Re: auth against LDAP

2004-11-01 Thread Helmut Weigel
Hi, on redhat EL you cannot use the installed packeage, because of no LDAP support. Get the sources an compile with otion "--with-ldap" Hope this helps Helmut Am Fr, den 29.10.2004 schrieb Fred Blaise um 6:02: > Hello all > > I have a regular cyrus install working and an openldap up and runnin

Re: auth against LDAP

2004-10-29 Thread Jules Agee
It's not that bad... certainly a lot better than it used to be. You have to set it up to accept plain passwords, authenticate against saslauthd (in the sasl2-bin package, in case you haven't got that far already), and set up saslauthd to authenticate against the LDAP server. You also want to se

Re: auth against LDAP

2004-10-29 Thread Fred Blaise
Thank you all for the responses :) I think I will go for sasl auth directly to ldap. I couldn't find a debian package for cyrus21-sasl.. did you compile it from source? I do have the saslauthd binary, but i dont have the saslauthd.conf... thanks fred On Fri, 2004-10-29 at 11:54 +0200, Ana Ribas

Re: auth against LDAP

2004-10-29 Thread bnies
>Are you really sure ? I don't know PAM on solaris, but if you only >allow imap, sieve and possibly pop3 in e.g. /etc/pam.d/ user can't get >an interactive account. On Solaris with LDAP NSS, the LDAP accounts must have ObjectClass: posixAccount ObjectCLass: shadowAccount and therefore UID

Re: auth against LDAP

2004-10-29 Thread Ana Ribas/Upcnet
Hi, We have configured cyrus with sasl against ldap (all with ssl) in a debian machine and all works fine. We don't use PAM. These are our configurations: Cyrus 2.1.13 --> /usr/cyrus/bin/master & /etc/imapd.conf: ... sasl_pwcheck_method: saslauthd allowplaintext: yes sasl_mech_list:

Re: auth against LDAP

2004-10-29 Thread Michael Plate
Hi, [EMAIL PROTECTED] wrote: [...] The disadvantage of using PAM is that the mail users get system accounts. Are you really sure ? I don't know PAM on solaris, but if you only allow imap, sieve and possibly pop3 in e.g. /etc/pam.d/ user can't get an interactive account. /etc/pam.d/imap (with ac

Re: auth against LDAP

2004-10-29 Thread bnies
>I think there are other ways of doing it (eg. not using pam as an extra >mechanism) but its working good! We had once running saslauthd 2.1.18 on Solaris 8 authenticating using PAM against NIS+ which worked fine. When we moved the system to use LDAP saslauthd crashed every few minutes. We now ha

Re: auth against LDAP

2004-10-29 Thread Tarjei Huse
Quoting EISELE Pascal <[EMAIL PROTECTED]>: > I've got the same problem :( It's not simple... > > Fred Blaise a écrit : > > >Hello all > > > >I have a regular cyrus install working and an openldap up and running. I > >am running ubuntu on this machine, but the "real" machine will be debian > >sar

Re: auth against LDAP

2004-10-29 Thread Uli Schellhaas
Hello, we configured saslauthd for plaintext mechanisms (PLAIN, Login), so it can use pam. an Pam is configured to query against a Ldap Server. If username/password can log into the ldap Server, you are authenticated. I think there are other ways of doing it (eg. not using pam as an extra mechani

Re: auth against LDAP

2004-10-29 Thread EISELE Pascal
I've got the same problem :( It's not simple... Fred Blaise a écrit : Hello all I have a regular cyrus install working and an openldap up and running. I am running ubuntu on this machine, but the "real" machine will be debian sarge. I would like to set up cyrus to use ldap. Any pointers? any best w