List Info

Thread: Re: advanced courier ldap auth problem




Re: advanced courier ldap auth problem
country flaguser name
United States
2007-04-02 06:00:09
Jax writes:

> ...servers, dn pass, blah all good...
> ...
> LDAP_AUTHBIND           1
> LDAP_MAIL               mail
> LDAP_FILTER
> LDAP_GLOB_UID           fv
> LDAP_GLOB_GID           fv

GLOB_UID and GLOB_GID must be numeric values.

> LDAP_HOMEDIR             homeDirectory
> LDAP_MAILDIR             mailbox
> LDAP_FULLNAME           cn
> LDAP_CRYPTPW            userPassword
> LDAP_DEREF              never
> LDAP_TLS                0
> 
> I use mail for auth the users because I did it in my
old userdb config 
> so it will be easier to migrate to ldap.
> Anyone know what's the problem with this?
> The only one problem here is the password auth, yes I
tried all md5 
> crypt ssha sha clear etc..

Give one example of a password, exactly as it's set in
LDAP.


------------------------------------------------------------
-------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the
chance to share your
opinions on IT & business topics through brief
surveys-and earn cash
http://www.techsay.com/default.
php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Courier-imap mailing list
Courier-imaplists.sourceforge.net
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-im
ap

Re: advanced courier ldap auth problem
country flaguser name
Hungary
2007-04-02 13:31:14
Sam Varshavchik wrote:
> Jax writes:
>
>> ...servers, dn pass, blah all good...
>> ...
>> LDAP_AUTHBIND           1
>> LDAP_MAIL               mail
>> LDAP_FILTER
>> LDAP_GLOB_UID           fv
>> LDAP_GLOB_GID           fv
>
> GLOB_UID and GLOB_GID must be numeric values.
>
>> LDAP_HOMEDIR             homeDirectory
>> LDAP_MAILDIR             mailbox
>> LDAP_FULLNAME           cn
>> LDAP_CRYPTPW            userPassword
>> LDAP_DEREF              never
>> LDAP_TLS                0
>>
>> I use mail for auth the users because I did it in
my old userdb 
>> config so it will be easier to migrate to ldap.
>> Anyone know what's the problem with this?
>> The only one problem here is the password auth, yes
I tried all md5 
>> crypt ssha sha clear etc..
>
> Give one example of a password, exactly as it's set in
LDAP.
>
>   
Ok so here is my new user ( password: intel )

Create Object :
cn=john,ou=Courier,ou=Services,dc=logonserver,dc=lan
uid     user1test.com
mail    user1test.com
sn      john
cn      john
gidNumber       102
homeDirectory   /home/users/user1
userPassword    Tlu66vyCq3qhOFvqjvXTCg==
uidNumber       (Auto evaluated on submission.)

 >courierauthtest user1test.com

Trying authdaemon...
Authenticated: module authdaemon
Home directory: /home/users/user1
UID/GID: 1017/1017
AUTHADDR=user1test.com
AUTHFULLNAME=john
OPTIONS=<none>

But when I try with password

 >courierauthtest user1test.com intel

Trying authdaemon...
Authentication FAILED!


The log from the ldap server:

==> bdb_bind: dn: 
cn=john,ou=Courier,ou=Services,dc=logonserver,dc=lan       
send_ldap_result: err=49 matched=""
text=""       
connection_get(20)          
connection_get(20)          
connection_read(20): no connection!        
connection_get(20)          
==> bdb_bind: dn: cn=admin,dc=logonserver,dc=lan       
send_ldap_result: err=0 matched=""
text=""       
connection_get(20)          
SRCH "ou=Courier, ou=Services, dc=logonserver,
dc=lan" 2 0    
0 0 0        
filter: (mail=user1test.com)         
attrs:          
homeDirectory          
mailbox          
cn          
userPassword          
mail          
          
bdb_idl_fetch_key: ou=courier,ou=services,dc=logonserver,dc=lan        

bdb_idl_fetch_key: [b49d1940]         
<= bdb_equality_candidates: (mail) index_param failed
(18)     
send_ldap_result: err=0 matched=""
text=""       
connection_get(21)          
==> bdb_bind: dn: 
cn=john,ou=Courier,ou=Services,dc=logonserver,dc=lan       
send_ldap_result: err=49 matched=""
text=""       
connection_get(21)          
connection_get(21)          
connection_read(21): no connection!   

Log from the courier-imap server:

authdaemon: starting client module
authdaemon: REJECT
authdaemon: REJECT


When I stop the authdaemond and start the ldap auth daemon
then I get

authdaemond.ldap: restarting authdaemond children
authdaemond.ldap: modules="authldap", daemons=10

but I still can't login.


Regards,

Jax

------------------------------------------------------------
-------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the
chance to share your
opinions on IT & business topics through brief
surveys-and earn cash
http://www.techsay.com/default.
php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Courier-imap mailing list
Courier-imaplists.sourceforge.net
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-im
ap

[1-2]

about | contact  Other archives ( Real Estate discussion Medical topics )