[courier-users] authldap problem when not using LDAP_AUTHBIND

Sun, 01 Feb 2009 02:31:30 -0800 

Hi,

I'm using FreeBSD 7.1 with the following versions of courier/squirrel:

courier-authlib-base-0.62.1
courier-authlib-ldap-0.62.1_1
courier-imap-4.4.1,2
squirrelmail-1.4.17
squirrelmail-change_ldappass-plugin-2.2_2
When I set the password for a mail user using ldappasswd, everything works fine and well. When I change the password using the squirrelmail password change plugin, courier no longer authenticates my user: 

# authtest sebster aaa
Authentication FAILED: Operation not permitted
However when I change the ldapauth flag LDAP_AUTHBIND to 1 and restart courier-authdaemon, then it does work: 

#/usr/local/etc/rc.d/courier-authdaemond restart
Stopping courier_authdaemond.
Starting courier_authdaemond.
# authtest sebster aaa
Authentication succeeded.

     Authenticated: sebster  (uid 2000, gid 2000)
    Home Directory: /data/mail/popboxes/sebster-com/sebster
           Maildir: (none)
             Quota: (none)
Encrypted Password: {SSHA}jRohoWU/0rc1ox/6nI9gH1jIPpo3Mjg0OTRhOA==
Cleartext Password: aaa
           Options: wbnodsn=1

When doing a slapcat, the record shows as follows:

dn: uid=sebster,ou=users,dc=sebster,dc=com,dc=dot
uid: sebster
cn: Sebastiaan van Erk
sn: van Erk
mail: [email protected]
homeDirectory: /data/mail/popboxes/sebster-com/sebster
objectClass: top
objectClass: person
objectClass: CourierMailAccount
structuralObjectClass: person
entryUUID: e86c0ac4-83f8-102d-9666-5bc50b6dec01
creatorsName: cn=admin,dc=dot
createTimestamp: 20090131153810Z
userPassword:: e1NTSEF9alJvaG9XVS8wcmMxb3gvNm5JOWdIMWpJUHBvM01qZzBPVFJoT0E9PQ= 
 =
entryCSN: 20090201092926.637539Z#000000#000#000000
modifiersName: uid=sebster,ou=users,dc=sebster,dc=com,dc=dot
modifyTimestamp: 20090201092926Z
I checked the userPassword field using the specs, and I don't see anything wrong with it. Changing LDAP_AUTHBIND back to 0 causes it to break again, but if I reset the password using ldappasswd, then it works even with LDAP_AUTHBIND 0.
Does anybody know what's going on here? Is this a bug, or am I doing something stupid? 

Regards,
Sebastiaan

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

------------------------------------------------------------------------------
This SF.net email is sponsored by:
SourcForge Community
SourceForge wants to tell your story.
http://p.sf.net/sfu/sf-spreadtheword
_______________________________________________
courier-users mailing list
[email protected]
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users

Reply via email to