Postfix + Cyrus error with GSSAPI/kerberos - Mailbox does not exist

[John/SML]

Hi Dan,

Thank you for your prompt reply.

I have two servers (namely kdcsv01.auth.hk1.sml.citizen.co.jp and imapsv02.auth.hk1.sml.citizen.co.jp) for virtual domains of Postfix by looking up from LDAP database, such 
that the virtual_alias_maps will map user1 at auth.hk1.sml.citizen.co.jp to user1 at kdcsv01.auth.hk1.sml.citizen.co.jp, and user2 at auth.hk1.sml.citizen.co.jp to user2 at imapsv02.auth.hk1.sml.citizen.co.jp. The mail delivers to respective servers successfully.

>Your mailbox is nicky.mok at kdcsv01.auth.hk1.sml.citizen.co.jp and your 
default domain is
>auth.hk1.sml.citizen.co.jp.
>
>What format is your kerberos principal (does it include kdcsv01?).

No, the kerberos principal does not include "kdcsv01". The kerberos 
principals are all under the realm of "AUTH.HK1.SML.CITIZEN.CO.JP", e.g. 
nicky.mok at AUTH.HK1.SML.CITIZEN.CO.JP. Any thing wrong with that?

Thanks a lot.

John Mok






Dan White <dwhite at olp.net>
08/14/2009 05:20 PM

 
        To:     John/SML <john at sml.citizen.co.jp>
        cc:     info-cyrus at lists.andrew.cmu.edu
        Subject:        Re: Postfix + Cyrus error with GSSAPI/kerberos - Mailbox does not exist


On 14/08/09 16:44 +0800, John/SML wrote:
>Hi,
>
>I am trying to setup a mail server using Postfix + Cyrus with virtual 
>domains and GSSAPI/kerberos. I checked the log /var/log/mail.log and the 
>incoming e-mail could be delivered to the mailbox successfully. The 
>problem is that the Thunderbird mail client prompts an error "Mailbox 
does 
>not exist" while checking inbox :- 
>cyradm> lm
>user/nicky.mok at kdcsv01.auth.hk1.sml.citizen.co.jp (\HasNoChildren)
>
>=== begin of mail.log ===
>
> Aug 14 16:32:18 kdcsv01 cyrus/master[1552]: about to exec 
>/usr/lib/cyrus/bin/imapd
> Aug 14 16:32:18 kdcsv01 cyrus/imap[1552]: executed
> Aug 14 16:32:18 kdcsv01 cyrus/imap[1552]: accepted connection
> Aug 14 16:32:19 kdcsv01 cyrus/imap[1552]: login: John.sml.citizen.co.jp 
>[10.144.1.192] nicky.mok GSSAPI User logged in
>
>=== end of mail.log ===
>
>=== begin of imapd.conf ===
>
>sasl_mech_list: gssapi pam

pam is not valid here, but it's not causing any breakage.

>virtdomains: yes
>defaultdomain: auth.hk1.sml.citizen.co.jp

Your mailbox is nicky.mok at kdcsv01.auth.hk1.sml.citizen.co.jp and your 
default domain is
auth.hk1.sml.citizen.co.jp.

What format is your kerberos principal (does it include kdcsv01?).

-- 
Dan White


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.andrew.cmu.edu/pipermail/info-cyrus/attachments/20090815/fc145bcf/attachment.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/octet-stream
Size: 204 bytes
Desc: not available
Url : http://lists.andrew.cmu.edu/pipermail/info-cyrus/attachments/20090815/fc145bcf/attachment.obj