Re: [Dovecot] dovecot-1.0.3 apacheds ldap

2007-08-06 Thread sergey ivanov 
Timo Sirainen wrote:
 On Fri, 2007-08-03 at 08:22 -0400, sergey ivanov wrote:
   
 dovecot: Aug 03 08:07:10 Info: auth(default): ldap(seriv,127.0.0.1):
 pass search: base=ou=people,dc=parkheights,dc=dyndns,dc=org
 scope=subtree filter=((objectClass=posixAccount)(uid=seriv))
 fields=uid,gidNumber,userPassword,homeDirectory,uidNumber
 dovecot: Aug 03 08:07:10 Info: auth(default): ldap(seriv,127.0.0.1):
 result: uid(user)=seriv gidnumber(?unknown?)= userpassword(?unknown?)=
 homedirectory(?unknown?)= uidnumber(?unknown?)=
 

 Looks like Dovecot found only uid field. Perhaps it would be also
 helpful if it returned if there were any extra fields it didn't
 recognize..

   
 Attribute id : 'gidnumber',  Values : ['1927']
 Attribute id : 'userpassword',  Values : [0x7B 0x4D ...
 (skipped some bytes here) ... 0x3D 0x3D ]
 Attribute id : 'homedirectory',  Values :
 ['/var/spool/imap/seriv']
 Attribute id : 'uidnumber',  Values : ['1001']
 

 Could it be that you need to use all lowercase letters, like gidnumber
 instead of gidNumber? I didn't think LDAP attributes were
 case-insensitive.

   
You are rights. It's very strange, but when I changed gidNumber,
uidNumber, userPassword and homeDirectory to all lowercase, dovecot
successfully authorize against apacheds ldap server.
Thanks.
-- 
Sergey.

Re: [Dovecot] dovecot-1.0.3 apacheds ldap

2007-08-05 Thread Timo Sirainen 
On Fri, 2007-08-03 at 08:22 -0400, sergey ivanov wrote:
 dovecot: Aug 03 08:07:10 Info: auth(default): ldap(seriv,127.0.0.1):
 pass search: base=ou=people,dc=parkheights,dc=dyndns,dc=org
 scope=subtree filter=((objectClass=posixAccount)(uid=seriv))
 fields=uid,gidNumber,userPassword,homeDirectory,uidNumber
 dovecot: Aug 03 08:07:10 Info: auth(default): ldap(seriv,127.0.0.1):
 result: uid(user)=seriv gidnumber(?unknown?)= userpassword(?unknown?)=
 homedirectory(?unknown?)= uidnumber(?unknown?)=

Looks like Dovecot found only uid field. Perhaps it would be also
helpful if it returned if there were any extra fields it didn't
recognize..

 Attribute id : 'gidnumber',  Values : ['1927']
 Attribute id : 'userpassword',  Values : [0x7B 0x4D ...
 (skipped some bytes here) ... 0x3D 0x3D ]
 Attribute id : 'homedirectory',  Values :
 ['/var/spool/imap/seriv']
 Attribute id : 'uidnumber',  Values : ['1001']

Could it be that you need to use all lowercase letters, like gidnumber
instead of gidNumber? I didn't think LDAP attributes were
case-insensitive.



