Re: cyrus super user -- able to login in as any user with a superuser password

2014-06-18 Thread Michael Menge

Hi,

Quoting Simon Matter simon.mat...@invoca.ch:


hi all,

i have a cyrus instance with an ldap backend -- works beautifully ...

i was wondering if there is a way to be able to login as any user with a
`superuser` password without messing with the users `real` password.

i am assuming this would have to involve some saslauthd magic ...


Not really saslauthd magic, just check the proxyservers option in
imapd.conf.

Regards,
Simon



To uses SASL proxy Authentication you need to use a mech that
supports porxy auth. PLAIN does support it, LOGIN does not.


Regards.

   Michael



M.MengeTel.: (49) 7071/29-70316
Universität Tübingen   Fax.: (49) 7071/29-5912
Zentrum für Datenverarbeitung  mail:  
michael.me...@zdv.uni-tuebingen.de

Wächterstraße 76
72074 Tübingen

smime.p7s
Description: S/MIME Signatur

Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus

Re: cyrus super user -- able to login in as any user with a superuser password

2014-06-18 Thread mayak
On 06/18/2014 11:24 AM, Michael Menge wrote:
 Hi,

 Quoting Simon Matter simon.mat...@invoca.ch:

 hi all,

 i have a cyrus instance with an ldap backend -- works beautifully ...

 i was wondering if there is a way to be able to login as any user with a
 `superuser` password without messing with the users `real` password.

 i am assuming this would have to involve some saslauthd magic ...

 Not really saslauthd magic, just check the proxyservers option in
 imapd.conf.

 Regards,
 Simon


 To uses SASL proxy Authentication you need to use a mech that
 supports porxy auth. PLAIN does support it, LOGIN does not.
hi all,

thanks! the proxyservers option is working great -- with one login, i am able 
to use imapfilter to groom all account/folders of old messages ...

cheers

m



Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus


Re: cyrus super user -- able to login in as any user with a superuser password

2014-06-18 Thread Nic Bernstein
On 06/18/2014 09:55 AM, mayak wrote
 hi all,

 thanks! the proxyservers option is working great -- with one login, i am able 
 to use imapfilter to groom all account/folders of old messages ...

 cheers

Mayak,
If that is your purpose, you may be much better served by simply using
mailbox annotations and the built-in expiration system.

For example, a client of ours uses this script as a daily cronjob to
make sure the proper annotations are set on all desired mailboxes:

#!/bin/sh
#
# set_cyrus_annotations.sh - Set the standard annotations for the Spam,
#Trash and systems mailbvoxes so they expire
#properly.
#
USER=cyradmin
PASS=password
HOST=localhost

cyradm -u $USER -w $PASS $HOST  _EOF_
mboxcfg systems expire 60
mboxcfg user.%.Spam expire 7
mboxcfg user.%.Trash expire 2
_EOF_

The normal expiration mechanisms (cyr_expire in cyrus.conf) of Cyrus
will then clean up those mailboxes on the desired schedule.  The biggest
advantage is that this all happens local to the server, without tying up
network resources with protocol discussions, local processing, etc.

Cheers,
-nic

-- 
Nic Bernstein n...@onlight.com
Onlight, Inc. www.onlight.com
219 N. Milwaukee St., Suite 2av. 414.272.4477
Milwaukee, Wisconsin  53202


Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus

cyrus super user -- able to login in as any user with a superuser password

2014-06-17 Thread mayak
hi all,

i have a cyrus instance with an ldap backend -- works beautifully ...

i was wondering if there is a way to be able to login as any user with a 
`superuser` password without messing with the users `real` password.

i am assuming this would have to involve some saslauthd magic ...

many thanks

m


Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus


Re: cyrus super user -- able to login in as any user with a superuser password

2014-06-17 Thread Simon Matter
 hi all,

 i have a cyrus instance with an ldap backend -- works beautifully ...

 i was wondering if there is a way to be able to login as any user with a
 `superuser` password without messing with the users `real` password.

 i am assuming this would have to involve some saslauthd magic ...

Not really saslauthd magic, just check the proxyservers option in
imapd.conf.

Regards,
Simon


Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus