search for: othermailbox

Good Afternoon, I have my virtual users stored in an Active Directory database. As far as mail info goes the 2 important fields are: mail (their primary email address) and otherMailbox (a multivalue attribute containing their mail aliases). Right now all email addresses belong in the same domain and there are no immediate plans to change this. If I use Postfix to do the lookups and delivery only using Dovecot for passdb Pam driver and a static userdb then everything delivers fin...

...t; >> single value attribute) and mailAternativeAddress is not found in > >> the schemata. > >> > >> Best regards > >> Willi > >> > > > > Isn't 'mailAlternativeAddress' an LDAP attribute ? > > I think you use the 'otherMailbox' attribute on AD. > > Perfect, that's it! Will there possibly be a multi valued option for > samba-tool for otherMailbox(es)? Can you point me to some > documentation how to script account changes after an account has been > created? > There is always the possibility o...

...h samba-tool's mail-address (mail is a >> single value attribute) and mailAternativeAddress is not found in the >> schemata. >> >> Best regards >> Willi >> > > Isn't 'mailAlternativeAddress' an LDAP attribute ? > I think you use the 'otherMailbox' attribute on AD. Perfect, that's it! Will there possibly be a multi valued option for samba-tool for otherMailbox(es)? Can you point me to some documentation how to script account changes after an account has been created? Thank you very much. > > Rowland >

Hello Postfix + LDAP , Samba as LDAP server, Dovecot virtual_transport set in postfix to dovecot-lmtp ( for autoresponder support ) Users have their email aliases in the otherMailbox record For example, account_test at example-domain user has an alias: test at exmaple-domain Query from command line works fine: postmap -q test at example-domain ldap://etc/postfix/ad_virtual_ account_test/Maildir/ (The filter in the query ad_virtual_mailbox_maps2.cf looks like this: [cut]...

I have a large installation >20k users. We're using samba4 for AD Authentication, and also email address validation. I'm trying to edit the @INDEXLIST in sam.ldb to add an index on otherMailbox to speed up searches (0.05 sec for indexed, vs 2.5 sec for non-indexed searches) I'm finding that when I use ldbedit to do this, it appears to add the additional @IDXATTR. However, when I go back and check via ldbsearch, the attribute is not there. Seems to be failing silently... How do I de...

...? I > can only set one address with samba-tool's mail-address (mail is a > single value attribute) and mailAternativeAddress is not found in the > schemata. > > Best regards > Willi > Isn't 'mailAlternativeAddress' an LDAP attribute ? I think you use the 'otherMailbox' attribute on AD. Rowland

...problem in configuration Mail Server for my company. Gentoo/Linux, postfix-2.7.3, dovecot-2.0.11, AD-Windows2008R2 *main.cf:* virtual_mailbox_maps = ldap:/etc/postfix/ldap-users.cf, ldap:/etc/postfix/ldap-users_oblr.cf I create a two ldap files for search Multiple mailboxes in attribute AD (mail, othermailbox). *ldap-users.cf:* server_host = srv-ad.cn.energy search_base = dc=cn,dc=energy version = 3 bind = yes bind_dn = admin bind_pw = passwd chase_referrals = no scope = sub query_filter = (&(objectclass=person)(|(mail=%s))(!(userAccountControl=514))) result_attribute = mail result_format = %s/ *ld...

Are use using zarafaAccount=1 withing the search filters? I use this things like this : (&(objectClass=person)(zarafaAccount=1)(|(mail=%s)(otherMailbox=%s))) Or for groups. (&(objectclass=group)(zarafaAccount=1)(|(mail=%s)(otherMailbox=%s))) That helps a lot. ! If you switch to kopano beware to change the SCHEMA and filters zarafaAccount changed to kopanoAccount Greetz. Louis > -----Oorspronkelijk bericht----- > Van: samba [mai...

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Mon, 19 Mar 2018, Andr? Rodier wrote: > I had to use base64 encoding to store email addresses, because they are > rejected otherwise, with an error message of illegal characters. I also you are using the stock "mail" attribute in LDAP as: olcAttributeTypes: ( 0.9.2342.19200300.100.1.3 NAME ( 'mail'

...AA90CDBS4aBHdBaFI0TwbiGP5oIyjGCvI1aHJSTy5lNKfwUkvTdI+L > tH4Z0JDkB3YBnRVIL6ST5W7p0VvBAQo+ia+UXpsZ4b1t3/xYCKtNV0ls9jIoqVzg > dEFeyUoKQe8k5N8k6/vVVElzwtW6fxzQUJQXj01u03udqVMmTqXhrw== > =8rp9 > -----END PGP SIGNATURE----- Hello Steffen, Thank you for your answer. In fact, I am using the otherMailBox attribute, from the standard OpenLDAP distribution, which is also IA5String. - Is there any way in Dovecot to encode the fields in base 64, to send queries? as the query is "eq", this would be enough, I think. - Or is the LDAP server is supposed to store attributes as UTF8, and in thi...

