dovecot - Jun 2010 - dovecot ldap search result ordering?

I use openLDAP as dovecot pass/user db.
here is main part of dovecot-ldap.conf:

pass_attrs = mail=user, uid=userdb_home=/home/xadmin/%d/%$,userPassword=password
pass_filter = (&(objectClass=posixAccount)(uid=%u))
default_pass_scheme = SSHA

user_attrs = mail=user, uid=home=/home/xadmin/%d/%$
user_filter = (&(objectClass=posixAccount)(|(mail=%u)(mailAlias=%u)))

It works fine, but some account failed to get their domain in pass_attrs.
I check the log.
when it success, the result order is "mail, uid, userPassword"
when it failed, the order is "userPassword, uid, mail"

we just use a username to login. I think dovecot cant get the domain before
username changed to "username at domain". So can dovecot sort the
result
order and How?



-- 
??????????
??????????
??????????
??????????

On Sat, 2010-06-26 at 14:53 +0800, chasye wrote:
> It works fine, but some account failed to get their domain in pass_attrs.
> I check the log.
> when it success, the result order is "mail, uid, userPassword"
> when it failed, the order is "userPassword, uid, mail"
You didn't mention what Dovecot version you're using. Anyway, I guess
this is fixed by: http://hg.dovecot.org/dovecot-1.2/rev/a3e4af3df83d

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Sat, 26 Jun 2010, chasye wrote:
> pass_attrs = mail=user,
uid=userdb_home=/home/xadmin/%d/%$,userPassword=password
> pass_filter = (&(objectClass=posixAccount)(uid=%u))
> default_pass_scheme = SSHA
>
> user_attrs = mail=user, uid=home=/home/xadmin/%d/%$
> user_filter = (&(objectClass=posixAccount)(|(mail=%u)(mailAlias=%u)))
>
> It works fine, but some account failed to get their domain in pass_attrs.
> I check the log.
> when it success, the result order is "mail, uid, userPassword"
> when it failed, the order is "userPassword, uid, mail"
>
> we just use a username to login. I think dovecot cant get the domain before
> username changed to "username at domain". So can dovecot sort the
result
I guess you have to drop the uid=userdb_home and rely on the second query.

Regards,

- -- 
Steffen Kaiser
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iQEVAwUBTCxNrb+Vh58GPL/cAQIydAf/fB07yAHzzJQdeXNutnA8NEikLyJ8oevL
Vblt2clSEWM8tkTJK42EC9916lOhKA/EOmGvuRjgSfoal1AJlVTptiQjxCaELeS6
5afwC2aEvvIYRKOaw42S98TYOzr5V0HU3QcxQmlMRxpB9cESzIG5Pw6Z9Ol52whJ
HJd+3MO29LUdHcgn8yxxsuk+VowPn8CL4WK0WiDhpLFMc2z5Z6SkthqyGOOAtvkj
y35pAiTBx/DiOPEtU+VLu6IRddtL4GYYnMvAn05b63sZO9e1CquVpbr5Qb3q2I52
w5HFeqYKqH9zBZD3xdYxUdrSSK8tU5WfjUYYcnZzQlYv5oeWYS3NaQ==tbno
-----END PGP SIGNATURE-----