Re: [courier-users] LDAP auth 4 Courier IMAP

[Ed Bradburn]

i have just been tweaking some more: this is the dump from running openldap in debug mode:

        slapd -d 256

conn=1 fd=15 connection from unknown (192.168.0.7) accepted.

conn=1 op=0 BIND dn="CN=MANAGER,DC=DOMAIN,DC=DE" method=128

conn=1 op=0 RESULT err=0 tag=97 nentries=0

conn=1 op=1 SRCH base="DC=DOMAIN,DC=DE" scope=2 filter="([EMAIL PROTECTED])"

conn=1 op=1 RESULT err=0 tag=101 nentries=1

as i understand this, Courier has just made a successful LDAP query to determine who I am, so that part's OK. But then, immediately afterwards:

conn=2 fd=16 connection from unknown (192.168.0.7) accepted.

conn=2 op=0 BIND dn="CN=EDWARD BRADBURN,DC=DOMAIN,DC=DE" method=128

conn=2 op=0 RESULT err=0 tag=97 nentries=0

conn=2 op=-1 fd=16 closed errno=0

conn=2 op=1 UNBIND

conn=1 op=-1 fd=15 closed errno=0

it binds to the LDAP database again, gets no errors - so presumably 'AUTHBIND' worked ..? - but I am *still* not authenticated...

looks as though i need to keep looking ...


ed bradburn


At 19:40 11/03/2002, Aly Dharshi wrote:

I am having somewhat similar problems at the moment, I can do it with PAM but not with LDAP for some odd reason (OpenLDAP) !!! maybe I have screwed up somewhere.
 
    ASD.

----- Original Message -----

From: Ed Bradburn

To: [EMAIL PROTECTED]

Sent: Monday, March 11, 2002 11:30 AM

Subject: [courier-users] LDAP auth 4 Courier IMAP

hi folks,

i'd like to know how this setup is supposed to work - i have it tantalisingly near now but it doesn't authenticate.

my (test-)setup so far has:

• Courier-IMAP running fine, using PAM no problem, I can access the IMAP mail folders (using Eudora 5.1) without any problems. Using LDAP however is another story...
• Postfix as the MTA, also no problems there
• LDAP running on another host on the local network.

however, the comments in the courier.authldaprc file simply aren't enough to explain how to set things up - so does anyone have information on what is supposed to go where?

all i seem to get, with authbind = 1, is the imap server trying to rebind to the ldap server, but doing absolutely zero password lookups, plaintext or otherwise.


ed bradburn


___________________________________________________________________________________

Von kiwi frisch online gestellt und zum ersten Mal im Netz. Weltklasse-Handschuhe
und faszinierende Markenwelten f�r Winter- und Rasensportler: www.reusch.com

[EMAIL PROTECTED] | technology management
kiwi | repro 68 interaktive medien gmbh | http://www.kiwi.de
grosse elbstrasse 145 c | 22767 hamburg | fon (0 40) 51 30 06-29
fax (0 40) 51 30 06-66 | isdn (0 40) 51 30 06-67
kiwi. it works.

___________________________________________________________________________________

Von kiwi frisch online gestellt und zum ersten Mal im Netz. Weltklasse-Handschuhe
und faszinierende Markenwelten f�r Winter- und Rasensportler: www.reusch.com

[EMAIL PROTECTED] | technology management
kiwi | repro 68 interaktive medien gmbh | http://www.kiwi.de
grosse elbstrasse 145 c | 22767 hamburg | fon (0 40) 51 30 06-29
fax (0 40) 51 30 06-66 | isdn (0 40) 51 30 06-67
kiwi. it works.