Hi Vitaliy
The AD configs I know need an administrative authentication before
"normal" login checks can be done.
Use the dn and dnpass configs. dn should contain the administrative
user's DN and dnpass the corresponding password.
Another thing you can have a second look at is the type and format the
AD stores the user informations. Normally the CN field contains the
user's full name not the mail address. The UID is stored in the
"sAMAccountName" field. So you should also map Dovecot's UID field
to
the AD UID field with
user_attrs = sAMAccountName=uid
Hope this helps..
Greets,
Holger
Vitaliy Vladimirovich schrieb:> I have tried configure Postfix with Dovecot SASL to authenticate remote
users in LDAP (Active Directory).
> Below my dovecot.conf:
>
> protocols = none
> ssl = none
>
> auth default {
> mechanisms = plain login
> passdb ldap {
> args = /usr/local/etc/dovecot-ldap.conf
> }
> userdb ldap {
> args = /usr/local/etc/dovecot-ldap-userdb.conf
> }
>
> }
>
>
> dovecot-ldap.conf
>
> hosts = 10.55.0.2:389
> debug_level = 1
> auth_bind = yes
> auth_bind_userdn = cn=%n,dc=example,dc=gov,dc=ua
> ldap_version = 3
> base = dc=example, dc=gov, dc=ua
> scope = subtree
> ## 10.55.0.2 - Domain Controller
> ##
>
>
> But it does not work:-(
> Where is mistake?
>
> Below log:
>
>
>
> Nov 18 13:02:59 mx postfix/smtpd[12985]: connect from unknown[190.10.190.3]
> Nov 18 13:02:59 mx postfix/smtpd[12985]: setting up TLS connection from
unknown[190.10.190.3]
> Nov 18 13:02:59 mx postfix/smtpd[12985]: Anonymous TLS connection
established from unknown[190.10.190.3]: TLSv1 with cipher RC4-MD5 (128/128 bits)
> Nov 18 13:02:59 mx dovecot: auth(default): ldap_bind
> Nov 18 13:02:59 mx dovecot: auth(default): ldap_simple_bind
> Nov 18 13:02:59 mx dovecot: auth(default): ldap_sasl_bind
> Nov 18 13:02:59 mx dovecot: auth(default): ldap_send_initial_request
> Nov 18 13:02:59 mx dovecot: auth(default): ldap_send_server_request
> Nov 18 13:02:59 mx dovecot: auth(default): ldap_result ld 0x11847020 msgid
-1
> Nov 18 13:02:59 mx dovecot: auth(default): wait4msg ld 0x11847020 msgid -1
(timeout 0 usec)
> Nov 18 13:02:59 mx dovecot: auth(default): wait4msg continue ld 0x11847020
msgid -1 all 1
> Nov 18 13:02:59 mx dovecot: auth(default): ** ld 0x11847020 Connections:
> Nov 18 13:02:59 mx dovecot: auth(default): * host: 10.55.0.2 port: 389
(default)
> Nov 18 13:02:59 mx dovecot: auth(default): refcnt: 2 status: Connected
> Nov 18 13:02:59 mx dovecot: auth(default): last used: Wed Nov 18 13:02:59
2009
> Nov 18 13:02:59 mx dovecot: auth(default):
> Nov 18 13:02:59 mx dovecot: auth(default):
> Nov 18 13:02:59 mx dovecot: auth(default): ** ld 0x11847020 Outstanding
Requests:
> Nov 18 13:02:59 mx dovecot: auth(default): * msgid 3, origid 3, status
InProgress
> Nov 18 13:02:59 mx dovecot: auth(default): outstanding referrals 0,
parent count 0
> Nov 18 13:02:59 mx dovecot: auth(default): ld 0x11847020 request count 1
(abandoned 0)
> Nov 18 13:02:59 mx dovecot: auth(default): ** ld 0x11847020 Response Queue:
> Nov 18 13:02:59 mx dovecot: auth(default): Empty
