thr3ads.net - dovecot - [Dovecot] Problem with ldap / quotas [Feb 2011]

If this information is useful, please help other people find it:
Share via:

Nikolaos Milas

2011-Feb-21 20:02 UTC

[Dovecot] Problem with ldap / quotas

Hi,

I am trying to enable per user quotas, but I get the following error:

    Feb 18 23:59:20 vmail dovecot: auth(default): 
ldap(tester,10.10.100.150): ldap_search((uid=tester)) failed: No such object

It seems as if ldapsearch for username/password won't work with my new 
settings, but I can't find why.

I run Dovecot v1.2.11 on CentOS 5.5.

I changed my working dovecot.conf (see later) with the following changes 
(I used the roomNumber attribute to store the quota value):

1. Added in main part:

    mail_uid = 500
    mail_gid = 500

2. Changed userdb with:

    userdb ldap {
    args = /etc/dovecot-usrdb-ldap.conf
    }

    and /etc/dovecot-usrdb-ldap.conf is:

    hosts = localhost
    tls = no
    base = ou=people, dc=example, dc=com
    scope = subtree
    ldap_version = 3
    auth_bind = yes
    user_filter = (uid=%u)
    pass_filter = (uid=%u)
    pass_attrs = uid=user,userPassword=password
    auth_bind_userdn = uid=%u,ou=people,dc=example,dc=com
    user_attrs = roomNumber=quota_rule=*:bytes=%$,uid=home=/home/vmail/%u

3. Changed passdb with

    passdb ldap {
    args = /etc/dovecot-passdb-ldap.conf
    }

where /etc/dovecot-passdb-ldap.conf is identical to dovecot-usrdb-ldap.conf.

What am I doing wrong? Please advise.

Thanks in advance,
Nick

My working dovecot.conf is:

    protocols = imap imaps pop3 pop3s
    disable_plaintext_auth = no
    syslog_facility = local1
    ssl = yes

    ssl_cert_file = /etc/pki/CA/certs/cert-180.pem
    ssl_key_file = /etc/pki/CA/private/key.pem
    ssl_ca_file = /etc/pki/CA/certs/cert-180.pem

    ssl_verify_client_cert = no
    verbose_ssl = no
    login_process_size = 64
    mail_location = maildir:~/Maildir/
    mail_debug = no

    protocol imap {
       mail_plugins = quota imap_quota
       imap_client_workarounds = delay-newmail outlook-idle netscape-eoh
    }

    protocol pop3 {
       pop3_uidl_format = %08Xu%08Xv
       mail_max_userip_connections = 3
       mail_plugins = quota
       pop3_client_workarounds = outlook-no-nuls oe-ns-eoh
    }

    protocol managesieve {
    }

    protocol lda {
       postmaster_address = postmaster at example.com
       mail_plugins = quota
    }

    auth_username_chars    
abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@
    auth_username_format = %Lu
    auth_verbose = yes
    auth_debug = no

    auth default {
       mechanisms = plain login

       passdb ldap {
       args = /etc/dovecot-ldap.conf
       }

       userdb static {
       args = uid=500 gid=500 home=/home/vmail/%u
       }

       user = root

       socket listen {
         client {
           path = /var/spool/postfix/private/auth
           mode = 0660
           user = postfix
           group = postfix
         }
       }
    }

    dict {
    }

    plugin {
       quota = maildir:User quota
    # Quota limit is 4GB
       quota_rule = *:storage=4G
    # We add 100Mb more for Trash
       quota_rule2 = Trash:storage=100M
    # We set up warnings at 75% and 90%
       quota_warning = storage=75%% /opt/mail.sh 75 %u
       quota_warning2 = storage=90%% /opt/mail.sh 90 %u
    }

     and dovecot-ldap.conf is:

    hosts = localhost
    tls = no
    base = ou=people, dc=example, dc=com
    scope = subtree
    ldap_version = 3
    auth_bind = yes
    pass_attrs = uid=user,userPassword=password
    auth_bind_userdn = uid=%u,ou=people,dc=example,dc=com
    pass_filter = (uid=%u)

Finally, for reference (dovecot -n):

