There are two things you could set in your configuration files. I found
these by looking through the sasl and cyrus source code, the only
complete and always up-to-date documentation. It will take you an hour
or two of poking around to get up to speed, but it more than pays for
itself.
1) To use separate sasldb files, the parameter is 'sasl_sasldb_path'
You can see this in action by checking out lib/db_berkeley.c ( or
db_gdbm.c, etc etc ) in the SASL source. You will find a line where the
option 'sasldb_path' is consulted. The Cyrus servers prepend 'sasl_'
before getting these options from Cyrus configuration files ( see
imap/config.c in Cyrus sources ).
2) To change the realm used by Cyrus in sasldb lookups, set 'servername'
in configuration file.
You can find the relavent code in imap/config.c in the Cyrus
sources. Keep in mind, this parameter sets the servername displayed to
users in greeting banners and might have other uses ( I didn't see any,
but I didn't look hard). Values such as imap.mydomain.com and
pop3.mydomain.com should be mostly harmless. BTW, Cyrus doesn't prepend
'sasl_' to this setting (its not really considered an SASL setting)
Cheers
Chris
Mark Davis wrote:
>Hi!
>
>
>>You can use separate configuration files for imap and pop3. Copy your
>>current /etc/imapd.conf to /etc/pop3d.conf and make the changes for
>>appropriate pop3 login. Then, in cyrus.conf modify the pop3d line to
>>include '-C /etc/pop3d.conf'. For instance, you could specify separate
>>sasldb files, although, then you have the headache of keeping them in
>>
>sync.
>
>Good idea... I overlooked the possibility to insert a complete cmdline for
>starting the demons.. That's really cool.
>
>But how do i change the location of the sasldb (No hint in the
>doc-directory)?
>
>Isn't it even possible to use different realms for pop3/imap ? Then i only
>have one file and "sasldblistusers |grep $USER" would show me the mechanism
>and even if the user can use pop3 and/or imap.
>
>e.g.
>user: mark realm: IMAP mech: PLAIN
>user: mark realm: IMAP mech: DIGEST-MD5
>user: mark realm: POP3 mech: PLAIN
>user: mark realm: POP3 mech: DIGEST-MD5
>
>What would be the disadvantage ? Or is it even not advisable ? What is the
>"realm" normally used for ?
>
>Oh, oh, oh... So many questions... I only hope other people on the
>mailinglist will learn something too from it...
>
>Greets
>Mark Davis
>
