On Tue, Mar 11, 2008 at 9:21 AM, Jay Lee <[EMAIL PROTECTED]> wrote:
>  I think his point is that CN is not there.  I can confirm that even
>  without CN listed as one of the attributes *anywhere* in authldaprc,
>  CN is requested from our LDAP server.  I can't tell you though if this
>  is due to hardcoding within Courier or if it's due to how the OpenLDAP
>  libraries formulate the query.  My bet's on OpenLDAP but Sam should be
>  able to answer that for sure...

Looking at the code and doing further testing on the issue, it looks
like if LDAP_FULLNAME is commented out then authlib will query CN and
use that for the fullname.  In my schema, there is a "fullname"
attribute that holds the full name, cn is the username.  However I had
LDAP_FULLNAME commented out since I don't use sqwebmail and I believe
that's the only service that needs to grab the full name from the
authentication.

Sam, is there a reason why LDAP_FULLNAME will default to CN if it's
not set in authldaprc?  If one is not using sqwebmail wouldn't not
querying for the full name at all be legit?  Other attributes like
LDAP_MAILDIRQUOTA seem not to have a default.  If a default is
absolutely neccessary, maybe the commented docs in authldaprc should
at least be ammended to clarify the default setting...

Jay
-- 
Jay Lee
Network / Systems Administrator
Information Technology Dept.
Philadelphia Biblical University

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
courier-users mailing list
[email protected]
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users

Reply via email to