dovecot - Sep 2019 - New to dovecot admin, question about using LDAP for user-specific values

> Le 13 sept. 2019 ? 09:29, Gerben Wierda via dovecot <dovecot at
dovecot.org> a ?crit :
> 
> Nobody?
> 
>> On 10 Sep 2019, at 11:58, Gerben Wierda via dovecot <dovecot at
dovecot.org <mailto:dovecot at dovecot.org>> wrote:
>> 
>> I am new to dovecot administration. I?ve read the Wiki but that hasn?t
given me the understanding I need.
>> 
>> When I query my LDAP (on macOS) on a value for user ?gerben?, I can get
that:
>> 
>> dumbledore:~ gerben$ dscl /LDAPv3/127.0.0.1 -read /users/gerben
GeneratedUID
>> GeneratedUID: 780D870E-6B00-478E-AB70-3D3307215A82
>> 
>> I would like to use that value in dovecot settings, e.g. something like
>> 
>> user_attrs = \
>>   =mail=maildir://Library/Server/Mail/Data/mail/%{ldap:GeneratedUID}
<maildir://Library/Server/Mail/Data/mail/%%7Bldap:GeneratedUID%7D>
>> 
>> Is this possible and if so what do I exactly need to do to get this
working?
As the answer is in the question, it is hard to give you any hint about what
should be done.

What is wrong with 

user_attrs = \
  =mail=maildir://Library/Server/Mail/Data/mail/%{ldap:GeneratedUID}
<maildir://Library/Server/Mail/Data/mail/%25%7Bldap:GeneratedUID%7D>

Did you try it ? Have you got any issue with it ?


-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<https://dovecot.org/pipermail/dovecot/attachments/20190913/81788fe2/attachment.html>

> On 13 Sep 2019, at 11:51, Jean-Daniel Dupas <jddupas at xooloo.com>
wrote:
> 
> 
> 
>> Le 13 sept. 2019 ? 09:29, Gerben Wierda via dovecot <dovecot at
dovecot.org <mailto:dovecot at dovecot.org>> a ?crit :
>> 
>> Nobody?
>> 
>>> On 10 Sep 2019, at 11:58, Gerben Wierda via dovecot <dovecot at
dovecot.org <mailto:dovecot at dovecot.org>> wrote:
>>> 
>>> I am new to dovecot administration. I?ve read the Wiki but that
hasn?t given me the understanding I need.
>>> 
>>> When I query my LDAP (on macOS) on a value for user ?gerben?, I can
get that:
>>> 
>>> dumbledore:~ gerben$ dscl /LDAPv3/127.0.0.1 -read /users/gerben
GeneratedUID
>>> GeneratedUID: 780D870E-6B00-478E-AB70-3D3307215A82
>>> 
>>> I would like to use that value in dovecot settings, e.g. something
like
>>> 
>>> user_attrs = \
>>>  
=mail=maildir://Library/Server/Mail/Data/mail/%{ldap:GeneratedUID}
<maildir://Library/Server/Mail/Data/mail/%%7Bldap:GeneratedUID%7D>
>>> 
>>> Is this possible and if so what do I exactly need to do to get this
working?
> 
> As the answer is in the question, it is hard to give you any hint about
what should be done.
> 
> What is wrong with 
> 
> user_attrs = \
>   =mail=maildir://Library/Server/Mail/Data/mail/%{ldap:GeneratedUID}
<maildir://Library/Server/Mail/Data/mail/%25%7Bldap:GeneratedUID%7D>
> 
> Did you try it ? Have you got any issue with it ?
I haven?t tried anything yet as I am trying to learn before I do anything (and
trial and error is a very slow method), but it seems to me that just that line
cannot be enough. Because how does ?ldap:? know to go looking in the LDAP
structure at "/Users/<username>/? in the LDAP ?/LDAPv3/127.0.0.1??
Somehow I shall have to tell dovecot that.

But if trial and error is the only way, I?ll have to try.

G
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<https://dovecot.org/pipermail/dovecot/attachments/20190913/c47517be/attachment.html>

> Le 13 sept. 2019 ? 12:53, Gerben Wierda via dovecot <dovecot at
dovecot.org> a ?crit :
> 
> 
>> On 13 Sep 2019, at 11:51, Jean-Daniel Dupas <jddupas at xooloo.com
<mailto:jddupas at xooloo.com>> wrote:
>> 
>> 
>> 
>>> Le 13 sept. 2019 ? 09:29, Gerben Wierda via dovecot <dovecot at
dovecot.org <mailto:dovecot at dovecot.org>> a ?crit :
>>> 
>>> Nobody?
>>> 
>>>> On 10 Sep 2019, at 11:58, Gerben Wierda via dovecot <dovecot
at dovecot.org <mailto:dovecot at dovecot.org>> wrote:
>>>> 
>>>> I am new to dovecot administration. I?ve read the Wiki but that
hasn?t given me the understanding I need.
>>>> 
>>>> When I query my LDAP (on macOS) on a value for user ?gerben?, I
can get that:
>>>> 
>>>> dumbledore:~ gerben$ dscl /LDAPv3/127.0.0.1 -read /users/gerben
GeneratedUID
>>>> GeneratedUID: 780D870E-6B00-478E-AB70-3D3307215A82
>>>> 
>>>> I would like to use that value in dovecot settings, e.g.
something like
>>>> 
>>>> user_attrs = \
>>>>  
=mail=maildir://Library/Server/Mail/Data/mail/%{ldap:GeneratedUID}
<maildir://Library/Server/Mail/Data/mail/%%7Bldap:GeneratedUID%7D>
>>>> 
>>>> Is this possible and if so what do I exactly need to do to get
this working?
>> 
>> As the answer is in the question, it is hard to give you any hint about
what should be done.
>> 
>> What is wrong with 
>> 
>> user_attrs = \
>>   =mail=maildir://Library/Server/Mail/Data/mail/%{ldap:GeneratedUID}
<maildir://Library/Server/Mail/Data/mail/%25%7Bldap:GeneratedUID%7D>
>> 
>> Did you try it ? Have you got any issue with it ?
> 
> I haven?t tried anything yet as I am trying to learn before I do anything
(and trial and error is a very slow method), but it seems to me that just that
line cannot be enough. Because how does ?ldap:? know to go looking in the LDAP
structure at "/Users/<username>/? in the LDAP ?/LDAPv3/127.0.0.1??
Somehow I shall have to tell dovecot that.
OK, so your question is more about how to configure LDAP in dovecot for basic
usage.

If you want to query the LDAP, you first have to learn what its structure is,
and then you should tell dovecot where to look at using the 'base' and
'scope' parameter and what to look at using the 'user_filter'
parameter.

I never tried to access OpenDirectory using LDAP queries, so you will have to
search online about how it should be done.

-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<https://dovecot.org/pipermail/dovecot/attachments/20190913/33ac17cb/attachment.html>