dovecot - Jul 2008 - Different PROXY for IMAP and POP3 using LDAP-auth

Hello everybody!

I'm trying to configure dovecot 1.1.1 with different proxy hosts and/or 
ports for different protocols (IMAP, POP3). I'm using LDAP for 
authentication.

I've tried:

1) Variable in "auth default" configuration:

  [dovecot.conf]

   passdb ldap {
     args = /usr/local/etc/dovecot-ldap-%Ls.conf
   }
   userdb ldap {
      args = /usr/local/etc/dovecot-ldap-%Ls.conf
   }

   With results in dovecot not starting with error message:
     Can't open configuration file /usr/local/etc/dovecot-ldap-%Ls.conf:
     No such file or directory
   So %Ls was not replaced.



2) Variable in pass_attrs

   [dovecot-ldap.conf]

    pass_attrs = \
         uid=user,userPassword=password,homeDirectory=userdb_home,\
	uidNumber=userdb_uid,gidNumber=userdb_gid,\
         dovecotProxy%Ls=proxy,dovecotHost%Ls=host,dovecotPort%Ls=port

    With results in this LDAP server log entries:
      SRCH attr=uid userPassword homeDirectory uidNumber gidNumber
           dovecotProxy%Ls dovecotHost%Ls dovecotPort%Ls

    So %Ls was not replaced also.


mmmh...

Would it be an option to use multiple "auth" sections?
E.g:
   auth pop3 {
     ...
     passdb ldap {
       args = /usr/local/etc/dovecot-ldap-pop3.conf
     }
     userdb ldap {
       args = /usr/local/etc/dovecot-ldap-pop3.conf
     }
     ...
   }

   auth imap {
     ...
     passdb ldap {
       args = /usr/local/etc/dovecot-ldap-imap.conf
     }
     userdb ldap {
       args = /usr/local/etc/dovecot-ldap-imap.conf
     }
     ...
   }

  I'm in doubt because of
      http://markmail.org/message/rcpcm67g56kxxdyq


Any ideas?

Regards, Ralf Becker

-- 
______________________________________________________________________

  Dipl.-Inform. (FH) Ralf Becker     Rechenzentrum (r/ft) der FH Trier
  (Network|Mail|Web|Firewall)           University of applied sciences
  Administrator                           Schneidershof, D-54293 Trier

    Mail: beckerr at fh-trier.de                    Fon: +49 651 8103 499
     Web: http://www.fh-trier.de/~beckerr        Fax: +49 651 8103 214
  PubKey: http://www.fh-trier.de/~beckerr     Crypto: GnuPG, S/MIME
______________________________________________________________________

  Wenn Gott gewollt haette, dass E-Mail in HTML geschrieben wuerden,
  endeten Gebete traditionell mit </amen>. (Tom Listen)
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 6074 bytes
Desc: S/MIME Cryptographic Signature
URL:
<http://dovecot.org/pipermail/dovecot/attachments/20080704/d3aa238d/attachment-0002.bin>

Ralf Becker wrote:
> Hello everybody!
>
> I'm trying to configure dovecot 1.1.1 with different proxy hosts 
> and/or ports for different protocols (IMAP, POP3). I'm using LDAP for 
> authentication.
>
> I've tried: 

Refer to this thread:
http://marc.info/?l=dovecot&m=121376558429308&w=2

-- 
Best Regards.

Zhang Huangbin

- iRedMail: Mail Server Solution for Red Hat(R) Enterprise Linux & CentOS
5.x:
  http://iRedMail.googlecode.com/

On Jul 4, 2008, at 2:15 PM, Ralf Becker wrote:
> 1) Variable in "auth default" configuration:
>
> [dovecot.conf]
>
>  passdb ldap {
>    args = /usr/local/etc/dovecot-ldap-%Ls.conf
>  }
>  userdb ldap {
>     args = /usr/local/etc/dovecot-ldap-%Ls.conf
>  }
>
>  With results in dovecot not starting with error message:
>    Can't open configuration file /usr/local/etc/dovecot-ldap-%Ls.conf:
>    No such file or directory
>  So %Ls was not replaced.
This is a lot of work to implement.
> 2) Variable in pass_attrs
>
>  [dovecot-ldap.conf]
>
>   pass_attrs = \
>        uid=user,userPassword=password,homeDirectory=userdb_home,\
> 	uidNumber=userdb_uid,gidNumber=userdb_gid,\
>        dovecotProxy%Ls=proxy,dovecotHost%Ls=host,dovecotPort%Ls=port
>
>   With results in this LDAP server log entries:
>     SRCH attr=uid userPassword homeDirectory uidNumber gidNumber
>          dovecotProxy%Ls dovecotHost%Ls dovecotPort%Ls
>
>   So %Ls was not replaced also.
This probably wouldn't be difficult to implement, but I'm not sure  
when I have time for it. If you want to try yourself, src/auth/passdb- 
ldap.c and/or db-ldap.c see the existing var_expand() calls.
> Would it be an option to use multiple "auth" sections?
> E.g:
>  auth pop3 {
>  auth imap {
Multiple auth sections don't work in any reasonable way currently.

I don't think you really have any working solutions for LDAP  
currently, other than running two separate Dovecot instances.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: PGP.sig
Type: application/pgp-signature
Size: 194 bytes
Desc: This is a digitally signed message part
URL:
<http://dovecot.org/pipermail/dovecot/attachments/20080704/122ed420/attachment-0002.bin>