dovecot - Dec 2016 - dovecot-ldap.conf.ext for FreeIPA usage

Hello,

I'm figuring out how to auth users against FreeIPA and I wonder if
someone did this without GSAPI.

My users are stored in a mysql DB where I wonder what I shall use as
authname, the username or the mailaddress. As the mailaddress is
always unique it could be best but if a user has multiple
mailaddresses under seperate domains username might be better.

Any clue here and maybe an example for dovecot-ldap.conf.ext when
using FreeIPA ?

Thanks!

Matt

On 29.12.2016 04:47, Matt . wrote:
> Hello,
>
> I'm figuring out how to auth users against FreeIPA and I wonder if
> someone did this without GSAPI.
>
> My users are stored in a mysql DB where I wonder what I shall use as
> authname, the username or the mailaddress. As the mailaddress is
> always unique it could be best but if a user has multiple
> mailaddresses under seperate domains username might be better.
>
> Any clue here and maybe an example for dovecot-ldap.conf.ext when
> using FreeIPA ?
>
> Thanks!
>
> Matt
The best idea is to use same username as you use in FreeIPA. This way 
you can use passdb with ldap to authenticate your users, and mysql 
userdb to get the settings from MySQL.

Aki