Mupdate server: no mechanism avaible

Ondrej Sury ondrej at sury.org
Wed Sep 7 11:35:30 EDT 2005


Hello,

just quick hint.

I suggest to split frontends and murder+backends auth configuration.

Let frontends use ldap and don't put authorized user into LDAP and
murder and backends can happily use auxprop with small /etc/sasldb2
database which includes small number (cyrus, mupdate, murder) users.

This makes possible to enable strong methods between frontends and
backends and makes your setup more secure because nobody can brute force
important passwords on frontends.

Ondrej.
-- 
Ondrej Sury <ondrej at sury.org>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : https://lists.andrew.cmu.edu/mailman/private/info-cyrus/attachments/20050907/8ec6ae33/attachment.bin


More information about the Info-cyrus mailing list