I've got it working via PAM and pam_ldap on Solaris. I think Dovecot's
LDAP support can't do LDAP bind-style authentication; it wants password
fields.
Best Wishes,
Chris
Hoffmann, Oliver wrote:> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Hi!
>
> Is there a solution to auth dovecot against an windows active directory?
> i've tried this config:
>
> - ---
> # Space separated list of LDAP hosts to use. host:port is allowed too.
> hosts = dc.foo.bar
>
> # Distinguished Name - the username used to login to the LDAP server
> dn = cn=oh,cn=Users,dc=foo,dc=bar
>
> # Password for LDAP server
> dnpass = password
>
> # LDAP protocol version to use. Likely 2 or 3.
> ldap_version = 3
>
> # LDAP base
> base = cn=Users,dc=foo,dc=bar
>
> # Dereference: never, searching, finding, always
> #deref = never
>
> # Search scope: base, onelevel, subtree
> scope = subtree
>
> # User attributes in order:
> user_attrs = uid,homeDirectory,,,uidNumber,gidNumber
>
> # Filter for user lookup. Some variables can be used:
> #user_filter = (&(objectClass=posixAccount)(uid=%u))
>
> # Password checking attributes in order:
> pass_attrs = uid,userPassword
>
> # Filter for password lookups
> #pass_filter = (&(objectClass=posixAccount)(uid=%u))
>
> # Default password scheme. "{scheme}" before password overrides
this.
> #default_pass_scheme = CRYPT
>
> # You can use same UID and GID for all user accounts if you really want
> # to.
> # If the UID/GID is still found from LDAP reply, it overrides these values.
> #user_global_uid > #user_global_gid > - ---
>
>
> but got this error:
>
> - ---
> dovecot-auth: Jul 13 16:42:09 Error: ldap(oh): unknown user
> - ---
>
> thx & greets
> oliver
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.1 (MingW32)
>
> iD8DBQFC1S162+wHtX4o3oARAo+SAJ9EGVQPXBG+gtZmcbkOjMiy0xF2JACgigDs
> +6q+EW0zjsICqME310Ky41M> =sMRS
> -----END PGP SIGNATURE-----
>
--
--+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+-
Christopher Wakelin, c.d.wakelin at reading.ac.uk
IT Services Centre, The University of Reading, Tel: +44 (0)118 378 8439
Whiteknights, Reading, RG6 2AF, UK Fax: +44 (0)118 975 3094