Public bug reported:

My dovecot users log in as user@domain, with the ldap directory set up
with a couple of different OUs, with one OU per domain.  the users in
the OUs overlap.  if I set

luke@schierer@littera001:/etc/dovecot$ sudo grep -v  ^# dovecot-
ldap.conf.ext |  uniq

hosts = censor001.plerumque.thecrazyguys.net

tls = yes
tls_ca_cert_dir = /etc/ssl/certs
tls_require_cert = allow

debug_level = 4

auth_bind = yes

base = ou=%d,dc=thecrazyguys,dc=net

scope = subtree

user_filter = (&(objectClass=posixAccount)(uid=%n))

pass_filter = (&(objectClass=posixAccount)(uid=%n))

blocking = no
luke@schierer@littera001:/etc/dovecot$

then I get a search base of 
ou=,dc=thecrazyguys,dc=net  which is invalid

I was experimenting, and I tried
base = dc=%d,dc=thecrazyguys,dc=net
which produces a search base of
dc=domain,dc=thecrazyguys,dc=net
which would be correct, except that my ldap tree is set up with OUs and not an 
extra DC component.  

for whatever reason, it will do variable substitution for dc=%d, but not
for ou=%d.  this is certainly not documented, and seems like wrong
behavior, since having an ou in a search base is valid.

luke@schierer@littera001:/etc/dovecot$ lsb_release -rd
Description:    Ubuntu 18.04.5 LTS
Release:        18.04
luke@schierer@littera001:/etc/dovecot$ 

luke@schierer@littera001:/etc/dovecot$ dpkg -l | grep -i dovecot
ii  dovecot-core                           1:2.2.33.2-1ubuntu4.6                
           amd64        secure POP3/IMAP server - core files
ii  dovecot-imapd                          1:2.2.33.2-1ubuntu4.6                
           amd64        secure POP3/IMAP server - IMAP daemon
ii  dovecot-ldap                           1:2.2.33.2-1ubuntu4.6                
           amd64        secure POP3/IMAP server - LDAP support
ii  dovecot-pop3d                          1:2.2.33.2-1ubuntu4.6                
           amd64        secure POP3/IMAP server - POP3 daemon
luke@schierer@littera001:/etc/dovecot$

** Affects: dovecot (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1893543

Title:
  dovecot is not parsing the variables in dovecot-ldap.conf.ext
  correctly

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dovecot/+bug/1893543/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to