System basics
??? Centos 7.3
??? Dovecot 2.2.32 (dfbe293d4)
I am working on a replacement mail server for work and one of the features I
wanted was ldap authentication
After much fiddling I got it to work.
But I encountered a issue where two different methods of testing a mail account
resulted in the
mail_location being different
I set? mail_location = maildir:/var/spool/maildir/%d/%n/Maildir in dovecot.conf
when I test the authentication and to see if the folders are created correctly
on first use I have two results depending on how I test.
First test was from openssl
??? openssl s_client -connect mail2:993
I have no problem connecting, I issue the following commands
* OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE
AUTH=PLAIN] Dovecot ready.
a login testuser at userful.com ********
a OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT
SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDSUBJECT MULTIAPPEND
URL-PARTIAL CATENATE UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED
I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH
LIST-STATUS
BINARY MOVE] Logged in
a list "" *
* LIST (\HasNoChildren) "." INBOX
a OK List completed (0.001 + 0.000 secs).
* BYE Disconnected for inactivity.
closed
But when I look in the mail server at /var/spool/maildir the testuser is not
created inside of userful.com but at the same level as userful.com contrary to
the
%d in mail_location settings.
Now second method
doveadm -D mailbox list -u 'testuser at userful.com'
This correctly creates the user under the domain as specified.
for logs I have from journalctl
for openssl
Oct 30 07:37:12 mail2 dovecot[10722]: auth: Debug: client in: AUTH???????
2??????? PLAIN??????? service=imap??????? secured???????
session=VgBmvMNcQoTAqHsn??????? lip=192.168.
123.236??????? rip=192.168.123.39??????? lport=993??????? rport=33858???????
resp=AHRlc3R1c2VyQHVzZXJmdWwuY29tADk5dGVzdHVzZXI5OQ== (previous base64 data may
contain sensitive data)
Oct 30 07:37:12 mail2 dovecot[10722]: auth: Debug: ldap(testuser at
userful.com,192.168.123.39,<VgBmvMNcQoTAqHsn>): bind search:
base=ou=People,dc=userful,dc=ca
filter=(&(objectClass=posixAccount)(uid=testuser))
Oct 30 07:37:12 mail2 dovecot[10722]: auth: Debug: ldap(testuser at
userful.com,192.168.123.39,<VgBmvMNcQoTAqHsn>): result: uid=testuser; uid
unused
Oct 30 07:37:12 mail2 dovecot[10722]: auth: Debug: ldap(testuser at
userful.com,192.168.123.39,<VgBmvMNcQoTAqHsn>): username changed testuser
at userful.com -> testuser
Oct 30 07:37:12 mail2 dovecot[10722]: auth: Debug:
ldap(testuser,192.168.123.39,<VgBmvMNcQoTAqHsn>): result: uid=testuser
Oct 30 07:37:12 mail2 dovecot[10722]: auth: Debug: client passdb out: OK???????
2??????? user=testuser??????????????? original_user=testuser at userful.com
Oct 30 07:37:12 mail2 dovecot[10722]: auth: Debug: master in: REQUEST???????
2784755713??????? 10725??????? 2??????? d4a357fe811a1da8bd725b82fc1da2ab???????
session_pid=11051??????? request_auth_token
Oct 30 07:37:12 mail2 dovecot[10722]: auth: Debug:
ldap(testuser,192.168.123.39,<VgBmvMNcQoTAqHsn>): user search:
base=ou=People,dc=userful,dc=ca scope=subtree
filter=(&(objectClass=posixAccount)(uid=testuser))
fields=homeDirectory,uidNumber,gidNumber
Oct 30 07:37:12 mail2 dovecot[10722]: auth: Debug:
ldap(testuser,192.168.123.39,<VgBmvMNcQoTAqHsn>): result:
homeDirectory=/nfs/home/test-user uidNumber=6000
gidNumber=1000; homeDirectory,uidNumber,gidNumber unused
Oct 30 07:37:12 mail2 dovecot[10722]: auth: Debug:
ldap(testuser,192.168.123.39,<VgBmvMNcQoTAqHsn>): result:
homeDirectory=/nfs/home/test-user uidNumber=6000
gidNumber=1000
Oct 30 07:37:12 mail2 dovecot[10722]: auth: Debug: master userdb out:
USER??????? 2784755713??????? testuser??????? home=/nfs/home/test-user???????
uid=6000??????? gid=1000???????
auth_token=29e6ac32c85cf1b69eeabbe8e4f8e4810e9a3468??????? auth_user=testuser at
userful.com
Oct 30 07:37:12 mail2 dovecot[10722]: imap-login: Login: user=<testuser>,
method=PLAIN, rip=192.168.123.39, lip=192.168.123.236, mpid=11051, TLS,
session=<VgBmvMNcQoTAqHsn>
for doveadm
Oct 30 07:39:12 mail2 dovecot[10722]: auth: Debug: master in: USER???????
1??????? testuser at userful.com??????? service=doveadm
Oct 30 07:39:12 mail2 dovecot[10722]: auth: Debug: ldap(testuser at
userful.com): user search: base=ou=People,dc=userful,dc=ca scope=subtree
filter=(&(objectClass=posixAccount)(uid=testuser))
fields=homeDirectory,uidNumber,gidNumber
Oct 30 07:39:12 mail2 dovecot[10722]: auth: Debug: ldap(testuser at
userful.com): result: homeDirectory=/nfs/home/test-user uidNumber=6000
gidNumber=1000;
homeDirectory,uidNumber,gidNumber unused
Oct 30 07:39:12 mail2 dovecot[10722]: auth: Debug: ldap(testuser at
userful.com): result: homeDirectory=/nfs/home/test-user uidNumber=6000
gidNumber=1000
Oct 30 07:39:12 mail2 dovecot[10722]: auth: Debug: userdb out: USER???????
1??????? testuser at userful.com??????? home=/nfs/home/test-user???????
uid=6000???????
gid=1000
Any ideas and any settings files that I need to post.
--
William Merkens
IT Support Analyst
Userful Corporation
+1 403.289.2177 ext.289
+1 866 USERFUL (1-866-873-7385)
Suite 300, 736 8th Ave. SW
Calgary AB T2P 1H4
Managed Desktops Done Right.
http://www.userful.com