dovecot - Aug 2006 - Supporting local and virtual LDAP users, with seperate mail_env

Is it possible to have local users with mail in
maildir:%h/.maildir

and virutal users with mail in
maildir:/home/exim/%u/.maildir


I seem to have authentication working for both local users and LDAP users.
But I'm getting this error trying to access a virtual users mail.

Aug 17 08:12:08 hostname dovecot: IMAP(Firstname Lastname): maildir: 
data=/HOME_DIRECTORY_USED_BUT_NOT_GIVEN_BY_USERDB/.maildir
Aug 17 08:12:08 hostname dovecot: IMAP(Firstname Lastname): maildir: 
root=/HOME_DIRECTORY_USED_BUT_NOT_GIVEN_BY_USERDB/.maildir, 
index=/HOME_DIRECTORY_USED_BUT_NOT_GIVEN_B
Y_USERDB/.maildir, control=, inboxAug 17 08:12:08 hostname dovecot:
IMAP(Firstname Lastname):
mkdir(/HOME_DIRECTORY_USED_BUT_NOT_GIVEN_BY_USERDB/.maildir/cur) failed: 
Permission denied

-- 


Regards,
Tim Schafer
Information Technology
                    Logistics Easier with Technology


Freight Solution Providers                    direct 916-376-6190
10453 Old Placerville Road                    fax    916-376-6156
Sacramento, CA 95827                      tim_schafer at shipfsp.com

Please, my dovecot sometimes down !

Aug 17 14:20:01 netrasun dovecot: pop3-login: Can't connect to auth server
at default: Resource temporarily unavailable
Aug 17 14:20:02 netrasun last message repeated 3 times
Aug 17 14:20:03 netrasun dovecot: pop3-login: Disconnected: Inactivity:
rip=157.86.6.55, lip=157.86.6.55
Aug 17 14:20:04 netrasun dovecot: pop3-login: Can't connect to auth server
at default: Resource temporarily unavailable
Aug 17 14:20:16 netrasun last message repeated 19 times
Aug 17 14:20:16 netrasun dovecot: pop3-login: Disconnected: Inactivity:
rip=157.86.6.55, lip=157.86.6.55
Aug 17 14:20:16 netrasun dovecot: pop3-login: Can't connect to auth server
at default: Resource temporarily unavailable
Aug 17 14:20:21 netrasun last message repeated 6 times
Aug 17 14:20:21 netrasun dovecot: pop3-login: Disconnected: Inactivity:
rip=157.86.6.55, lip=157.86.6.55
Aug 17 14:20:21 netrasun dovecot: pop3-login: Can't connect to auth server
at default: Resource temporarily unavailable
Aug 17 14:20:24 netrasun last message repeated 4 times
Aug 17 14:20:25 netrasun dovecot: pop3-login: Disconnected: Inactivity:
rip=157.86.6.55, lip=157.86.6.55
Aug 17 14:20:25 netrasun dovecot: pop3-login: Can't connect to auth server
at default: Resource temporarily unavailable
Aug 17 14:20:38 netrasun last message repeated 13 times
Aug 17 14:20:39 netrasun dovecot: pop3-login: Disconnected: Inactivity:
rip=157.86.6.55, lip=157.86.6.55
Aug 17 14:20:39 netrasun dovecot: pop3-login: Can't connect to auth server
at default: Resource temporarily unavailable
Aug 17 14:20:47 netrasun last message repeated 9 times
Aug 17 14:20:48 netrasun dovecot: pop3-login: Disconnected: Inactivity:
rip=157.86.6.55, lip=157.86.6.55
Aug 17 14:20:49 netrasun dovecot: pop3-login: Can't connect to auth server
at default: Resource temporarily unavailable
Aug 17 14:20:57 netrasun last message repeated 7 times
Aug 17 14:20:58 netrasun dovecot: pop3-login: Disconnected: Inactivity:
rip=157.86.6.55, lip=157.86.6.55
Aug 17 14:21:00 netrasun dovecot: pop3-login: Can't connect to auth server
at default: Resource temporarily unavailable
Aug 17 14:21:08 netrasun last message repeated 7 times

Please, Help-me !

