Re: qmail-ldap + AD

[Zdravko Stoychev]

Hi!

Carlos wrote:

Thanks :)

but I having problem with ldapsearch in AD

when I run ldap search to retrieve data from AD, I get the ...


text: 00000000: LdapErr: DSID-0C090627, comment: In order to perform
this ope
 ration a successful bind must be completed on the connection., data 0,
vece

Right, specify binddn using -D dn and -W or -w passwd:



which will ask for user's password and will show its AD info.

$ ldapsearch -s sub -x -h <hostname> -W -D "cn=<username>,cn=users,dc=<my>,dc=<domain>" -b "cn=users,dc=<my>,dc=<domain>" "(cn=<username>)"

any idea ?


Greats

Carlos

Em Qui, 2007-02-01 às 10:17 +0200, Razvan Turtureanu escreveu:

hello list,

Attributes:

userPrincipalName - for uid
userAccountControl for accoutStatus- with the values 66050 -
desabled  and 66048 enabled (I don't know if this is exactly right)
info - replaytext

forestprep and domainprep, because I want to use the functionality of
qmail-group, and mailForwardingAddress.


______________________________________________________________________

I did some research in the AD schema and I faund that we can use these mail; all of the above can be modified from the dsa.msc console and I am think-ing to extend the active directory schema witn Dind anyone found another solution for this??? From: Zdravko Stoychev [mailto:[EMAIL PROTECTED] Sent: Wednesday, January 31, 2007 16:53

To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]; qmail-ldap@qmail-ldap.org
Subject: Re: qmail-ldap + AD



Hi!

Steve Peace wrote:

I did the exact same thing, and it is working fine.  I did however set up
winbind so I can use my users AD credentials to authenticate them for POP.

For best results one could set up SFU on Windows Domain Controller and

run NIS server there, then set up all *nix boxes to use NIS for auth.

Steve Peace
Director of Information Technology
Town of Webster
585.872.7030

-----Original Message-----

From: Zdravko Stoychev [mailto:[EMAIL PROTECTED] Sent: Wednesday, January 31, 2007 4:38 AM

To: [EMAIL PROTECTED]
Cc: qmail-ldap@qmail-ldap.org
Subject: Re: qmail-ldap + AD

Hi!

Carlos wrote:

Hi peoples, somebody friend have any experience about configure qmail to
authentic in Active Directory ? Any google search mean about change

Any idea? Howto ? start guide.....

qmail-ldap.h, but I don't search nothing specific.

Yes, it is doable and is working just fine. All you need is to set up qmail-ldap.h ldap attribute names correctly according you AD scheme. Then setup control/ldap* files with servername, login dn, password etc. You could set user login to be its full email address for example.

thanks

Carlos

--
  Zdravko Stoychev
  System Software and Support
  MPS Ltd.
  [EMAIL PROTECTED]
  +359-2-491-1827 (ext.271)

Ако не отговарям на писмата Ви - погледнете тук: http://6lyokavitza.org/mail

This e-mail is intended only for the addressee(s) and may contain privileged 
and confidential information. It should not be disseminated, distributed, or 
copied. If you have received this e-mail message by mistake, please inform the 
sender, and delete it from your system.

--
 Zdravko Stoychev
 System Software and Support
 MPS Ltd.
 [EMAIL PROTECTED]
 +359-2-491-1827 (ext.271)

Ако не отговарям на писмата Ви - погледнете тук: http://6lyokavitza.org/mail

This e-mail is intended only for the addressee(s) and may contain privileged 
and confidential information. It should not be disseminated, distributed, or 
copied. If you have received this e-mail message by mistake, please inform the 
sender, and delete it from your system.

smime.p7s
Description: S/MIME Cryptographic Signature