dovecot - Aug 2007 - dovecot-1.0.3 & apacheds ldap

I have problem with dovecot-1.0.3 and apacheds ldap server.
If I change just uris in dovecot-ldap.conf to point to fedora-ds server,
everything works O.K.
I've tried with apacheds ldap server versions 1.0.2 and 1.5.0
command line search with parameters taken from dovecot.debug log gives
me all needed attributes.
Comments and help welcome.
Here is my data:
---
# /opt/dovecot/sbin/dovecot -n
# 1.0.3: /opt/dovecot/etc/dovecot.conf
log_path: /tmp/dovecot.log
info_log_path: /tmp/dovecot.debug
protocols: pop3 pop3s imap imaps
ssl_cert_file: /etc/ssl/parkheights.cert
ssl_key_file: /etc/ssl/parkheights.key
login_dir: /opt/dovecot/var/run/dovecot/login
login_executable(default): /opt/dovecot/libexec/dovecot/imap-login
login_executable(imap): /opt/dovecot/libexec/dovecot/imap-login
login_executable(pop3): /opt/dovecot/libexec/dovecot/pop3-login
mail_extra_groups: mail
mail_location: maildir:/var/spool/imap/%n/.imap
mail_debug: yes
mail_executable(default): /opt/dovecot/libexec/dovecot/imap
mail_executable(imap): /opt/dovecot/libexec/dovecot/imap
mail_executable(pop3): /opt/dovecot/libexec/dovecot/pop3
mail_plugin_dir(default): /opt/dovecot/lib/dovecot/imap
mail_plugin_dir(imap): /opt/dovecot/lib/dovecot/imap
mail_plugin_dir(pop3): /opt/dovecot/lib/dovecot/pop3
pop3_uidl_format(default):
pop3_uidl_format(imap):
pop3_uidl_format(pop3): %08Xu%08Xv
auth default:
  verbose: yes
  debug: yes
  debug_passwords: yes
  passdb:
    driver: ldap
    args: /opt/dovecot/etc/dovecot-ldap.conf
  userdb:
    driver: ldap
    args: /opt/dovecot/etc/dovecot-ldap.conf
  userdb:
    driver: prefetch
  socket:
    type: listen
    master:
      path: /opt/dovecot/var/run/dovecot/auth-master
      mode: 384
      user: vmail
      group: vmail
---
# grep -v '#' /opt/dovecot/etc/dovecot-ldap.conf  |grep -v
'^\s*$'
hosts = 192.168.10.43:389
dn = uid=admin,ou=system
dnpass = Ahma3zoc
sasl_bind = no
auth_bind = no
ldap_version = 3
base = ou=people,dc=parkheights,dc=dyndns,dc=org
user_attrs = homeDirectory=home,uidNumber=uid,gidNumber=gid
user_filter = (&(objectClass=posixAccount)(uid=%Ln))
pass_attrs
uid=user,gidNumber=userdb_gid,userPassword=password,homeDirectory=userdb_home,uidNumber=userdb_uid
default_pass_scheme = MD5
---
# tail -5 /tmp/dovecot.debug
dovecot: Aug 03 08:07:10 Info: auth(default): client in: AUTH   1      
PLAIN   service=IMAP    secured lip=127.0.0.1   rip=127.0.0.1  
resp=AHNlc(here_also_skipped_something)3N1Pg=dovecot: Aug 03 08:07:10 Info:
auth(default): ldap(seriv,127.0.0.1):
pass search: base=ou=people,dc=parkheights,dc=dyndns,dc=org
scope=subtree filter=(&(objectClass=posixAccount)(uid=seriv))
fields=uid,gidNumber,userPassword,homeDirectory,uidNumber
dovecot: Aug 03 08:07:10 Info: auth(default): ldap(seriv,127.0.0.1):
result: uid(user)=seriv gidnumber(?unknown?)=
userpassword(?unknown?)homedirectory(?unknown?)= uidnumber(?unknown?)dovecot:
Aug 03 08:07:12 Info: auth(default): client out: FAIL  1
user=seriv      temp
dovecot: Aug 03 08:10:10 Info: imap-login: Disconnected: Inactivity:
user=<seriv>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured
---
# tail -3 /tmp/dovecot.log  
dovecot: Aug 03 08:06:53 Warning: auth(default): Killed with signal 15
dovecot: Aug 03 08:06:53 Warning: Killed with signal 15
dovecot: Aug 03 08:07:10 Error: auth(default): ldap(seriv,127.0.0.1): No
password in reply