    # 1.2.11: /etc/dovecot.conf
    # OS: Linux 2.6.18-194.32.1.el5 x86_64 CentOS release 5.5 (Final)
    syslog_facility: local1
    ssl_ca_file: /etc/pki/CA/certs/cert-180.pem
    ssl_cert_file: /etc/pki/CA/certs/cert-180.pem
    ssl_key_file: /etc/pki/CA/private/key.pem
    login_dir: /var/run/dovecot/login
    login_executable(default): /usr/libexec/dovecot/imap-login
    login_executable(imap): /usr/libexec/dovecot/imap-login
    login_executable(pop3): /usr/libexec/dovecot/pop3-login
    mail_max_userip_connections(default): 10
    mail_max_userip_connections(imap): 10
    mail_max_userip_connections(pop3): 3
    mail_location: maildir:~/Maildir/
    mail_executable(default): /usr/libexec/dovecot/imap
    mail_executable(imap): /usr/libexec/dovecot/imap
    mail_executable(pop3): /usr/libexec/dovecot/pop3
    mail_plugins(default): quota imap_quota
    mail_plugins(imap): quota imap_quota
    mail_plugins(pop3): quota
    mail_plugin_dir(default): /usr/lib64/dovecot/imap
    mail_plugin_dir(imap): /usr/lib64/dovecot/imap
    mail_plugin_dir(pop3): /usr/lib64/dovecot/pop3
    imap_client_workarounds(default): delay-newmail outlook-idle
    netscape-eoh
    imap_client_workarounds(imap): delay-newmail outlook-idle netscape-eoh
    imap_client_workarounds(pop3):
    pop3_client_workarounds(default):
    pop3_client_workarounds(imap):
    pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh
    lda:
       postmaster_address: postmaster at example.com
       mail_plugins: quota
    auth default:
       mechanisms: plain login
       username_format: %Lu
       verbose: yes
       passdb:
         driver: ldap
         args: /etc/dovecot-ldap.conf
       userdb:
         driver: static
         args: uid=500 gid=500 home=/home/vmail/%u
       socket:
         type: listen
         client:
           path: /var/spool/postfix/private/auth
           mode: 432
           user: postfix
           group: postfix
    plugin:
       quota: maildir:User quota
       quota_rule: *:storage=4G
       quota_rule2: Trash:storage=100M
       quota_warning: storage=75%% /opt/mail.sh 75 %u
       quota_warning2: storage=90%% /opt/mail.sh 90 %u

Timo Sirainen

2011-Feb-22 08:51 UTC

head link

[Dovecot] Problem with ldap / quotas

On Mon, 2011-02-21 at 22:02 +0200, Nikolaos Milas wrote:
> I am trying to enable per user quotas, but I get the following error:
> 
>     Feb 18 23:59:20 vmail dovecot: auth(default): 
> ldap(tester,10.10.100.150): ldap_search((uid=tester)) failed: No such
object
> 
> It seems as if ldapsearch for username/password won't work with my new 
> settings, but I can't find why.
Your dovecot-ldap.conf has no dn or dnpass settings, so it's doing the
userdb lookups anonymously. My guess is that won't work.

Nikolaos Milas

2011-Feb-22 20:48 UTC

head link

[Dovecot] Problem with ldap / quotas

I forgot to cc the list in my subsequent question in this thread, so 
that question and Timo's reply has not been included in the mailing list.

I am submitting for thread completeness, thanking Timo for his 
invaluable help.

Nick


On 22/2/2011 6:23 ??, Timo Sirainen wrote:> On 22.2.2011, at 18.11, Nikolaos Milas wrote:
>
>> I added dn and dnpass and now everything appears to be running
smoothly. I checked, and the maildirsize file gets updated according to the
quota value we set in LDAP.
>>
>> Can you also please clarify: When the default policy is to offer to
users some storage space (say 4G) and some additional for Trash (say 100M), and
then we define (over LDAP) a different storage space for a particular user (for
example 1M), then:
>>
>>   1. This user will also "inherit" a 100M Trash from the
default policy
>>      or not (in this example 1+100M)?
> Yes.
>
>> Can we change this (also define
>>      per user Trash size)?
> Yes, you can also have ldap return quota_rule2 to override it. Or instead
of a hard coded limit, you could set Trash's size to e.g. 10% of the default
limit (quota_rule2 = Trash:storage=10%%) so you don't have to return it from
ldap.
>
>>   2. If we define quota_warning (say 75%), the value will apply to the
>>      total of (MainStorage + Trash (here 101M)) or to MainStorage only
>>      (1M)?
> MainStorage = 1M.
>
>> I'm asking because I reduced the storage space to only 50K for a
test account (for experimenting), and sent various emails (over smtp) to that
mailbox, but I saw no warnings or mailbox locking when the mailbox was
over-quota or full.
> Locking? You mean it allowed user to exceed quota? mail_debug=yes could log
something useful about what's going on.

Timo Sirainen

2011-Feb-28 15:17 UTC

head link

[Dovecot] Problem with ldap / quotas

On Wed, 2011-02-23 at 10:50 +0200, Nikolaos Milas wrote:> Also, as my virtual mail user:group is vmail:vmail, should I change 
> permissions in auth-master path (/var/run/dovecot)?
You can do it as explained in http://wiki.dovecot.org/LDA#Virtual_users,
see especially the part with:

user = vmail # User running deliver

Timo Sirainen

2011-Feb-28 15:19 UTC

head link

[Dovecot] Problem with ldap / quotas

On Fri, 2011-02-25 at 13:04 +0200, Nikolaos Milas wrote:> 
> If not, please can someone clarify where exactly "deliver -f 
> $FROM_ENVELOPE -d $DEST_USERNAME" should be called (when we do userdb 
> lookups over LDAP)??? 
deliver needs to be called by Postfix.
http://wiki.dovecot.org/LDA/Postfix

Possibly Parallel Threads

Search for more maybe matching threads

dovecot - Feb 2011 - Problem with ldap / quotas

[Dovecot] Problem with ldap / quotas

[Dovecot] Problem with ldap / quotas

[Dovecot] Problem with ldap / quotas

[Dovecot] Problem with ldap / quotas

[Dovecot] Problem with ldap / quotas

Possibly Parallel Threads