> Nov 18 13:02:59 mx dovecot: auth(default): ld 0x11847020 response count 0
> Nov 18 13:02:59 mx dovecot: auth(default): ldap_chkResponseList ld
0x11847020 msgid -1 all 1
> Nov 18 13:02:59 mx dovecot: auth(default): ldap_chkResponseList returns ld
0x11847020 NULL
> Nov 18 13:02:59 mx dovecot: auth(default): ldap_int_select
> Nov 18 13:02:59 mx dovecot: auth(default): read1msg: ld 0x11847020 msgid -1
all 1
> Nov 18 13:02:59 mx dovecot: auth(default): read1msg: ld 0x11847020 msgid 3
message type bind
> Nov 18 13:02:59 mx dovecot: auth(default): ldap_chase_referrals
> Nov 18 13:02:59 mx dovecot: auth(default): read1msg: V2 referral chased,
mark request completed, id = 3
> Nov 18 13:02:59 mx dovecot: auth(default): read1msg: ld 0x11847020 0 new
referrals
> Nov 18 13:02:59 mx dovecot: auth(default): read1msg: mark request
completed, ld 0x11847020 msgid 3
> Nov 18 13:02:59 mx dovecot: auth(default): request done: ld 0x11847020
msgid 3
> Nov 18 13:02:59 mx dovecot: auth(default): res_errno: 49, res_error:
<80090308: LdapErr: DSID-0C090334, comment: AcceptSecurityContext error, data
525, vece>, res_matched: <>
> Nov 18 13:02:59 mx dovecot: auth(default): ldap_free_request (origid 3,
msgid 3)
> Nov 18 13:02:59 mx dovecot: auth(default): ldap_parse_result
> Nov 18 13:02:59 mx dovecot: auth(default): ldap_parse_result
> Nov 18 13:02:59 mx dovecot: auth(default): ldap(test_user at
example.org.ua,190.10.190.3): invalid credentials
> Nov 18 13:02:59 mx dovecot: auth(default): ldap_msgfree
> Nov 18 13:02:59 mx dovecot: auth(default): ldap_result ld 0x11847020 msgid
-1
> Nov 18 13:02:59 mx dovecot: auth(default): wait4msg ld 0x11847020 msgid -1
(timeout 0 usec)
> Nov 18 13:02:59 mx dovecot: auth(default): wait4msg continue ld 0x11847020
msgid -1 all 1
> Nov 18 13:02:59 mx dovecot: auth(default): ** ld 0x11847020 Connections:
> Nov 18 13:02:59 mx dovecot: auth(default): * host: 10.55.0.2 port: 389
(default)
> Nov 18 13:02:59 mx dovecot: auth(default): refcnt: 1 status: Connected
> Nov 18 13:02:59 mx dovecot: auth(default): last used: Wed Nov 18 13:02:59
2009
> Nov 18 13:02:59 mx dovecot: auth(default):
> Nov 18 13:02:59 mx dovecot: auth(default):
> Nov 18 13:02:59 mx dovecot: auth(default): ** ld 0x11847020 Outstanding
Requests:
> Nov 18 13:02:59 mx dovecot: auth(default): Empty
> Nov 18 13:02:59 mx dovecot: auth(default): ld 0x11847020 request count 0
(abandoned 0)
> Nov 18 13:02:59 mx dovecot: auth(default): ** ld 0x11847020 Response Queue:
> Nov 18 13:02:59 mx dovecot: auth(default): Empty
> Nov 18 13:02:59 mx dovecot: auth(default): ld 0x11847020 response count 0
> Nov 18 13:02:59 mx dovecot: auth(default): ldap_chkResponseList ld
0x11847020 msgid -1 all 1
> Nov 18 13:02:59 mx dovecot: auth(default): ldap_chkResponseList returns ld
0x11847020 NULL
> Nov 18 13:02:59 mx dovecot: auth(default): ldap_int_select
> Nov 18 13:03:01 mx postfix/smtpd[12985]: warning: unknown[190.10.190.3]:
SASL LOGIN authentication failed: UGFzc3dvcmQ6
> Nov 18 13:03:01 mx postfix/smtpd[12985]: lost connection after AUTH from
unknown[190.10.190.3]
>
>