Jean-Pierre VERLANDE said:
> 11:10:37 svmdk82-01 authdaemond.ldap: authlib: refuse to authenticate
> cedric.mallet: uid=0, gid=0 Feb 21 11:10:37 svmdk82-01

There is a special case where either uid==0 or gid==0 will be
rejected.  I presume this is to prevent IMAP from doing work as root,
as a precaution.

> Why do I get this :
> authlib: refuse to authenticate cedric.mallet: uid=0, gid=0
>
> What does uid=0, gid=0 refer to ??

uid and gid are the Unix user id and group id numbers that Courier-IMAP will
switch to when working on your request.  uid 0 and group 0 are for
root access.  You can set uid and gid in two ways.

If all of your mail users can have the same (non-root) uid and gid, you can
edit your authldaprc file, and set LDAP_GLOB_UID and LDAP_GLOB_GID to some
user and group that will be used for all users.

Otherwise, you can add attributes in LDAP that contain these values.  You
configure authldap to look in LDAP by setting LDAP_UID and LDAP_GID to the
LDAP attribute names.  From the example authldaprc file:

# LDAP_UID              uidNumber
# LDAP_GID              gidNumber

The attribute in LDAP must contain a number, not the Unix name for the uid
and gid.

Then your entry would include something like:
dn=uid=Cedric.MALLET,ou=subunit,ou=unit,o=org
uidNumber: 543
gidNumber: 501

Without one of these solutions, no user will be able to authenticate using
authldap.

Regards,
Kelvin




_______________________________________________
courier-users mailing list
[EMAIL PROTECTED]
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users

Reply via email to