cyradm lm wildcard and the @ sign

[Berend de Boer]

>>>>> "Andrew" == Andrew Morgan <morgan at orst.edu> writes:

    Andrew> Use "imtest" instead of "nc".  imtest can do all the SASL
    Andrew> login magic and still gives you raw access to the
    Andrew> connection for sending commands.

Same thing:

  # imtest -u admin at server2.example.com localhost
  S: * OK server2.example.com Cyrus IMAP4 v2.2.13-Debian-2.2.13-16ubuntu1 server ready
  C: C01 CAPABILITY
  S: * CAPABILITY IMAP4 IMAP4rev1 ACL QUOTA LITERAL+ NAMESPACE UIDPLUS ID NO_ATOMIC_RENAME UNSELECT CHILDREN MULTIAPPEND BINARY SORT THREAD=ORDEREDSUBJECT THREAD=REFERENCES ANNOTATEMORE IDLE STARTTLS LOGINDISABLED AUTH=CRAM-MD5 SASL-IR
  S: C01 OK Completed
  C: A01 AUTHENTICATE CRAM-MD5
  S: + PDI4ODc2MDU3MTUuMTU0MDU3ODZAc2VydmVyMi54cGxhaW5ob3N0aW5nLmNvbT4=
  Please enter your password: 
  C: cm9vdCAzNmJhYWUzMGY1MGEwNjkzYWEyMjI1MzM1OTc0ZmE0NQ==
  S: A01 NO authentication failure
  Authentication failed. generic failure
  Security strength factor: 0
  . LIST * *@example.com
  . BAD Please login first
  . LOGIN cyrus at server2.example.com oUQR8keuun
  . NO Login only available under a layer
  C: Q01 LOGOUT
  * BYE LOGOUT received
  Q01 OK Completed
  Connection closed.


Perhaps the "only available under a layer" is an indication I must use
ssl or so? Tried that as well:


  # imtest -s -u admin -r server2.example.com
  WARNING: no hostname supplied, assuming localhost

  verify error:num=19:self signed certificate in certificate chain
  TLS connection established: TLSv1 with cipher AES256-SHA (256/256 bits)
  S: * OK server2.example.com Cyrus IMAP4 v2.2.13-Debian-2.2.13-16ubuntu1 server ready
  C: C01 CAPABILITY
  S: * CAPABILITY IMAP4 IMAP4rev1 ACL QUOTA LITERAL+ NAMESPACE UIDPLUS ID NO_ATOMIC_RENAME UNSELECT CHILDREN MULTIAPPEND BINARY SORT THREAD=ORDEREDSUBJECT THREAD=REFERENCES ANNOTATEMORE IDLE AUTH=CRAM-MD5 SASL-IR
  S: C01 OK Completed
  C: A01 AUTHENTICATE CRAM-MD5
  S: + PDQwNDczMDY5My4xNTQwNTk4NEBzZXJ2ZXIyLnhwbGFpbmhvc3RpbmcuY29tPg==
  Please enter your password: 
  C: cm9vdCBhODUyNzIxZDM4MjVkMzEwMGNjMDlkNmM0YzEzMmM1Yw==
  S: A01 NO authentication failure
  Authentication failed. generic failure
  Security strength factor: 256


And perhaps something I should mention: all users are defined in a
postgresql database, but the admin user is in an sasldb2 database.

I think that explains the problem right? Both nc and imtest use the
normal imap server interface but my admin user isn't defined there.

But isn't this a side track? I.e. I just want to have a wildcard on a
string with an @ character working? Or is this actually the root cause?


I thought I had to create users and set acls and such by using
cyradm. If not, can I just create users by login in the "normal" way,
i.e. through the imap daemon itself? Because that would open up a
different avenue.

-- 
Cheers,

Berend de Boer