If all you want about LDAP is to authenticate your users from LDAP,
then Cyrus IMAPd will just do it from sasl interface.
Be sure you have installed cyrus-sasl package with "ldap" flavor

I think I need a little more than that, I am not even sure how best
to insert the username realm and password and into which index..
and to that I am on a crash learn of ldap, so that is part of the
picture I'll need to understand asap :(


I figured the flavor thing out when I went down the "mysql" flavor method,
Also we may need to use the "-r" option for pkg_add -r
to get the flavor package loaded... Here is how to make flavors and -server for those who may google this on the lists:

cd /usr/ports/mail/cyrus-imap
make package

cd /usr/ports/security/cyrus-sasl2
env FLAVOR=ldap make package

cd /usr/ports/databases/openldap/
env SUBPACKAGE=ldap FLAVOR=bdb make package



An example /etc/saslauthd.conf will look like this

ldap_servers: ldap://127.0.0.1
ldap_search_base: dc=your,dc=base,dc=dn
ldap_filter: (&(uid=%u)(objectClass=inetOrgPerson))
ldap_auth_method: userPassword

As you can guess, "%u" gets replaced with username.
"userPassword" auth method means authentication will occur with binding.

And related lines for /etc/imapd.conf

sasl_mech_list:         plain
sasl_pwcheck_method:    saslauthd
sasl_saslauthd_path:    /your/path/to/saslauthd/mux

Good luck...


I appreciate the above examples and will digest it asap.

I saw several options for imapd.conf that dealt with ldap
without the sasl_ prefix, and that may have mislead also.

A note to other readers, any option in /etc/imapd.conf that
is prefixed with sasl_ may overided the SASL configuration file,
see the man page for imapd.conf and sasl_option


BTW, I know I got off track when I tried settings from an example
slapd.conf from a Linux Gazzette page:
http://linuxgazette.net/124/pfeiffer.html
http://linuxgazette.net/124/misc/pfeiffer/slapd.conf

Reply via email to