search for: roomnumb

Hello, using dovecot 2.1 and per user mail quota via ldap is there a way to have a default quota which gets used, if the "quota" field in ldap is not set? I tried with: plugin { quota = maildir:User quota quota_rule = *:storage=3G } userdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } and in dovecot-ldap.conf: user_attrs = dcMailQuota=quota_rule=*:storage=%$ but

Hi all, In our openldap days, we allowed users to modify some of their own ldap records. They logged on with their own username/password, and were allowed to change stuff like 'roomNumber', jpegPhone', 'mobile', etc, etc. It seems that samba4 AD handles permissions a bit stricter, and our users are no longer allowed to edit those details. I have searched around a bit, and found this: http://www.schakko.de/2011/03/30/how-to-give-users-the-permission-to-change-the...

...contains entries like this: dn: cn=rb,dc=intra,dc=ourdom,dc=de objectClass: top objectClass: person objectClass: organizationalPerson objectClass: jabberuser jid: rb@intra.ourdom.de o: ourcompany cn: rb sn: Bergs givenName: Ralf telephoneNumber: +49xxxxxxx mobile: +49xxxxxxxx userPassword: secret roomNumber: 4711 The "userPassword" key contains the password that is to be checked, the "cn" key the username for the respective user. Can this be accomplished? Is there anyone who would like to share some config snippets with me? I did some search on Google and found something perta...

...arco,dc=de userPassword: {crypt}RVp32Kd9mkUek sambaLogonTime: 0 sambaLogoffTime: 0 sambaPwdLastSet: 0 sambaProfilePath: \\homedirs\ds\.ntprofile sambaPwdCanChange: 0 sambaSID: S-1-5-21-2539381339-996027264-670411106-2015 sambaHomePath: \\homedirs\ds uid: ds cn: Daniel Spannbauer telephoneNumber: 27 roomNumber: bab givenName: Daniel sn: Spannbauer mail: ds at marco.de objectClass: person objectClass: organizationalPerson objectClass: inetOrgPerson objectClass: sambaSamAccount objectClass: shadowAccount objectClass: posixAccount objectClass: top businessCategory: Software Entwicklung street: Rechbergstr...

...alhost tls = no base = ou=people, dc=noa, dc=gr scope = onelevel ldap_version = 3 dn = uid=auth,ou=Sys,dc=noa,dc=gr dnpass = secret auth_bind = yes user_filter = (uid=%u) pass_filter = (uid=%u) pass_attrs = uid=user,userPassword=password auth_bind_userdn = uid=%u,ou=people,dc=noa,dc=gr user_attrs = roomNumber=quota_rule=*:bytes=%$,uid=home=/home/vmail/%u iterate_filter = (objectClass=*) ---------------------------------------------------------------------------------------- Thanks in advance, Nick

...10.100.150): ldap_search((uid=tester)) failed: No such object It seems as if ldapsearch for username/password won't work with my new settings, but I can't find why. I run Dovecot v1.2.11 on CentOS 5.5. I changed my working dovecot.conf (see later) with the following changes (I used the roomNumber attribute to store the quota value): 1. Added in main part: mail_uid = 500 mail_gid = 500 2. Changed userdb with: userdb ldap { args = /etc/dovecot-usrdb-ldap.conf } and /etc/dovecot-usrdb-ldap.conf is: hosts = localhost tls = no base = ou=people, dc=exam...

...t; scope = onelevel > ldap_version = 3 > dn = uid=auth,ou=Sys,dc=noa,dc=gr > dnpass = secret > auth_bind = yes > user_filter = (uid=%u) > pass_filter = (uid=%u) > pass_attrs = uid=user,userPassword=password > auth_bind_userdn = uid=%u,ou=people,dc=noa,dc=gr > user_attrs = roomNumber=quota_rule=*:bytes=%$,uid=home=/home/vmail/%u > iterate_filter = (objectClass=*) You are searching for the complete username (%u = user at domain) but it sounds like you only want the localpart (%n). See: https://wiki.dovecot.org/Variables -- Alex JOST