On Thu, 2006-08-17 at 10:20 -0700, Tim Schafer wrote:
> Is it possible to have local users with mail in
> maildir:%h/.maildir
> 
> and virutal users with mail in
> maildir:/home/exim/%u/.maildir
> 
> 
> I seem to have authentication working for both local users and LDAP users.
> But I'm getting this error trying to access a virtual users mail.
> 
> Aug 17 08:12:08 hostname dovecot: IMAP(Firstname Lastname): maildir: 
> data=/HOME_DIRECTORY_USED_BUT_NOT_GIVEN_BY_USERDB/.maildir
LDAP isn't returning home. You'll need to return it in user_attrs in
dovecot-ldap.conf.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 191 bytes
Desc: This is a digitally signed message part
URL:
<http://dovecot.org/pipermail/dovecot/attachments/20060817/77444ea0/attachment.bin>

On Thu, 2006-08-17 at 10:20 -0700, Tim Schafer wrote:
> Is it possible to have local users with mail in
> maildir:%h/.maildir
> 
> and virutal users with mail in
> maildir:/home/exim/%u/.maildir
> 
> 
> I seem to have authentication working for both local users and LDAP users.
> But I'm getting this error trying to access a virtual users mail.
> 
> Aug 17 08:12:08 hostname dovecot: IMAP(Firstname Lastname): maildir: 
> data=/HOME_DIRECTORY_USED_BUT_NOT_GIVEN_BY_USERDB/.maildir
Or .. Well, two choices:

a) return /home/exim/user as home directory from LDAP

b) return mail=maildir:/home/exim/user/.maildir from LDAP.

You can't set multiple default_mail_env settings currently, so the home
must come from LDAP. Or I suppose alternatively you could use static
instead of LDAP as userdb if all your virtual users use the same UID.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 191 bytes
Desc: This is a digitally signed message part
URL:
<http://dovecot.org/pipermail/dovecot/attachments/20060817/954bc982/attachment.bin>

Thank you Timo,

I changed
default_mail_env = maildir:/home/exim/%n/.maildir

I may not have to support local users

But I'm still running into the problem that the user authenticates as
Firstname Lastname
which is the cn in LDAP
but the uid in LDAP, which would be something like
flastname
needs to be used for mail location.

Is there a way to use the uid in LDAP to specify the mail location, 
without modifying the current LDAP database to include the full path?

Regards,
Tim Schafer
Information Technology
                    Logistics Easier with Technology


Freight Solution Providers                    direct 916-376-6190
10453 Old Placerville Road                    fax    916-376-6156
Sacramento, CA 95827                      tim_schafer at shipfsp.com



Timo Sirainen said the following on 8/17/2006 10:53 AM:
> On Thu, 2006-08-17 at 10:20 -0700, Tim Schafer wrote:
> > Is it possible to have local users with mail in
> > maildir:%h/.maildir
> > 
> > and virutal users with mail in
> > maildir:/home/exim/%u/.maildir
> > 
> > 
> > I seem to have authentication working for both local users and LDAP
users.
> > But I'm getting this error trying to access a virtual users mail.
> > 
> > Aug 17 08:12:08 hostname dovecot: IMAP(Firstname Lastname): maildir: 
> > data=/HOME_DIRECTORY_USED_BUT_NOT_GIVEN_BY_USERDB/.maildir
>
> Or .. Well, two choices:
>
> a) return /home/exim/user as home directory from LDAP
>
> b) return mail=maildir:/home/exim/user/.maildir from LDAP.
>
> You can't set multiple default_mail_env settings currently, so the home
> must come from LDAP. Or I suppose alternatively you could use static
> instead of LDAP as userdb if all your virtual users use the same UID.
>
>

I've gone with option a) in order to proceed with testing.
I am going to need local and virtual users with independent mail_env.
How feasible would it be to allow dovecot to override default_mail_env 
on a per userdb basis?

A static won't work in my case since the maildir path is derived from 
info in LDAP.
I also haven't been able to get dovecot to use the uid from LDAP for %u 
or %n as apposed to the cn which is what is used for authentication.

The good news is that so far the testing of performance looks promising 
relative to the courier-imap we've been using :)

Regards,
Tim Schafer
Information Technology
                    Logistics Easier with Technology


Freight Solution Providers                    direct 916-376-6190
10453 Old Placerville Road                    fax    916-376-6156
Sacramento, CA 95827                      tim_schafer at shipfsp.com



Timo Sirainen said the following on 8/17/2006 10:53 AM:
> On Thu, 2006-08-17 at 10:20 -0700, Tim Schafer wrote:
> > Is it possible to have local users with mail in
> > maildir:%h/.maildir
> > 
> > and virutal users with mail in
> > maildir:/home/exim/%u/.maildir
> > 
> > 
> > I seem to have authentication working for both local users and LDAP
users.
> > But I'm getting this error trying to access a virtual users mail.
> > 
> > Aug 17 08:12:08 hostname dovecot: IMAP(Firstname Lastname): maildir: 
> > data=/HOME_DIRECTORY_USED_BUT_NOT_GIVEN_BY_USERDB/.maildir
>
> Or .. Well, two choices:
>
> a) return /home/exim/user as home directory from LDAP
>
> b) return mail=maildir:/home/exim/user/.maildir from LDAP.
>
> You can't set multiple default_mail_env settings currently, so the home
> must come from LDAP. Or I suppose alternatively you could use static
> instead of LDAP as userdb if all your virtual users use the same UID.
>
>