...figured it out, there certainly is something different! The AuthDatabase/LDAP documentation on the Dovecot Wiki says "When connecting to AD, use port 3268". Port 3268 is used for Global Catalog searching. By default the Active Directory Global Catalog wouldn't include attributes like otherMailbox, but would include mail and sn. The solution here would be to either use port 389 and search the domain like ldapsearch or to add the otherMailbox attribute (or any others I want to search on) to the global catalog. It might be worth updating the wiki to mention the reasoning behind using port 326...

...h s4 AD with more details from a (s3) ldap server. I am no programmer AT ALL, so I guess this is very dirty and un-elegant, but it does the trick. We had multiple "mail" attributes in openldap, and since AD only allows 1 mail attribute, additional mail addresses are migrated to "otherMailbox" AD attributes. Perhaps someone else finds it useful as well. It should be easy to adjust for your own needs. It requires apache2, php5 and php5-ldap. Here it is: <?php ini_set('display_errors', 'Off'); error_reporting(E_ALL); $samba3_server = "s3_server_ip&quot...

...bute can appear multiple times, with AD it is single valued. If > you have users with more than one email address, how is the upgrade to > know which is the main one, if in fact you refer to one as the main > one ? There is another attribute you can use to store email address > 'otherMailbox' , but you may be better off investigating mail servers > like zarafa that can authenticate via AD. > > Rowland >

...a at lists.samba.org Envoyé: Jeudi 23 Mars 2017 11:54:50 Objet: Re: [Samba] [Samba 4.5] Very slow LDAP Queries (almost unusable), performance tunning ? Are use using zarafaAccount=1 withing the search filters? I use this things like this : (&(objectClass=person)(zarafaAccount=1)(|(mail=%s)(otherMailbox=%s))) Or for groups. (&(objectclass=group)(zarafaAccount=1)(|(mail=%s)(otherMailbox=%s))) That helps a lot. ! If you switch to kopano beware to change the SCHEMA and filters zarafaAccount changed to kopanoAccount Greetz. Louis > -----Oorspronkelijk bericht----- > Van: samba [mai...

Ho Mourik Thanks for your reply, any other attribute which we can duplicate? Br. Umar On Fri, Jan 23, 2015 at 1:47 PM, mourik jan heupink - merit < heupink at merit.unu.edu> wrote: > Hi, > > In AD, the attribute mail can only exist once. > > MJ > > On 01/23/2015 05:27 AM, Umar Draz wrote: > >> Hi All >> >> I am tying to create a user in SAMBA 4

...2017 11:54:50  > Objet: Re: [Samba] [Samba 4.5] Very slow LDAP Queries (almost > unusable), performance tunning ?  > > > Are use using zarafaAccount=1 withing the search filters?  > I use this things like this :  > > (&(objectClass=person)(zarafaAccount=1)(|(mail=%s)(otherMailbox=%s))) >   > Or for groups.  > (&(objectclass=group)(zarafaAccount=1)(|(mail=%s)(otherMailbox=%s)))  > > That helps a lot.  > > ! If you switch to kopano beware to change the SCHEMA and filters  > zarafaAccount changed to kopanoAccount  > > > Greetz.  > &...

...a at lists.samba.org Envoyé: Jeudi 23 Mars 2017 11:54:50 Objet: Re: [Samba] [Samba 4.5] Very slow LDAP Queries (almost unusable), performance tunning ? Are use using zarafaAccount=1 withing the search filters? I use this things like this : (&(objectClass=person)(zarafaAccount=1)(|(mail=%s)(otherMailbox=%s))) Or for groups. (&(objectclass=group)(zarafaAccount=1)(|(mail=%s)(otherMailbox=%s))) That helps a lot. ! If you switch to kopano beware to change the SCHEMA and filters zarafaAccount changed to kopanoAccount Greetz. Louis > -----Oorspronkelijk bericht----- > Van: samba [mai...

I've been running through a bunch of tests after migrating from Samba 3 to Samba 4 and only just noticed that the user email addresses didn't come across from openldap. Is this a know issue or is this an isolated case? regards, John

...an I add another email domain option in AD? > > Example in http://i.imgur.com/cLU2UyYl.png Ah, that isn't actually an email address, it is the userPrincipalName. There is the 'mail' attribute in AD to store a users email address, but this is single valued. There is also the 'otherMailbox' attribute and this can used multiple times. Rowland

...2 auth_bind = yes dn = myldapuser at mydomain dnpass = mypass #ldap_version = 3 base = DC=base,DC=com deref = never scope = subtree user_attrs = sAMAccountName=mail=maildir:/home/vmail/%$/.EMAIL, =uidNumer=5000, =gidNumber=5000 user_filter = (&(objectClass=user)(|(sAMAccountName=%u)(mail=%u)(othermailbox=%u))) pass_attrs = sAMAaccountName=user,userPassword=password pass_filter = (&(objectClass=person)(sAMAaccountName=%u)) My errors are: - While logging in with IMAP 2010-11-10 00:32:30 imap-login: Error: Timeout waiting for handshake from auth server. my pid=16293, input bytes=0 - manual ex...