...Admins" writable = yes browseable = yes [profiles] path = /home/samba/profiles writable = yes browseable = yes create mode = 0664 directory mask = 0775 guest ok = yes ********Administrador (samba admin user) ************** n: uid=administrador, ou=cri, ou=Pessoas, dc=ipb,dc=pt roomNumber: 0 objectClass: person objectClass: organizationalPerson objectClass: inetOrgPerson objectClass: account objectClass: posixAccount objectClass: top objectClass: kerberosSecurityObject objectClass: shadowAccount objectClass: qmailUser objectClass: sambaAccount acctFlags: [UX ] userPassword...

...people, dc=example, dc=com scope = onelevel ldap_version = 3 dn = uid=authenticate,ou=System,dc=example,dc=com dnpass = secret auth_bind = yes user_filter = (uid=%u) pass_filter = (uid=%u) pass_attrs = uid=user,userPassword=password auth_bind_userdn = uid=%u,ou=people,dc=example,dc=com user_attrs = roomNumber=quota_rule=*:bytes=%$,uid=home=/home/vmail/%u iterate_filter = (objectClass=*) =============================================================

...by anonymous auth by * none access to attrs=objectClass,entry,homeDirectory,uid,uidNumber,gidNumber,memberUid by dn="cn=samba,ou=DSA,dc=bel-gmbh,dc=lan" write by dn="cn=smbldap-tools,ou=DSA,dc=bel-gmbh,dc=lan" write by * read access to attrs=description,telephoneNumber,roomNumber,homePhone,loginShell,gecos,cn,sn,givenname by dn="cn=samba,ou=DSA,dc=bel-gmbh,dc=lan" write by dn="cn=smbldap-tools,ou=DSA,dc=bel-gmbh,dc=lan" write by self write by * read access to attrs=cn,sambaLMPassword,sambaNTPassword,sambaPwdLastSet,sambaLogonTime,sambaLogoffTime,...

Hello, remove the line 'passwd program = /usr/sbin/smbldap-passwd %u' for testing. On my Suse 10.1 I do not need this and m y users can change their passwords. greetings daniel -------- Original-Nachricht -------- Datum: Fri, 2 Mar 2007 11:55:06 -0600 (CST) Von: "Andy Colvin" <acolvin@enkitec.com> An: samba@lists.samba.org CC: Betreff: [Samba] Changing LDAP

...se <uid=testuser,ou=People,dc=gomer,dc=mdah,dc=state,dc=ms,dc=us> with scope subtree # filter: (objectclass=*) # requesting: ALL # # testuser, People, gomer.mdah.state.ms.us dn: uid=testuser,ou=People,dc=gomer,dc=mdah,dc=state,dc=ms,dc=us uid: testuser cn: test user telephoneNumber: 5766888 roomNumber: IS homePhone: 3738042 givenName: test sn: user mail: testuser@dc=mdah,dc=state,dc=ms,dc=us objectClass: person objectClass: organizationalPerson objectClass: inetOrgPerson objectClass: posixAccount objectClass: top objectClass: shadowAccount objectClass: sambaSamAccount loginShell: /bin/bash uid...

...ambaPwdM ustChange by dn="cn=admin,dc=internal,dc=yourdomain,dc=tld" write by anonymous auth by self write by * none access to attrs=loginShell by dn="cn=admin,dc=internal,dc=yourdomain,dc=tld" write by * none access to attrs=description,telephoneNumber,roomNumber,homePhone,gecos,cn,sn,givenname by dn="cn=admin,dc=internal,dc=yourdomain,dc=tld" write by self write by * read See appendix 1 if you want a more secure ldap database. !! this setup does not help you to setting this up. !! run slapindex and start the slapd server /etc/ini...