--- here is the snippet from apacheds debug log: ---

    message Id : 2
    Search Request
        Base Object : 'ou=people,dc=parkheights,dc=dyndns,dc=org'
        Scope : whole subtree
        Deref Aliases : never Deref Aliases
        Size Limit : no limit
        Time Limit : no limit
        Types Only : false
        Filter : '(&(objectClass=posixAccount)(uid=seriv))'
        Attributes : gidNumber, uid, userPassword, homeDirectory, uidNumber

        baseDn : 'ou=people,dc=parkheights,dc=dyndns,dc=org'
        filter : '(& (objectClass=posixAccount) (uid=seriv) ) '
        scope : whole subtree
        typesOnly : false
no limit
        Time Limit : no limit
        Deref Aliases : never Deref Aliases
        attributes : 'gidNumber', 'uid', 'userPassword',
'homeDirectory', 'uidNumber'

    message Id : 2
    Search Result Entry
        Object Name :
'uid=seriv,ou=people,dc=parkheights,dc=dyndns,dc=org'
        Attributes
            Attributes
            Attribute id : 'uid',  Values : ['seriv']
            Attribute id : 'gidnumber',  Values : ['1927']
            Attribute id : 'userpassword',  Values : [0x7B 0x4D ...
(skipped some bytes here) ... 0x3D 0x3D ]
            Attribute id : 'homedirectory',  Values :
['/var/spool/imap/seriv']
            Attribute id : 'uidnumber',  Values : ['1001']

On Fri, 2007-08-03 at 08:22 -0400, sergey ivanov wrote:
> dovecot: Aug 03 08:07:10 Info: auth(default): ldap(seriv,127.0.0.1):
> pass search: base=ou=people,dc=parkheights,dc=dyndns,dc=org
> scope=subtree filter=(&(objectClass=posixAccount)(uid=seriv))
> fields=uid,gidNumber,userPassword,homeDirectory,uidNumber
> dovecot: Aug 03 08:07:10 Info: auth(default): ldap(seriv,127.0.0.1):
> result: uid(user)=seriv gidnumber(?unknown?)= userpassword(?unknown?)>
homedirectory(?unknown?)= uidnumber(?unknown?)
Looks like Dovecot found only "uid" field. Perhaps it would be also
helpful if it returned if there were any extra fields it didn't
recognize..
>             Attribute id : 'gidnumber',  Values : ['1927']
>             Attribute id : 'userpassword',  Values : [0x7B 0x4D ...
> (skipped some bytes here) ... 0x3D 0x3D ]
>             Attribute id : 'homedirectory',  Values :
> ['/var/spool/imap/seriv']
>             Attribute id : 'uidnumber',  Values : ['1001']
Could it be that you need to use all lowercase letters, like gidnumber
instead of gidNumber? I didn't think LDAP attributes were
case-insensitive.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
URL:
<http://dovecot.org/pipermail/dovecot/attachments/20070805/7290846a/attachment-0002.bin>

Timo Sirainen wrote:
> On Fri, 2007-08-03 at 08:22 -0400, sergey ivanov wrote:
>   
>> dovecot: Aug 03 08:07:10 Info: auth(default): ldap(seriv,127.0.0.1):
>> pass search: base=ou=people,dc=parkheights,dc=dyndns,dc=org
>> scope=subtree filter=(&(objectClass=posixAccount)(uid=seriv))
>> fields=uid,gidNumber,userPassword,homeDirectory,uidNumber
>> dovecot: Aug 03 08:07:10 Info: auth(default): ldap(seriv,127.0.0.1):
>> result: uid(user)=seriv gidnumber(?unknown?)=
userpassword(?unknown?)>> homedirectory(?unknown?)=
uidnumber(?unknown?)>>
>
> Looks like Dovecot found only "uid" field. Perhaps it would be
also
> helpful if it returned if there were any extra fields it didn't
> recognize..
>
>   
>>             Attribute id : 'gidnumber',  Values :
['1927']
>>             Attribute id : 'userpassword',  Values : [0x7B 0x4D
...
>> (skipped some bytes here) ... 0x3D 0x3D ]
>>             Attribute id : 'homedirectory',  Values :
>> ['/var/spool/imap/seriv']
>>             Attribute id : 'uidnumber',  Values :
['1001']
>>     
>
> Could it be that you need to use all lowercase letters, like gidnumber
> instead of gidNumber? I didn't think LDAP attributes were
> case-insensitive.
>
>   
You are rights. It's very strange, but when I changed gidNumber,
uidNumber, userPassword and homeDirectory to all lowercase, dovecot
successfully authorize against apacheds ldap server.
Thanks.
-- 
    Sergey.