> >> We have the following set in the imapd.conf for 2.3.1 install:
> >> virtdomains: on
> >> admins: globaladmin [EMAIL PROTECTED]
> >> defaultdomain: xyz.com
> >>
> >> and in saslauthd.conf:
> >> ldap_default_realm: xyz.com
> >>
> >> Following cyradm logins fail for the 'globaladmin', whether or not
> >> FQDN is passed as an option of '-u' argument:
> >>
> >> cyradm -u globaladmin localhost
> >> cyradm -u [EMAIL PROTECTED] localhost
> >>
> >> However [EMAIL PROTECTED] succeeds in login. Ldap logs indicate
> >> that the domain passed for 'globaladmin' is 'adari.net' and not
> >> xyz.com. It appears that the application is doing a reverse dns
> >> and obtaining the domain 'adari.net' instead of using the
> >> defaultdomain (ldap_default_realm).
> >>
> >> Any other parameters to set for the system to pick the right domain
> >> (ie xyz.com) for the globaladmin?
> >
> > A bit of debugging the saslauth revealed that it is not going to
> > use "ldap_default_realm" value unless it gets a null ("") realm
> > from imap. I have not looked into the imap code, but it appears
> > that it is sending the "reverse dns" host name as the realm.
> >
> > Anyway to force imap to use passed fqdn as the realm for following
> > case: cyradm -u [EMAIL PROTECTED] localhost
> >
> > Alternatively, is there anyway to make imap send null ("") to sasl
> > when global admin logins as: cyradm -u globaladmin localhost
> >
> > About a year half ago, when we looked to migrate to 2.2.x from 2.1.x,
> > above scenario (cyradm -u globaladmin localhost) worked. Something
> > may have changed since then. Docs and mail archives have no references.
> > Appreciate any pointers.
> >
> 
> Use virtdomains: userid
> 
> -- 
> Igor

That worked. Thanks Igor!
__
Seva
----
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Reply via email to