signature.asc
Description: This is a digitally signed message part

[Dovecot] dovecot-1.0.3 apacheds ldap

2007-08-03 Thread sergey ivanov 
I have problem with dovecot-1.0.3 and apacheds ldap server.
If I change just uris in dovecot-ldap.conf to point to fedora-ds server,
everything works O.K.
I've tried with apacheds ldap server versions 1.0.2 and 1.5.0
command line search with parameters taken from dovecot.debug log gives
me all needed attributes.
Comments and help welcome.
Here is my data:
---
# /opt/dovecot/sbin/dovecot -n
# 1.0.3: /opt/dovecot/etc/dovecot.conf
log_path: /tmp/dovecot.log
info_log_path: /tmp/dovecot.debug
protocols: pop3 pop3s imap imaps
ssl_cert_file: /etc/ssl/parkheights.cert
ssl_key_file: /etc/ssl/parkheights.key
login_dir: /opt/dovecot/var/run/dovecot/login
login_executable(default): /opt/dovecot/libexec/dovecot/imap-login
login_executable(imap): /opt/dovecot/libexec/dovecot/imap-login
login_executable(pop3): /opt/dovecot/libexec/dovecot/pop3-login
mail_extra_groups: mail
mail_location: maildir:/var/spool/imap/%n/.imap
mail_debug: yes
mail_executable(default): /opt/dovecot/libexec/dovecot/imap
mail_executable(imap): /opt/dovecot/libexec/dovecot/imap
mail_executable(pop3): /opt/dovecot/libexec/dovecot/pop3
mail_plugin_dir(default): /opt/dovecot/lib/dovecot/imap
mail_plugin_dir(imap): /opt/dovecot/lib/dovecot/imap
mail_plugin_dir(pop3): /opt/dovecot/lib/dovecot/pop3
pop3_uidl_format(default):
pop3_uidl_format(imap):
pop3_uidl_format(pop3): %08Xu%08Xv
auth default:
  verbose: yes
  debug: yes
  debug_passwords: yes
  passdb:
driver: ldap
args: /opt/dovecot/etc/dovecot-ldap.conf
  userdb:
driver: ldap
args: /opt/dovecot/etc/dovecot-ldap.conf
  userdb:
driver: prefetch
  socket:
type: listen
master:
  path: /opt/dovecot/var/run/dovecot/auth-master
  mode: 384
  user: vmail
  group: vmail
---
# grep -v '#' /opt/dovecot/etc/dovecot-ldap.conf  |grep -v '^\s*$'
hosts = 192.168.10.43:389
dn = uid=admin,ou=system
dnpass = Ahma3zoc
sasl_bind = no
auth_bind = no
ldap_version = 3
base = ou=people,dc=parkheights,dc=dyndns,dc=org
user_attrs = homeDirectory=home,uidNumber=uid,gidNumber=gid
user_filter = ((objectClass=posixAccount)(uid=%Ln))
pass_attrs =
uid=user,gidNumber=userdb_gid,userPassword=password,homeDirectory=userdb_home,uidNumber=userdb_uid
default_pass_scheme = MD5
---
# tail -5 /tmp/dovecot.debug
dovecot: Aug 03 08:07:10 Info: auth(default): client in: AUTH   1  
PLAIN   service=IMAPsecured lip=127.0.0.1   rip=127.0.0.1  
resp=AHNlc(here_also_skipped_something)3N1Pg==
dovecot: Aug 03 08:07:10 Info: auth(default): ldap(seriv,127.0.0.1):
pass search: base=ou=people,dc=parkheights,dc=dyndns,dc=org
scope=subtree filter=((objectClass=posixAccount)(uid=seriv))
fields=uid,gidNumber,userPassword,homeDirectory,uidNumber
dovecot: Aug 03 08:07:10 Info: auth(default): ldap(seriv,127.0.0.1):
result: uid(user)=seriv gidnumber(?unknown?)= userpassword(?unknown?)=
homedirectory(?unknown?)= uidnumber(?unknown?)=
dovecot: Aug 03 08:07:12 Info: auth(default): client out: FAIL  1  
user=seriv  temp
dovecot: Aug 03 08:10:10 Info: imap-login: Disconnected: Inactivity:
user=seriv, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured
---
# tail -3 /tmp/dovecot.log  
dovecot: Aug 03 08:06:53 Warning: auth(default): Killed with signal 15
dovecot: Aug 03 08:06:53 Warning: Killed with signal 15
dovecot: Aug 03 08:07:10 Error: auth(default): ldap(seriv,127.0.0.1): No
password in reply

--- here is the snippet from apacheds debug log: ---

message Id : 2
Search Request
Base Object : 'ou=people,dc=parkheights,dc=dyndns,dc=org'
Scope : whole subtree
Deref Aliases : never Deref Aliases
Size Limit : no limit
Time Limit : no limit
Types Only : false
Filter : '((objectClass=posixAccount)(uid=seriv))'
Attributes : gidNumber, uid, userPassword, homeDirectory, uidNumber

baseDn : 'ou=people,dc=parkheights,dc=dyndns,dc=org'
filter : '( (objectClass=posixAccount) (uid=seriv) ) '
scope : whole subtree
typesOnly : false
no limit
Time Limit : no limit
Deref Aliases : never Deref Aliases
attributes : 'gidNumber', 'uid', 'userPassword',
'homeDirectory', 'uidNumber'

message Id : 2
Search Result Entry
Object Name : 'uid=seriv,ou=people,dc=parkheights,dc=dyndns,dc=org'
Attributes
Attributes
Attribute id : 'uid',  Values : ['seriv']
Attribute id : 'gidnumber',  Values : ['1927']
Attribute id : 'userpassword',  Values : [0x7B 0x4D ...
(skipped some bytes here) ... 0x3D 0x3D ]
Attribute id : 'homedirectory',  Values :
['/var/spool/imap/seriv']
Attribute id : 'uidnumber',  Values : ['1001']