[courier-users] LDAP authdaemon & multiple BASE_DNs

[Benton Roberts]

Hello, everyone.

I have a question about hosting mail accounts for several domains on the same server, using LDAP authentication (virtual hosting). The goal is to host email accounts for a few domains, using Postfix and Courier IMAP, and holding all user account information in an OpenLDAP 2.0 database. First, a description of what currently IS working:

I have successfully set up Postfix to receive mail for each user into her own Maildir, looking up each message destination in the LDAP database. Each domain's collection of individual user Maildirs is contained in a container directory for that domain. I have also set up Courier IMAP and the LDAP authdaemon, and can pick up mail from the server with remote IMAP clients like Outlook, again authenticating from the LDAP database, which contains a field for each user specifying a relative path to the correct Maildir, beginning with the name of the domain-specific container folder mentioned above. Thus I can now send, receive, and pick up mail from the server using any accounts in the database -- at least, one domain at a time...

My problem is that each of my virtual domains has, of course, its own basedn, but authdaemon.ldap only lets me specify a single basedn against which to search. So Courier IMAP is only allowing logins for users from the domain whose basedn is listed as the LDAP_BASEDN in the file courier-imap/etc/authldaprc.

Do I need to run another instance of authdaemon.ldap, one for each virtual domain on a separate port? I think I read in the documentation this was not possible. I have thought of collapsing all domains into a single LDAP database, with each in its own organizationalGroup, but this is not only inelegant, it defeats the point of having basedns correspond to a domain.

Even if a single authdaemon could be induced to search more than one basedn, it couldn't differentiate between two accounts in different domains with the same key/value pair used to match the username during authentication,

Can anyone imagine a configuration where this is possible? How do those of you out there who do virtual hosting have users pick up mail from different domains on the same machine?

Many thanks in advance for your ideas and insights.

- benton
Benton Roberts
[EMAIL PROTECTED]



-------------------------------------------------------
This sf.net email is sponsored by: Influence the future of Java(TM) technology. Join the Java Community Process(SM) (JCP(SM)) program now. http://ads.sourceforge.net/cgi-bin/redirect.pl?sunm0003en
_______________________________________________
courier-users mailing list
[EMAIL PROTECTED]
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users