disallow bind_anon creates problem in cyrus

[Roland Felnhofer]

Hi,

that should give you a hint:


        saslauthd.conf

ldap_servers: ldap://127.0.0.1
ldap_search_base: ou=3Dpeople,dc=3Dexample,dc=3Dcom
ldap_bind_dn: cn=3Dproxyagent,ou=3Dspecial_users,dc=3Dexample,dc=3Dcom
ldap_password: password
ldap_scope: one
ldap_uidattr: uid
ldap_filter_mode:  yes
ldap_filter: uid=3D%u

The first 4 (ldap_servers, ldap_search_base, ldap_bind_dn, ldap_password) s=
hould be sufficient.

 =


Best regards
Roland


JOYDEEP wrote:
> Dear list,
>
> to secure my ldap server I have added the line "disallow bind_anon" in
> slapd.conf.
> I have checked by "ldapsearch" command and now my ldap doesn't allow
> anonymous bind.
> But I have now problem to use cyrus as it also based on LDAP authenticati=
on.
> I can't log in in cyrus with Correct userid and passwd but if I disable
> the "disallow bind_anon"   I can again use cyrus.
>
> Could any one kindly sugeest me to  fix it ?
>
> here is my /etc/imapd.conf
>
> =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
> configdirectory: /var/lib/imap
> partition-default: /var/spool/imap
> sievedir: /var/lib/sieve
> admins: cyrus
> allowplaintext: yes
> sasl_mech_list: LOGIN PLAIN
> allowanonymouslogin: no
> autocreatequota: 10000
> reject8bit: no
> quotawarn: 90
> timeout: 30
> poptimeout: 10
> dracinterval: 0
> drachost: localhost
> sasl_pwcheck_method: saslauthd
> servername:linux.kolkatainfoservices.in
> lmtp_overquota_perm_failure: no
> lmtp_downcase_rcpt: yes
> unixhierarchysep:  yes
> loginrealms:   kolkatainfoservices.in
> hashimapspool: true
> lmtpsocket:  /var/lib/imap/socket/lmtp
> =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D
>
>
>
>
>
>
> ----
> Cyrus Home Page: http://cyrusimap.web.cmu.edu/
> Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
> List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
>   =

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3673 bytes
Desc: S/MIME Cryptographic Signature
Url : http://lists.andrew.cmu.edu/pipermail/info-cyrus/attachments/20070320=
/bc178216/smime.bin