Okay guys,

Has anybody ever gotten this thing to work?  I’m poking around the authldaplib.c code a bit, and I noticed that if LDAP_DOMAIN you guys concatenate it to the user name before authenticating:

 

if (my_ldap.domain && my_ldap.domain[0] && strchr(user, '@') == 0 )

                strcat(strcat(filter, "@"), my_ldap.domain);

 

which is probably why I was getting a filter not matched.  So I created another user with [EMAIL PROTECTED].  Now it appears to authenticate on the LDAP side, but the imap side’s still denying me.  These are the tails of both LDAP logging:

Connect with LDAP Browser:

 

ldap_write: want=125, written=125

  0000:  30 7b 02 01 02 64 76 04  40 63 6e 3d 73 61 6e 64   0{...[EMAIL PROTECTED]=sand

  0010:  72 61 40 6b 62 65 61 72  73 74 75 64 69 6f 73 2e   [EMAIL PROTECTED].

  0020:  6e 6f 2d 69 70 2e 62 69  7a 2c 6f 75 3d 75 73 65   no-ip.biz,ou=use

  0030:  72 73 2c 64 63 3d 6b 62  65 61 72 73 74 75 64 69   rs,dc=kbearstudi

  0040:  6f 73 2c 64 63 3d 63 6f  6d 30 32 30 30 04 0b 6f   os,dc=com0200..o

  0050:  62 6a 65 63 74 43 6c 61  73 73 31 21 04 03 74 6f   bjectClass1!..to

  0060:  70 04 06 70 65 72 73 6f  6e 04 12 43 6f 75 72 69   p..person..Couri

  0070:  65 72 4d 61 69 6c 41 63  63 6f 75 6e 74            erMailAccount

<= send_search_entry

====> bdb_cache_return_entry_r( 15 ): returned (0)

send_search_result: err=0 matched="" text=""

send_ldap_response: msgid=2 tag=101 err=0

ber_flush: 14 bytes to sd 12

  0000:  30 0c 02 01 02 65 07 0a  01 00 04 00 04 00         0....e........

tls_write: want=35, written=35

  0000:  17 03 01 00 1e 6d 01 1e  99 75 4d 3e 61 a3 bb e1   .....m...uM>a...

  0010:  06 ca 0e b9 47 2c c3 52  02 cf 67 eb 2b ec 7e a2   ....G,.R..g.+.~.

  0020:  cb e1 65                                           ..e

ldap_write: want=14, written=14

  0000:  30 0c 02 01 02 65 07 0a  01 00 04 00 04 00         0....e........

 

 

Connect via IMAPD:

ldap_write: want=287, written=287

  0000:  30 82 01 1b 02 01 03 64  82 01 14 04 40 63 6e 3d   0......d....@cn=

  0010:  73 61 6e 64 72 61 40 6b  62 65 61 72 73 74 75 64   [EMAIL PROTECTED]

  0020:  69 6f 73 2e 6e 6f 2d 69  70 2e 62 69 7a 2c 6f 75   ios.no-ip.biz,ou

  0030:  3d 75 73 65 72 73 2c 64  63 3d 6b 62 65 61 72 73   =users,dc=kbears

  0040:  74 75 64 69 6f 73 2c 64  63 3d 63 6f 6d 30 81 cf   tudios,dc=com0..

  0050:  30 10 04 09 67 69 64 4e  75 6d 62 65 72 31 03 04   0...gidNumber1..

  0060:  01 31 30 33 04 0c 75 73  65 72 50 61 73 73 77 6f   .103..userPasswo

  0070:  72 64 31 23 04 21 7b 53  48 41 7d 73 31 55 68 74   rd1#.!{SHA}s1Uht

  0080:  39 59 78 78 68 71 57 56  33 62 73 63 37 53 54 4a   9YxxhqWV3bsc7STJ

  0090:  2b 45 4a 31 67 77 3d 30  10 04 09 75 69 64 4e 75   +EJ1gw=0...uidNu

  00a0:  6d 62 65 72 31 03 04 01  31 30 18 04 02 73 6e 31   mber1...10...sn1

  00b0:  12 04 10 53 61 6e 64 72  61 20 4d 63 54 69 65 72   ...Sandra McTier

  00c0:  6e 61 6e 30 31 04 0d 68  6f 6d 65 44 69 72 65 63   nan01..homeDirec

  00d0:  74 6f 72 79 31 20 04 1e  2f 6b 62 65 61 72 73 74   tory1 ../kbearst

  00e0:  75 64 69 6f 73 2e 6e 6f  2d 69 70 2e 62 69 7a 2f   udios.no-ip.biz/

  00f0:  73 61 6e 64 72 61 30 27  04 04 6d 61 69 6c 31 1f   sandra0'..mail1.

  0100:  04 1d 73 61 6e 64 72 61  40 6b 62 65 61 72 73 74   ..[EMAIL PROTECTED]

  0110:  75 64 69 6f 73 2e 6e 6f  2d 69 70 2e 62 69 7a      udios.no-ip.biz

<= send_search_entry

====> bdb_cache_return_entry_r( 15 ): returned (0)

send_search_result: err=0 matched="" text=""

send_ldap_response: msgid=3 tag=101 err=0

ber_flush: 14 bytes to sd 13

  0000:  30 0c 02 01 03 65 07 0a  01 00 04 00 04 00         0....e........

ldap_write: want=14, written=14

  0000:  30 0c 02 01 03 65 07 0a  01 00 04 00 04 00         0....e........

 

These logs are a bit cryptic, but if I’m not missing something here, I should be logged in.  Nevertheless, I’m not.  Am I just an idiot and missing something obvious here, or does this just plain not work?

 

Kelly McTiernan

 

P.S. – I did find that code that denies authentication for uid=0, gid=0.  That should be specified in the docs, don’t you think?

 

Reply via email to