Re: 2FA and IMAP

[Michael Menge]

Hi, 

You can configure a different IMAP Service in cyrus.conf for roundcube 
(differnt IP or port) and use pam with for authentication or block login for 
the other services wither cyrus denydb



Am 21. April 2019 23:09:06 MESZ schrieb Marcus Schopen :
>Hi,
>
>a friend wants to restrict access to his mailbox with 2FA. As webmailer
>I use Roundcube, which offers a 2FA plugin. But in the end this is
>pointless, because besides the webmailer there is also the native IMAP
>access available. Is it therefore possible to restrict the access to a
>single IMAP account to a certain IP so that this mailbox can only be
>accessed via the Roundcube?
>
>Ciao!
>Marcus
>
>
>Cyrus Home Page: http://www.cyrusimap.org/
>List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
>To Unsubscribe:
>https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus

-- 
Diese Nachricht wurde von meinem Android-Mobiltelefon mit K-9 Mail gesendet.
Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus

Re: 2FA and IMAP

[Alvin Starr]

This is not multifactor authentication  and I am not sure if it will 
work but I was kicking around the idea of trying to use client 
certificates to insure that only mail clients with the proper client 
certificate  installed can connect.



On 4/23/19 2:46 PM, Christian Fontana wrote:
Hi. But the documentation not seems to be complete. I was not able to 
find an example or an explanation about how to restrict access to a 
single IMAP account from a certain IP.

May you point me to the righe page of documentation?

thanks


On Mon, 22 Apr 2019 at 19:14, Adam Tauno Williams 
mailto:awill...@whitemice.org>> wrote:


On Sun, 2019-04-21 at 23:09 +0200, Marcus Schopen wrote:
> Hi,
>
> a friend wants to restrict access to his mailbox with 2FA. As
> webmailer I use Roundcube, which offers a 2FA plugin. But in the end
> this is pointless, because besides the webmailer there is also the
> native IMAP access available. Is it therefore possible to restrict
> the access to a single IMAP account to a certain IP so that this
> mailbox can only be accessed via the Roundcube?

I doubt it, but maybe.

All the authentication stuff is handled by SASL - not really Cyrus -
and SASL is deeply configurable.

https://www.cyrusimap.org/sasl/

-- 
Adam Tauno Williams, awill...@whitemice.org


Multi-Modal Activists Against Auto Dependent Development
resisting the unAmerican socialists of the Motorist hegemony
http://www.mmaaadd.org

Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus



Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus


--
Alvin Starr   ||   land:  (647)478-6285
Netvel Inc.   ||   Cell:  (416)806-0133
al...@netvel.net  ||


Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus

Re: 2FA and IMAP

[Christian Fontana]

Hi. But the documentation not seems to be complete. I was not able to find
an example or an explanation about how to restrict access to a single IMAP
account from a certain IP.
May you point me to the righe page of documentation?

thanks


On Mon, 22 Apr 2019 at 19:14, Adam Tauno Williams 
wrote:

> On Sun, 2019-04-21 at 23:09 +0200, Marcus Schopen wrote:
> > Hi,
> >
> > a friend wants to restrict access to his mailbox with 2FA. As
> > webmailer I use Roundcube, which offers a 2FA plugin. But in the end
> > this is pointless, because besides the webmailer there is also the
> > native IMAP access available. Is it therefore possible to restrict
> > the access to a single IMAP account to a certain IP so that this
> > mailbox can only be accessed via the Roundcube?
>
> I doubt it, but maybe.
>
> All the authentication stuff is handled by SASL - not really Cyrus -
> and SASL is deeply configurable.
>
> https://www.cyrusimap.org/sasl/
>
> --
> Adam Tauno Williams, awill...@whitemice.org
> Multi-Modal Activists Against Auto Dependent Development
> resisting the unAmerican socialists of the Motorist hegemony
> http://www.mmaaadd.org
> 
> Cyrus Home Page: http://www.cyrusimap.org/
> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
> To Unsubscribe:
> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
>

Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus

Re: 2FA and IMAP

[Adam Tauno Williams]

On Sun, 2019-04-21 at 23:09 +0200, Marcus Schopen wrote:
> Hi,
> 
> a friend wants to restrict access to his mailbox with 2FA. As
> webmailer I use Roundcube, which offers a 2FA plugin. But in the end
> this is pointless, because besides the webmailer there is also the
> native IMAP access available. Is it therefore possible to restrict
> the access to a single IMAP account to a certain IP so that this
> mailbox can only be accessed via the Roundcube?

I doubt it, but maybe.  

All the authentication stuff is handled by SASL - not really Cyrus -
and SASL is deeply configurable.

https://www.cyrusimap.org/sasl/

-- 
Adam Tauno Williams, awill...@whitemice.org
Multi-Modal Activists Against Auto Dependent Development
resisting the unAmerican socialists of the Motorist hegemony
http://www.mmaaadd.org 

Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus