1 |
###################################### |
2 |
# |
3 |
# $Id$ |
4 |
# |
5 |
###################################### |
6 |
# |
7 |
# $Log$ |
8 |
# |
9 |
# |
10 |
###################################### |
11 |
|
12 |
|
13 |
=pod |
14 |
|
15 |
|
16 |
|
17 |
=head2 Cyrus Imapd v1 + PAM + Kerberos V mini-HowTo |
18 |
|
19 |
|
20 |
|
21 |
=head3 Description |
22 |
|
23 |
Install and configure Cyrus Imapd v1 with PAM and Kerberos V support |
24 |
(debian way...) |
25 |
|
26 |
|
27 |
|
28 |
|
29 |
=head4 install cyrus imapd |
30 |
|
31 |
Be sure, your deb sources contains kerberosized cyrus packages! |
32 |
Turbo Fredriksson has good ones: |
33 |
deb ftp://ftp.bayour.com/pub/debian local . |
34 |
deb-src ftp://ftp.bayour.com/pub/debian local . |
35 |
|
36 |
apt-get install cyrus-common cyrus-imapd cyrus-admin |
37 |
|
38 |
|
39 |
|
40 |
|
41 |
=head4 create imapd wrapper (needed for kerberos V) |
42 |
|
43 |
mv /usr/sbin/imapd /usr/sbin/imapd.real |
44 |
|
45 |
nano /usr/sbin/imapd: |
46 |
#!/bin/sh |
47 |
KRB5_KTNAME=/etc/krb5.keytab.cyrus |
48 |
export KRB5_KTNAME |
49 |
exec /usr/sbin/imapd.real $@ |
50 |
|
51 |
chmod a+x /usr/sbin/imapd |
52 |
|
53 |
|
54 |
|
55 |
|
56 |
=head4 link pwcheck to pwcheck_pam |
57 |
|
58 |
rm /etc/alternatives/pwcheck |
59 |
|
60 |
ln -s /usr/sbin/pwcheck_pam /etc/alternatives/pwcheck |
61 |
|
62 |
|
63 |
|
64 |
|
65 |
=head4 configure /etc/pam.d/cyrus |
66 |
|
67 |
nano /etc/pam.d/cyrus |
68 |
auth required pam_krb5.so |
69 |
account required pam_ldap.so |
70 |
|
71 |
|
72 |
|
73 |
|
74 |
=head4 create kerberos imap service key |
75 |
|
76 |
kadmin.local -q "addprinc -randkey imap/<FQDN>@<YOUR KERBEROS REALM>" |
77 |
kadmin.local -q "addprinc -randkey pop/<FQDN>@<YOUR KERBEROS REALM>" |
78 |
kadmin.local -q "ktadd -k /etc/krb5.keytab.cyrus imap/<FQDN>" |
79 |
kadmin.local -q "ktadd -k /etc/krb5.keytab.cyrus pop/<FQDN>" |
80 |
chown cyrus /etc/krb5.keytab.cyrus |
81 |
|
82 |
|
83 |
|
84 |
|
85 |
=head3 Requirements |
86 |
|
87 |
- Cyrus Imapd v1 |
88 |
- libpam-krb5 |
89 |
- Kerberos V |
90 |
|
91 |
|
92 |
|
93 |
|
94 |
=head3 Resources |
95 |
|
96 |
|
97 |
=over |
98 |
|
99 |
=item Cyrus IMAP Server |
100 |
|
101 |
- http://asg.web.cmu.edu/cyrus/imapd/ |
102 |
|
103 |
=item OpenLDAP, OpenSSL, SASL and KerberosV HOWTO |
104 |
|
105 |
- http://www.bayour.com/LDAPv3-HOWTO.html |
106 |
|
107 |
=back |
108 |
|
109 |
|
110 |
=head3 ToDo |
111 |
|
112 |
o MORE docu !! |
113 |
o write more about Kerberos V |
114 |
o write more about Cyrus SASL |
115 |
o docu installation for other distribution than Debian |
116 |
o check out Cyrus Imapd v2 and SASL v2 more and write howto |
117 |
|
118 |
|
119 |
|
120 |
=head3 Authors |
121 |
|
122 |
Sebastian Utz seut@tunemedia.de |
123 |
|
124 |
|
125 |
|
126 |
=head3 last changes |
127 |
|
128 |
Jan 25 2003 05:53:00 |
129 |
+ create new |
130 |
|
131 |
|
132 |
=cut |
133 |
|
134 |
|