Cyrus

Installation

Install packages

Install Cyrus Package

apt-get install cyrus-admin cyrus-clients cyrus-common cyrus-doc cyrus-imapd cyrus-nntpd cyrus-pop3d cyrus-sasl2-doc libcyrus-imap-perl

Install Sasl auth

libauthen-sasl-perl libgsasl7 libsasl2-2 libsasl2-modules libsasl2-modules-db sasl2-bin

Validate / Adjust the configuration

/etc/default/saslauthd

START=yes
##Postfix Rooted
OPTIONS="-c -m /var/spool/postfix/var/run/saslauthd"

/etc/imapd.conf

admins: cyrus
sasl_mech_list: PLAIN LOGIN
defaultdomain: objclt.com
sasl_pwcheck_method: saslauthd
tls_cert_file: /etc/ssl/certs/ssl-cert-snakeoil.pem
tls_key_file: /etc/ssl/private/ssl-cert-snakeoil.key

/etc/cyrus.conf

imaps           cmd="imapd -s -U 30" listen="imaps" prefork=0 maxchild=100
squatter_1      cmd="/usr/bin/nice -n 19 /usr/sbin/cyrus squatter -r" period=120

Validate Security

1. Add Cyrus user to group ssl-cert same group as privat key /etc/ssl/private/ssl-cert-snakeoil.key
2. /etc/sasldb2 should be owned by cyrus

Test configuration

cyradm --user cyrus --auth login localhost -tls