example using cyradm
> 
...snip...
> localhost> cm try201
> cm try201
> createmailbox: Permission denied
----
see above
----
> 
> I tried changing the owner of the mail dir such that ..
> 
> # ls -l /home/tester
> drwxrwxrwx  2 cyrus mail 1024 Nov 11 23:20 mail
> 
> # ls -l /var/spool/imap/t/user/tester
> 
----
you're wasting your time here...
----
> 
> At one time I was having an authentication problem with tester.  The
> user tester seamed to have one password with saslpasswd2 and a
> different one with passwd, but I changed them both so that they are
> the same now. I don't seam to be having an authentication problem with
> tester now, however I seam to have a nagging feeling this might cause
> problems.
> 
> Here is a copy of my /etc/imapd.conf
> 
> # $Header: /var/cvsroot/gentoo-x86/net-mail/cyrus-imapd/files/imapd.conf,v 
> 1.5 2004/08/27 06:02:45 langthang Exp $
> 
> # Don't forget to use chattr +S (if you are using ext[23])
> # when you change these directories (read the docs).
> configdirectory:	/var/imap
> partition-default:	/var/spool/imap
> sievedir:		/var/imap/sieve
> 
> tls_ca_path:            /etc/ssl/certs
> tls_cert_file:		/etc/ssl/cyrus/server.crt
> tls_key_file:		/etc/ssl/cyrus/server.key
> 
> # Don't use an everyday user as admin.
> admins:			cyrus2
> 
> hashimapspool:		yes
> allowanonymouslogin:	no
> allowplaintext:		no
> 
> # Allow renaming of top-level mailboxes.
> #allowusermoves:         yes
> 
> # Use this if sieve-scripts could be in ~user/.sieve.
> #sieveusehomedir:	yes
> 
> # Use saslauthd if you want to use pam for imap.
> # But be warned: login with DIGEST-MD5 or CRAM-MD5
> # is not possible using pam.
> sasl_pwcheck_method:	saslauthd
> 
> ####################################################
> ## This is a recommended authentication method if you
> ## emerge cyrus-sasl with 'postgres' or 'mysql'
> ## To use with mysql database uncomment those lines below.
> 
> #sasl_pwcheck_method: auxprop
> #sasl_auxprop_plugin: sql
> 
> ## possible values for sasl_auxprop_plugin 'mysql', 'pgsql', 'sqlite'.
> #sasl_sql_engine: mysql
> 
> ## all possible values.
> #sasl_mech_list: LOGIN PLAIN CRAM-MD5 DIGEST-MD5 NTLM
> ## or limit to CRAM-MD5 only
> #sasl_mech_list: CRAM-MD5
> 
> ## change below to suit your setup.
> sasl_sql_user: mailsqluser
> sasl_sql_passwd: password
> sasl_sql_database: mailsqldb
> sasl_sql_hostnames: localhost
> sasl_sql_select: SELECT clear FROM users WHERE email = '%u@%r'
> 
> 
> -- My Setup --
> 
> Version: 2.2.12 cyrus-imapd
>           2.1.20 cyrus-sasl
>           2.2.10 cyrus-imap-admin
> Distro:  Gentoo Linux 2005.0 (2005-03-30)
> Kernel:  version 2.4.29-linode39-1um  (User Mode Linux)
----
check your saslauthd.conf for it's methodology. authentication for
cyrus-imapd passes to saslauthd and that is obviously where your
confusion stems from - you didn't show us that. If all your users are
'real' posix users then you probably want saslauthd to use pam for
authentication.

Craig


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.