Kristof,
thanks for the details, now I am using
e-mail address as uid in ldap, I am not sure whether
that is correct way to do or not, but solves
the pop3d auth problem.
just want to tell you, if I use [EMAIL PROTECTED]
as a login id then it passes [EMAIL PROTECTED] in
the search string and auth fails, if I am using
only user name, then I can see from ldap log
it tries all(dn) the virtual domain names, in that
one of the search dn was correct, but auth always
fails, I am new to ldap, may be my ldap setup
is not so good.
-bala-
--- Kristof Bajnok <[EMAIL PROTECTED]> wrote:
> When using namedvirtualbasedn, the login name should
> be in form
> '[EMAIL PROTECTED]' !
>
> Bala, I can't really see your situation, I try to
> explain the way search is
> working:
>
> 1. qmail(-send) use mail and mailalternateaddress by
> default to find the ldap
> entry of the user. The search is started at the
> point defined in ldapbasedn.
> Mail addresses should be unique (globally as
> well...:).
> 2. auth_{pop|imap|smtp} (which actually retrieve the
> ldap entry for pop3d and
> others) use uid by default to find the ldap entry.
> The search is started as
> defined in ldapbasedn UNLESS you are using
> namedvirtualbasedn or
> ipvirtualbasedn (my patch) and there is a match for
> either the name or the IP
> address.
>
> If you can get your users to use login names with
> domain part (which can
> resemble to an email-address however), you should
> use namedvirtualbasedn.
> For those domains you can't, you have to allocate a
> separate IP address and
> use ipvirtualbasedn.
>
> Note that my patch doesn't modify qmail-ldaplookup
> tool!
>
> Kristof
>
>
> kedd 17 febru�r 2004 13:07 d�tummal ezt �rta:
> > Thanks all for the replies, Krisrtof, I applied
> > the patch and created the file
> >
> > "namedvirtualbasedn" with contents
> >
> > st.com.sg:o=qmail,dc=MailServer
> > test.com.sg:o=qmail,dc=MailServer
> >
> > in my outlook express side user login=user1
> > mail id = [EMAIL PROTECTED]
> >
> > then I can see ldap log the search entry(dn)
> same
> > as working qmail search string, but still pop3d
> fails
> >
> > -----ldap log----
> >
>
is_object_subclass(1.3.6.1.4.1.7914.1.2.2.1,1.3.6.1.4.1.7914.1.2.2.1)
> > 1
> > => send_search_entry:
> > dn="cn=user1,o=st.com.sg,o=qmail,dc=MailServer"
> > ber_flush: 247 bytes to sd 9
> > --------
> >
> > what may the reason, am I doing anything wrong??
> > your help will be greatly appreciated.
> >
> > thanks,
> > -bala-
> >
> > --- Kristof Bajnok <[EMAIL PROTECTED]> wrote:
> > > Hi,
> > >
> > > I have a working patch for 20040101 which makes
> it
> > > possible to define ldap
> > > search base depending on POP3 IP address or pop3
> > > login name. Should be
> > > updated to the upstream version of qmail-ldap.
> (It
> > > is not yet done because of
> > > the simple fact that we are using 20040101
> > > currently.)
> >
> >
>
http://www.sztaki.hu/~bajnokk/qmail-ldap-virtual.html
> >
> > > See README.virtual after patching.
> > >
> > > Kristof
> > >
> > > > by default qmail passes the correct search
> > >
> > > string,
> >
> >
>
Example(dn="cn=user1,o=test.com.sg,o=qmail,dc=MailServe)
> >
> > > > so it got the unique result for the search,
> > > >
> > > > but pop3d passing
> > > > dn="cn=user1,o=qmail,dc=MailServe, here it
> is
> > > > missing domain in the search string, so it
> > >
> > > returning
> > >
> > > > same user in all the domains!
> > > >
> > > > question is how to change the search
> string(dn)
> > > > to ldap from pop3d??(ie same like qmail uses)
>
> --
> Kristof BAJNOK
>
> MTA-SZTAKI
> Computer and Automation Research Institute
> Hungarian Academy of Sciences
>
__________________________________
Do you Yahoo!?
Yahoo! Mail SpamGuard - Read only the mail you want.
http://antispam.yahoo.com/tools
