dovecot - Apr 2005 - no password reply

"dovecot-auth: ldap(branch): No password in reply"


Is this Freebsd error , or active directory is not configured correctly 
or dovecot bug?


regards


Askar

On Thu, 2005-04-14 at 20:57 +0600, Askar wrote:
> "dovecot-auth: ldap(branch): No password in reply"
> 
> Is this Freebsd error , or active directory is not configured correctly 
> or dovecot bug?
It means Dovecot's LDAP support is broken currently in 1.0-tests. I've
forgotten my test LDAP server's admin password and couldn't figure out
how to change it, so I'm waiting for someone else to fix this :)
OpenLDAP is annoying.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
URL:
<http://dovecot.org/pipermail/dovecot/attachments/20050417/b6eaee81/attachment-0001.bin>

Timo Sirainen <tss at iki.fi> ?crit :
> On Thu, 2005-04-14 at 20:57 +0600, Askar wrote:
> > "dovecot-auth: ldap(branch): No password in reply"
> > 
> > Is this Freebsd error , or active directory is not configured
correctly
> > or dovecot bug?
> 
> It means Dovecot's LDAP support is broken currently in 1.0-tests.
I've
> forgotten my test LDAP server's admin password and couldn't figure
out
> how to change it, so I'm waiting for someone else to fix this :)
> OpenLDAP is annoying.
But LDAP is increasingly used to provide a central password
repository (for e-mail, Web interfaces, etc.).  It is a mandatory
requirement for servers that use authentication, such as Dovecot.

-- 
Marc Baudoin           |   Institut Pasteur
<babafou at pasteur.fr>   |   P?le informatique - syst?mes et r?seau

On Sunday 17 April 2005 18:20, Timo Sirainen wrote:
> It means Dovecot's LDAP support is broken currently in 1.0-tests.
I've
> forgotten my test LDAP server's admin password and couldn't figure
out
> how to change it, so I'm waiting for someone else to fix this :)
There is a quick and dirty solution to fix this:
Your LDAP admin password is either in /etc/[open]ldap/slapd.conf like this:
rootpw secret
or it is stored in ldap itself; then simply do a
slapcat -l my_file.ldif
search for the admin entry in the file and reset your password. It should 
still remain encrypted so you might want to use slappasswd to create a new 
hash.
the entry should be something with "userPassword::
hashedpasswordgoeshere"
Then stop ldap server, remove database and recreate it with
slapadd -l my_file_with_changed_admin_password.ldif
you might recreate your indices as well:
slapindex
...and then restart your ldap server.

Depending on your installation it might be possible that there is 
a /etc/ldap.secret file with admin password in plain text...

I hope that helps.

Best regards,
	Adi Kriegisch