[Web-cyradm] resolving SASL vs. crypt'd pwds in MySQL, auxprop vs pam_mysql, & support for secret-based auth mechs [x-posted]

OpenMacNews web-cyradm.20.openmacnews at spamgourmet.com
Tue Nov 9 16:50:21 CET 2004


jeez, well THAT was fast.  =)

thx!  i'll give it a try asap, and report back here.

cheers,

richard

> Here's an updated patch for the ENABLE_FQUN which allows you to use
> virtual domain support for cyrus with web-cyradm.  I've merged the
> patches from Alexander Koch ak @ ilk.net submitted from
> change_password.php.patch, newaccount.php.patch, search.php.patch.
> I've made modifications to his patches to make it more concise and fixed
> the behavior of his change_password patch.
>
> Be sure to modify your conf.php for this patch, there are notes in the
> patched conf.php.dist
>
> http://www.shaolinux.org/web-cyradm-0.5.4-1.FQUN.20041109.diff
>
> I've also attached it to this email.
>
> Here is an excerpt from my /etc/imapd.conf which assumes you are using
> the sasl2 patch from
> http://frost.ath.cx/software/cyrus-sasl-patches/
> that provides support for crypt passwords.
>
> sasl_pwcheck_method: auxprop
> sasl_auxprop_plugin: sql
> sasl_password_format: crypt
> sasl_sql_hostnames: localhost
> sasl_sql_user: mail
> sasl_sql_passwd: SOME_AWESOME_PASSWORD!!!!
> sasl_sql_database: mail
> sasl_sql_statement: select password from accountuser where
> username='%u@%r' or (username='%u' and domain_name='')
> sasl_sql_verbose: true
>
> NOTE: The sql query above looks for a user with no domain name, this is
> so the cyrus administrator can authenticate as well.
>
> Please submit bugs if you find any.



More information about the Web-cyradm mailing list