samba - Mar 2017 - LDAP logins failing after installing Samba 4.4.5

Hi all,

 
I had an LDAP application (mailserver) running on Samba 4.1.3 which wrked
flawlessly. Also using an LDAP browser with a simple bind worked OK.

I than replaced the Samba installation with version 4.5 and the LDAP
functionality broke. I first thought it had to do with a non-SSL or non -TLS and
though I now get an error message when doing a simple bind without encryption,
activating encryption does not work either.

 
Is there a way to configure how Samba expects LDAP binds to happen?

 
Cheers!

 
Met Vriendelijke Groet,
Kind Regards,
Salutations,
 
 
Bart Coninckx
Bits 'n Tricks BVBA
 
Hoge Mierdse Heide 182
2360 Oud-Turnhout
tel. +32 14 480 820

gsm +32 478 88 33 08
info at bitsandtricks.com
http://www.bitsandtricks.com
BTW: BE0817.401.875

Crelan BE46 8601 0806 3436

Voor onze Algemene Voorwaarden, zie:
http://www.bitsandtricks.com/index.php/contact/algemene-voorwaarden

 

On Tue, 7 Mar 2017 01:50:31 +0100
Bart Coninckx via samba <samba at lists.samba.org> wrote:
> Hi all,
> 
>  
> I had an LDAP application (mailserver) running on Samba 4.1.3 which
> wrked flawlessly. Also using an LDAP browser with a simple bind
> worked OK.
> 
> I than replaced the Samba installation with version 4.5 and the LDAP
> functionality broke. I first thought it had to do with a non-SSL or
> non -TLS and though I now get an error message when doing a simple
> bind without encryption, activating encryption does not work either.
> 
>  
> Is there a way to configure how Samba expects LDAP binds to happen?
AD does not allow simple binds, It might help if you told us just what
mailserver you are using.

Rowland

>> Hi all,
>> 
>>  
>> I had an LDAP application (mailserver) running on Samba 4.1.3 which
>> wrked flawlessly. Also using an LDAP browser with a simple bind
>> worked OK.
>> 
>> I than replaced the Samba installation with version 4.5 and the LDAP
>> functionality broke. I first thought it had to do with a non-SSL or
>> non -TLS and though I now get an error message when doing a simple
>> bind without encryption, activating encryption does not work either.
>> 
>>  
>> Is there a way to configure how Samba expects LDAP binds to happen?
>AD does not allow simple binds, It might help if you told us just what
>mailserver you are using.
>
>Rowland
 
It's Kopano, formerly known was Zarafa. With version 4.1.13 it seems that
simple binds were still possible, but that actually might have been an error
while developers aim to emulate a real AD server. In the meantime I managed to
bind with a LDAP browser over TLS or SSL, but the mailserver still fails in
connecting to AD. 

 
BC
 

Hai Bart, 

This is a bit off samba topic but.. 

Which kopano version.? 
Did you install the kopano schema file ( added it into the AD ?) 
The kopano schema is not the same as the zarafa schema.
Mainly the "zarafaAccount changed to kopanoAccount so you need to adjust
some filters if you applied them. Things like that.

And which "mailserver" are you talking about. 
The "MTA" aka postfix/exim? Or the mail server itself?  ( aka Kopano )


Greetz, 

Louis

> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens Bart Coninckx
via
> samba
> Verzonden: dinsdag 7 maart 2017 13:22
> Aan: samba at lists.samba.org; rpenny at samba.org
> Onderwerp: Re: [Samba] LDAP logins failing after installing Samba 4.4.5
> 
> >> Hi all,
> >>
> >>
> >> I had an LDAP application (mailserver) running on Samba 4.1.3
which
> >> wrked flawlessly. Also using an LDAP browser with a simple bind
> >> worked OK.
> >>
> >> I than replaced the Samba installation with version 4.5 and the
LDAP
> >> functionality broke. I first thought it had to do with a non-SSL
or
> >> non -TLS and though I now get an error message when doing a simple
> >> bind without encryption, activating encryption does not work
either.
> >>
> >>
> >> Is there a way to configure how Samba expects LDAP binds to
happen?
> 
> >AD does not allow simple binds, It might help if you told us just what
> >mailserver you are using.
> >
> >Rowland
> 
> 
> It's Kopano, formerly known was Zarafa. With version 4.1.13 it seems
that
> simple binds were still possible, but that actually might have been an
> error while developers aim to emulate a real AD server. In the meantime I
> managed to bind with a LDAP browser over TLS or SSL, but the mailserver
> still fails in connecting to AD.
> 
> 
> BC
> 
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba

On Tue, 2017-03-07 at 09:05 +0000, Rowland Penny via samba
wrote:
> On Tue, 7 Mar 2017 01:50:31 +0100
> Bart Coninckx via samba <samba at lists.samba.org> wrote:
> 
> > Hi all,
> > 
> >  
> > I had an LDAP application (mailserver) running on Samba 4.1.3 which
> > wrked flawlessly. Also using an LDAP browser with a simple bind
> > worked OK.
> > 
> > I than replaced the Samba installation with version 4.5 and the
> > LDAP
> > functionality broke. I first thought it had to do with a non-SSL or
> > non -TLS and though I now get an error message when doing a simple
> > bind without encryption, activating encryption does not work
> > either.
> > 
> >  
> > Is there a way to configure how Samba expects LDAP binds to happen?
> 
> AD does not allow simple binds, It might help if you told us just
> what
> mailserver you are using.
To be clear, AD does allow simple binds.  We restrict them in Samba per
the "ldap server require strong auth" parameter. 

Thanks,

Andrew Bartlett