...se <uid=testuser,ou=People,dc=gomer,dc=mdah,dc=state,dc=ms,dc=us> with scope subtree # filter: (objectclass=*) # requesting: ALL # # testuser, People, gomer.mdah.state.ms.us dn: uid=testuser,ou=People,dc=gomer,dc=mdah,dc=state,dc=ms,dc=us uid: testuser cn: test user telephoneNumber: 5766888 roomNumber: IS homePhone: 3738042 givenName: test sn: user mail: testuser@dc=mdah,dc=state,dc=ms,dc=us objectClass: person objectClass: organizationalPerson objectClass: inetOrgPerson objectClass: posixAccount objectClass: top objectClass: shadowAccount objectClass: sambaSamAccount shadowWarning: 7 loginShe...

...homeDirectory,uid,uidNumber,gidNumber,memberUid by dn="cn=nns,ou=Groups,dc=msdpl,dc=com" write by dn="cn=Domain Admins,ou=Groups,dc=msdpl,dc=com" write by * read # somme attributes can be writable by users themselves access to attrs=description,telephoneNumber,roomNumber,homePhone,loginShell,gecos,cn,sn,givenname by dn="cn=nns,ou=Groups,dc=msdpl,dc=com" write by dn="cn=Domain Admins,ou=Groups,dc=msdpl,dc=com" write by * read # some attributes need to be writable for samba access to dn.base="dc=msdpl,dc=com" by dn=&q...

...irectory,uid,uidNumber,gidNumber,memberUid by dn="cn=nns,ou=Groups,dc=msdpl,dc=com" write by dn="cn=Domain Admins,ou=Groups,dc=msdpl,dc=com" write by * read # somme attributes can be writable by users themselves access to attrs=description,telephoneNumber,roomNumber,homePhone,loginShell,gecos,cn,sn,givenname by dn="cn=nns,ou=Groups,dc=msdpl,dc=com" write by dn="cn=Domain Admins,ou=Groups,dc=msdpl,dc=com" write by * read # some attributes need to be writable for samba access to dn.base="dc=msdpl,dc=com" by...

...ctory,uid,uidNumber,gidNumber,memberUid by dn="cn=nns,ou=Groups,dc=msdpl,dc=com" write by dn="cn=Domain Admins,ou=Groups,dc=msdpl,dc=com" write by * read # somme attributes can be writable by users themselves access to attrs=description,telephoneNumber,roomNumber,homePhone,loginShell,gecos,cn,sn,givenname by dn="cn=nns,ou=Groups,dc=msdpl,dc=com" write by dn="cn=Domain Admins,ou=Groups,dc=msdpl,dc=com" write by * read # some attributes need to be writable for samba access to dn.base="dc=msdpl,dc=com"...

...testme uidNumber: 12345 loginShell: /opt/csw/bin/bash objectClass: inetLocalMailRecipient objectClass: inetOrgPerson objectClass: organizationalPerson objectClass: person objectClass: posixAccount objectClass: shadowAccount objectClass: top objectClass: hostObject userPassword: {CRYPT}YN5cP0Ms6G.C2 roomNumber: tesetme at cmp.ch mail: testme at cmp.com mailRoutingAddress: testme at rieter.ch mailHost: mail1.cmp.com shadowLastChange: 13503 gecos: Test Me User,testme at cmp.ch host: winds06 host: winds06.win.ch.da.rtr host: winnb000488.win.ch.da.rtr host: winnb000488 givenName: Test (I don't care th...

...try,homeDirectory,uid,uidNumber,gidNumber,memberUid by dn="cn=samba,ou=DSA,dc=mtgmilw,dc=biz" write by dn="cn=smbldap-tools,ou=DSA,dc=mtgmilw,dc=biz" write by * read # somme attributes can be writable by users themselves access to attrs=description,telephoneNumber,roomNumber,homePhone,loginShell,gecos,cn,sn,givenname by dn="cn=samba,ou=DSA,dc=mtgmilw,dc=biz" write by dn="cn=smbldap-tools,ou=DSA,dc=mtgmilw,dc=biz" write by self write by * read # some attributes need to be writable for samba access to attrs=cn,sambaLMPassword,sam...