Hello!
I try to install openldap+courier and have some problems with auth.The first what I do
- I read the man pages and a lot of docs and how-to's .
Next step - I create OpenLDAP config's and database of account's and additional info.
My slapd.conf :
allow bind_v2
include /etc/openldap/schema/core.schema
include /etc/openldap/schema/cosine.schema
include /etc/openldap/schema/corba.schema
include /etc/openldap/schema/inetorgperson.schema
include /etc/openldap/schema/nis.schema
include /etc/openldap/schema/openldap.schema
include /etc/openldap/schema/qmail.schema
include /etc/openldap/schema/authldap.schema
pidfile /var/run/ldap/slapd.pid
argsfile /var/run/ldap/slapd.args
database ldbm
suffix "dc=test,dc=ru"
rootdn "cn=root,dc=test,dc=ru"
rootpw secret
directory /var/lib/ldap
index objectClass,uid,uidNumber,gidNumber eq
index cn,mail,surname,givenname eq,subinitial
loglevel 4
access to attr=userPassword
by self write
by anonymous auth
by dn="cn=courier,ou=daemons,dc=test,dc=ru" read
by * none
access to attr=accountStatus
by dn="cn=courier,ou=daemons,dc=test,dc=ru" read
by dn="cn=postfix,ou=daemons,dc=test,dc=ru" read
access to *
by * read
access to attr=objectclass
by dn="cn=root,dc=test,dc=ru" write
by dn="cn=courier,ou=daemons,dc=test,dc=ru" read
by * none
Ldap.conf :
allow bind_v2
host 127.0.0.1
base dc=test,dc=ru
ldap_version 3
rootbinddn cn=root,dc=test,dc=ru
scope one
ssl off
My database, containing servers info is following:
dn: dc=test,dc=ru
objectClass: dcObject
objectClass: organization
o: Test Server
dc: test
dn: ou=Users,dc=test,dc=ru
objectClass: organizationalUnit
ou: Users
description: Home Users
dn: ou=mailusers,dc=test,dc=ru
objectClass: top
objectClass: organizationalunit
ou: mailusers
description: users with mailaccounts at my home.
dn: ou=daemons,dc=test,dc=ru
objectClass: top
objectClass: organizationalunit
ou: daemons
description: daemons thats connect to LDAP
dn: cn=postfix,ou=daemons,dc=test,dc=ru
objectClass: top
objectClass: person
cn: postfix
sn: postfix
userPassword: secret
dn: cn=courier,ou=daemons,dc=test,dc=ru
objectClass: top
objectClass: person
cn: courier
sn: courier
userPassword: secret
dn: uid=pvm,ou=mailusers,dc=test,dc=ru
uid: pvm
cn: Potapov V.M.
mail: [EMAIL PROTECTED]
sn: pvm
uidNumber: 1000
gidNumber: 1000
mailHost: suse.test.ru
homeDirectory: /var/imap/home/pvm
mailMessageStore: /var/imap/home/pvm/Maildir
mailbox: pvm/Maildir/
objectClass: qmailuser
objectClass: courierMailAccount
objectClass: inetOrgPerson
mailForwardingAddress: [EMAIL PROTECTED]
userPassword: secret
After I see that the all info in database searching successfully and try to
configuring courier.
My authdaemonrc:
modulelist="authpam"
authmodulelistorig="authpam"
daemons=5
version=""
authdaemonvar=/var/run/authdaemon.courier-imap
Authldaprc:
LDAP_SERVER 127.0.0.1
LDAP_PORT 389
LDAP_BASEDN ou=mailaccounts,dc=test,dc=ru
LDAP_BINDDN cn=courier,ou=daemons,dc=test,dc=ru
LDAP_BINDPW secret
#LDAP_CLEARPW secret
LDAP_TIMEOUT 5
LDAP_AUTHBIND 1
LDAP_DOMAIN test.ru
LDAP_MAIL mail
LDAP_FILTER (objectClass=CourierMailAccount)
LDAP_GLOB_UID vmail
LDAP_GLOB_GID vmail
LDAP_HOMEDIR homeDirectory
LDAP_MAILDIR mailMessageStore
LDAP_DEFAULTDELIVERY defaultDelivery
#LDAP_MAILDIRQUOTA mailQuota
LDAP_FULLNAME cn
LDAP_CRYPTPW userPassword
LDAP_DEREF never
LDAP_TLS 0
And as result in maillog I see :
Apr 27 17:36:34 suse pop3d: Connection, ip=[::ffff:192.168.1.80]
Apr 27 17:36:34 suse pop3d: LOGIN: DEBUG: ip=[::ffff:192.168.1.80], command=USER
Apr 27 17:36:34 suse pop3d: LOGIN: DEBUG: ip=[::ffff:192.168.1.80], command=PASS
Apr 27 17:36:34 suse pop3d: LOGIN: DEBUG: ip=[::ffff:192.168.1.80], username=pvm
Apr 27 17:36:39 suse pop3d: LOGIN FAILED, ip=[::ffff:192.168.1.80]
suse:/var/log # ldapsearch -x -b 'dc=test,dc=ru' '(objectclass=userPassword)'
# extended LDIF
#
# LDAPv3
# base <dc=test,dc=ru> with scope sub
# filter: (objectclass=userPassword)
# requesting: ALL
#
# search result
search: 2
result: 0 Success
# numResponses: 1
I try Ldap_authbind 0 , ldap_clearpw and it have no result
What I'm doing wrong?
-------------------------------------------------------
This SF.Net email is sponsored by: Oracle 10g
Get certified on the hottest thing ever to hit the market... Oracle 10g.
Take an Oracle 10g class now, and we'll give you the exam FREE.
http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click
_______________________________________________
courier-users mailing list
[EMAIL PROTECTED]
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
