Aw: [SOGo] Dovecot LDAP config with samba 4

2014-11-20 Thread Daniel Müller

Hello,




So my dovecot/samba4 configuration is working with this params:

All user which have a entry in ADS mail can autheticate against dovecot/samba4

Be shure the dummy-user password to autheticate will not expire.

In my case the user is ldap

dovecot-ldap.conf.ext








hosts = mysamba4host:389
dn = cn=ldap,cn=users,dc=my,dc=domain
dnpass = my-ldap-password

auth_bind = yes
ldap_version = 3

base = cn=Users,dc=my,dc=domain
scope = subtree
user_filter = (mail=%u)
pass_filter = (mail=%u)
pass_attrs = mail=%u,= userPassword=password



The test it this way!-My users need to login with user@my.domain



[root@s4slave dovecot]# doveadm auth test -x service=imap -x rip=192.168.135.253 administra...@tplk.loc
Password:
passdb: administra...@tplk.loc auth succeeded
extra fields:
 user=administra...@tplk.loc
 %u=administra...@tplk.loc
 userPassword=password

It the test succeds your up and running.







Good luck

Daniel





Gesendet:Mittwoch, 19. November 2014 um 12:50 Uhr
Von:Jan Kralji jan.kral...@gmail.com
An:users@sogo.nu
Betreff:[SOGo] Dovecot LDAP config with samba 4








Hi all,

I am trying to play with Dovecot to connect to Samba 4 LDAP so I would later use SOGo over that but seem that I have some issue woth config.

I am playing with different configs, this is the last one:

user_filter = (mail=%u)
pass_attrs = uid=user,userPassword=password
pass_filter = (mail=%u)


Error: result: uid missing; userPassword missing

Looks like Samba 4 does not have uid?

Any good configuration for Dovecot?

Thx,
Jan






[SOGo] Dovecot LDAP config with samba 4

2014-11-19 Thread Jan Kraljič
Hi all,

I am trying to play with Dovecot to connect to Samba 4 LDAP so I would
later use SOGo over that but seem that I have some issue woth config.

I am playing with different configs, this is the last one:

user_filter = (mail=%u)
pass_attrs = uid=user,userPassword=password
pass_filter = (mail=%u)


Error: result:  uid missing; userPassword missing

Looks like Samba 4 does not have uid?

Any good configuration for Dovecot?

Thx,
Jan
-- 
users@sogo.nu
https://inverse.ca/sogo/lists

Re: [SOGo] Dovecot LDAP config with samba 4

2014-11-19 Thread Martin Simovic


 On 19 Nov 2014, at 12:50, Jan Kraljič jan.kral...@gmail.com wrote:
 
 Hi all, 
 
 I am trying to play with Dovecot to connect to Samba 4 LDAP so I would later 
 use SOGo over that but seem that I have some issue woth config. 
 
 I am playing with different configs, this is the last one:
 
 user_filter = (mail=%u)
 pass_attrs = uid=user,userPassword=password
 pass_filter = (mail=%u)
 
 
 Error: result:  uid missing; userPassword missing
 
 Looks like Samba 4 does not have uid?
 
 Any good configuration for Dovecot?
 

Samba4 is a LDAP server so you can have any attributes that schema supports. 
“uid” is not populated by default, what you are probably after is 
“samaccountname”

Now, with dovecot you can do LDAP authentication two ways:

- password lookups http://wiki2.dovecot.org/AuthDatabase/LDAP/PasswordLookups
- authentication binds http://wiki2.dovecot.org/AuthDatabase/LDAP/AuthBinds

Myself I prefer auth binds - dovecot tries to bind to ldap server (samba4) with 
provided username and password and if succeeds considers a user authenticated

My config is as simple as:

(/etc/dovecot/dovecot-ldap.conf.ext)

hosts = localhost
auth_bind = yes
auth_bind_userdn = cn=%u,cn=Users,dc=mydomain,dc=local
ldap_version = 3
base = cn=Users,dc=mydomain,dc=local

Adjust domain components to your needs.

Hope this helps,

Regards
Martin.

-- 
users@sogo.nu
https://inverse.ca/sogo/lists