Hi,

> try adjusting the variables to suit your needs and run as root. users will 
> login with their mail address -- much more logical (imho)
> 
sorry, please do not get me wrong, but believe me, I already checked all my 
settings more than once and they are absolutely correct ;-) I am pretty sure 
that I discovered a bug in SOGo. Maybe storing DNs wrong, whatever.

My setup is not a simple one server setup. There are central LDAP servers and 
PostgreSQL servers and SOGo is just one component here. The structure of LDAP 
objects is years old.

I also _can_ use the email address or even parts of the name to login. It is 
not necessary to have the user-id filed being the DN name at the same time. So 
in my situation, uniqueIdentifier is an unique attribute in all the objects, 
which does return exactly _one_ DN for each user.

See here:

sogod SOGoUserSources '(
    {
        CNFieldName = cn;
        IMAPLoginFieldName = mail;
        KindFieldName = Kind;
        MailFieldNames = (
            mail
        );
        MultipleBookingsFieldName = Multiplebookings;
        UIDFieldName = uniqueIdentifier;
        baseDN = "ou=it,dc=roessner-net,dc=de";
        bindAsCurrentUser = NO;
        bindDN = "cn=proxyuser,dc=roessner-net,dc=de";
        bindFields = (
            mail,
            cn,
            uniqueIdentifier
        );
        bindPassword = *****;
        canAuthenticate = YES;
        displayName = "Gemeinsame Adressen";
        encryption = STARTTLS;
        hostname = "ldap0.roessner-net.de db.roessner-net.de";
        id = LDAP;
        isAddressBook = YES;
        port = 389;
        scope = SUB;
        type = ldap;
    }
)'

This _should_ work with bindAsCurrentUser. But it uses the wrong DN from a 
different user.

-Christian Rößner

---
Roessner-Network-Solutions
Bachelor of Science Informatik
Nahrungsberg 81, 35390 Gießen
F: +49 641 5879091, M: +49 176 93118939
USt-IdNr.: DE225643613
http://www.roessner-network-solutions.com

Attachment: smime.p7s
Description: S/MIME cryptographic signature

Reply via email to