Thanks for the reply
It is used as far as sasldb2 is populated as appropriate; please refer to Cyrus SASL documentation for instructions about populating it.
Do you mean http://www.sendmail.org/~ca/email/cyrus/sysadmin.html? I've crawled around the CMU web site, and have Google'd , and haven't seen anything better than this. And, it refers to the older sasldb, not sasldb2.
As soon as you get to authz-regexp mapping, credential are being looked up in the directory. Is "uid=tlemons" a valid DN in your DIT? I mean: does it resolve to an existing entry?
Yes.
Thanks! tl