Author Topic: Dovecot LDAP authentication with Ebox  (Read 3091 times)

azop

  • Zen Monk
  • **
  • Posts: 53
  • Karma: +0/-0
    • View Profile
Dovecot LDAP authentication with Ebox
« on: April 16, 2008, 04:54:17 am »
I've love to use the ebox-debian installer however the installer does not find my network card (Dell Poweredge 2950 server) or the megaraid_sas module so I'm stuck with ubuntu hardy beta.

I'd like to use Dovecot to shared LDAP authentication so when a user changes their password on a Windows client they can access IMAP with the same password. 

I edited /etc/dovecot/dovecot.conf:

  passdb ldap {
    # Path for LDAP configuration file
    args = /etc/dovecot/dovecot-ldap.conf
  }


Then /etc/dovecont/dovecot-ldap.conf:

hosts = 127.0.0.1
dn = cn=admin,dc=ebox
dnpass = XXXXXX
sasl_bind = yes


base = uid=Users, dc=ebox
scope = subtree
user_filter = (&(objectClass=posixAccount)(uid=%u))
pass_attrs = uid=user,userPassword=password,homeDirectory=userdb_home,uidNumber=userdb_uid,gidNumber=userdb_gid
#for delivery:
user_attrs = homeDirectory=home,uidNumber=uid,gidNumber=gid



Authentication fails when I try to connect with IMAP. 

If anyone has done this before it would be useful to see what I missed in my configuration.


Thanks

azop

  • Zen Monk
  • **
  • Posts: 53
  • Karma: +0/-0
    • View Profile
Re: Dovecot LDAP authentication with Ebox
« Reply #1 on: April 17, 2008, 04:09:29 am »
Well I'm able to connect to LDAP however I see this error in dovecot:

dovecot: 04-16-2008 21:05:45 Error: auth(default): ldap(tclerkin,10.10.10.251): ldap_search((&(objectClass=sambaSamAccount)(uid=tclerkin))) failed: No such object

I've tried changing from objectClass=sambaSamAccount to objectClass=posixAccount and it still won't work


drdebian

  • Zen Apprentice
  • *
  • Posts: 37
  • Karma: +0/-0
    • View Profile
Re: Dovecot LDAP authentication with Ebox
« Reply #2 on: April 17, 2008, 10:22:24 am »
Well I'm able to connect to LDAP however I see this error in dovecot:

dovecot: 04-16-2008 21:05:45 Error: auth(default): ldap(tclerkin,10.10.10.251): ldap_search((&(objectClass=sambaSamAccount)(uid=tclerkin))) failed: No such object

I've tried changing from objectClass=sambaSamAccount to objectClass=posixAccount and it still won't work



Are you sure there's an eBox user called "tclerkin" in your LDAP tree?

azop

  • Zen Monk
  • **
  • Posts: 53
  • Karma: +0/-0
    • View Profile
Re: Dovecot LDAP authentication with Ebox
« Reply #3 on: April 17, 2008, 01:39:31 pm »
I added this user with ebox and I can log into windows fine with it.

I did _not_ add this user with 'adduser' on the system level, just with ebox.  I don't have to have two accounts do I?  I believe her account is already setup correct:

# id tclerkin
uid=2015(tclerkin) gid=1901(__USERS__) groups=1901(__USERS__),512(Domain Admins),513(Domain Users),544(Domain Computers),2001(Enforcement)


Well I'm able to connect to LDAP however I see this error in dovecot:

dovecot: 04-16-2008 21:05:45 Error: auth(default): ldap(tclerkin,10.10.10.251): ldap_search((&(objectClass=sambaSamAccount)(uid=tclerkin))) failed: No such object

I've tried changing from objectClass=sambaSamAccount to objectClass=posixAccount and it still won't work



Are you sure there's an eBox user called "tclerkin" in your LDAP tree?