dovecot - Oct 2004 - dovecot-auth

Hi, I'm a new list member, I?m a not an English native speaking (so, 
please forgive any error you can find in this mail) and I'm trying to 
install Dovecot in Debian Woody. I've installed the Dovecot package from 
backports and I?m trying to configure it to get the credential 
authentication from an LDAP backend.

This is the configuration process summary I?ve done; if you need some 
configuration file I can post it with great pleasure.
In LDAP I?ve created the user cn=dovecot,ou=DSA,dc=flanet,dc=org, I?ve 
configured this user to have read access to the userPassword field in 
slapd.conf (the other parameter such as uid, directoryHome? can be read 
as anonymous), I?ve configured the dovecot-ldap.conf to bind using the 
?cn=dovecot,ou=DSA,dc=flanet,dc=org? and I set the *auth_userdb* and 
*auth_passdb* of dovecot.conf to *ldap /path/to/dovecot-ldap.conf*.

When I?m trying to start dovecot in the mail.err log file I can find
> Oct 5 11:13:29 PDC-SMB dovecot-auth: LDAP: ldap_simple_bind_s() failed (dn
cn=dovecot,ou=DSA,dc=flanet,dc=org): Invalid credentials
Is the problem that the ldap-password is stored in SSHA crypted mode and 
in *dnpass* I've inserted it in plaintext? Or more in general, someone 
can help me to find where I wrong and how can I try to solve it?

Piviul

I've solved this problem (perhaps the cause was that the name of the 
bind ldap user was the same of the account in passwd: I've created 
another bind account in ldap with a different name...) but I've just 
another one.

Dovecot is up and running but I can't login from a client.

I've set *auth_verbose=yes* but I've no logging of the failure. Is it 
normal? How can I get verbose logging?

Piviul

Thank you very much for your prompt reply and I hope you can forgive me 
to have erroneusly send the previous message directly to your address 
instead of the ML address.

Timo Sirainen wrote:
> On 5.10.2004, at 18:46, Piviul wrote:
> It probably means that the dn you gave in dovecot-ldap.conf doesn't
have
> read access to everyone's userPassword field. This is required by 
> Dovecot's current implementation.
As far as I know the *dn* I've inserted in the dovecot-ldap.conf have 
read access to the userPassword field. In effect I've setted it in 
slapd.conf and if I run
> ldapsearch -x -D *dn inserted in dovecot-ldap.conf* -w password
I can read the userPassword field of every user in the tree.

But if the problem is in the password field can be connected to the 
crypted password stored in userPassword? I wrong to set *pass_attrs = 
uid,{SSHA}userPassword* in dovecot-ldap.conf?

Piviul