Intergation with MDM solutions

[Dan White]

On 01/21/15 14:00 +0530, Ram wrote:
>I need to integrate cyrus IMAP with a MDM ( Mobile Device Management )
>solution.
>The idea is that even if the IMAP ports are open only selective users /
>devices should be allowed from an external Network.
>Internal Network everyone is allowed.
>
>I have seen that ready MDM solutions come up with server side plugins
>for Microsoft Exchange which can help achieve this
>
>
>Is there a software for Cyrus Imap server that can allow selective users
>/ devices  only ?

The userdeny_db database can be used to selectively allow certain users.
Search the list archives for flat file manipulation with cyr_dbtool. It can
be configured to use a sql database for integration with 3rd party tools.

See:
http://cyrusimap.org/docs/cyrus-imapd/2.4.17/internal/database-formats.php

To configure different access rules based on network, create two imapd
services in cyrus.conf, with each listening on the appropriate network
(IP). e.g.:

...
SERVICES {
    imapint     cmd="imapd" listen="192.168.1.1:imap" ...
    imapext     cmd="imapd" listen="203.0.113.1:imap" ...
...
}

The service name you configure within the userdeny database should match
the service name in cyrus.conf (e.g. imapext). You would not configure any
entries for imapint which would allow access to all internal connections by
default.

I'm not aware of a way to restrict devices (I'm assuming, based on a client
string?). There may be 3rd party imap proxies that can assist with that.

-- 
Dan White