similar to: Dovecot LDA LDAP lookups on samba4 server ends very often in timeouts (Christian Wiese)

I hope that someone will be so kind to help me into solving this really strange thing (don't know if it is a bug or not) I have a samba4 server and want to use postfix+dovecot - dovecot version is 2.0.11 as for the postfix side everything is OK (all the LDAP lookups works without any error, tested also manually with postmap -q) the real pain is with dovecot deliver: it seems that

Hello Christian, I tried what you suggested by adding "REFERALS off" to /etc/ldap/ldap.conf and restarting slapd and dovecot, but the error persists. On Tue, Jun 4, 2013 at 7:56 AM, Christian Wiese < christian.wiese at securepoint.de> wrote: > Hi Ron, > > I didn't had the time to check all logs but the error log. > First thing you should check if there are LDAP

Hi Currently I'm using local from postfix for delivering mails. Now I want to change this to using the dovecot lda as I want to use plus addressing. I configured postfix to use dovecot as I found in the wiki and several howtos in the net. My Problem is the following: dovecot delver accepts the mail but bounces it with error: user unknown. Logging in and authentication via imap4 and pop3

Andr? Peters writes: > > I have a problem with a user who uses a wireless carrier that keeps > > changing his IP as he travels throughout the city. From the perspective > > of our dovecot IMAP server, the user keeps logging in from another IP, > > and after a short while, hits up against the mail_max_userip_connections > > limit. It takes 30 minutes before those

Hello, Now I'm trying to move the LDAP backend from the master OpenLDAP server to a slave one. The ACL rules for all directories requires a "ssf = 112" (Security Strength Factor) just to be sure that all connections are properly encrypted. Also the slave directory has a referral directive pointing the master directory. Samba works perfectly with the slave directory except when

LDAP auth backend in Dovecot 1.1.5 seemingly fails to handle certain paths of interaction with LDAP server, which is Windows AD running Windows 2003 server machine in my case. The symptoms I observe look exactly as were already reported in [1]: authentication backend "hangs" after logging the fact it has sent the search request, then after a while the IMAP/POP3 connection is teared

AIX 5.2 OpenLDAP 2.2.15 Samba 3.0.7 (no winbindd) I've got a stupid problem with referrals that I can't seem to ferret out. Each Samba DC has a localhost-based LDAP replica for scalability (my idea anyway). So the only way they will talk to the Master is if there is need for an update. Ok. If I make the updatedn the same as the rootdn of the replica, it updates the local database;

CentOS 5.2 with OpenLDAP 2.3.27, nss_ldap_253.13, using TLS, i686 and x86_64. If a user with an expired password (shadowLastChange + shadowMax < current day) logs in to a system where ldap.conf points first to a consumer-only LDAP server, the password change operation (exop) proceeds and fails with: LDAP password information update failed: Referral If I comment out "ssl

Hello list, I am struggling with setting up dovecot 2.1.7 with samba 4.1.2 on debian wheezy. Dovecot should authenticate via LDAP, but I?cannot get it to work reliably. Sometimes auth works, sometimes not. Referals are already activated in ldap.conf ? LDAP-authentication works fine with other clients (Apache Directory Studio, ?)? Has somebody got a similar setup running? I would love some hints

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 > Message: 14 > Date: Mon, 07 Jul 2003 17:30:23 +0100 > From: Duncan Brannen <dbb@st-andrews.ac.uk> > Subject: [Samba] ldap pdc and rejoining domains > To: samba@lists.samba.org > Message-ID: <5.2.0.9.0.20030707171818.02689880@vulture> > Content-Type: text/plain; charset="us-ascii"; format=flowed > >

Hello one & all, I understand it is possible to do multiple lookups for userdb info of different types, for instance a local "real" account & virtual MySql lookups. Is it possible to do two separate ldap lookups to differnt parts of the same AD domain? I have a config file to do my authentication lookup against the domain. Then I have a 2nd config file for the userdb lookups

Wed, 15 Jul 2020 15:23:41 +0100 Rowland penny via samba <samba at lists.samba.org>: > On 15/07/2020 14:56, RhineDevil wrote: > > Wed, 15 Jul 2020 13:56:48 +0100 Rowland penny via samba <samba at lists.samba.org>: > >> On 15/07/2020 13:36, RhineDevil via samba wrote: > >>> How could I avoid being asked a password when interacting with

So I am feeling rather frustrated with sssd today: 1. I see that when you install sssd (this is centos 6), sssd.conf is not created. https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Deployment_Guide/about-sssd.conf.html implies that if I want to use sssd I need to create the sssd.conf file first. Any reason why? 2. I also noticed if sssd.conf is not there, authconfig

Hi All, We've been thinking a lot about the 2 different ways dovecot implements shares; namespaces and symlinks. We currently use the symlink version for our clients and they use the create_dovecot_shares.pl tool we did at: http://dovecot.org/tools/ Our idea is either in the namespace declaration or if a folder has a dovecot-shared file/symlink, have a ldap lookup defined in say,

Mandi! Rowland Penny via samba In chel di` si favelave... > You need to explicitly ask for it, for instance: Oh, cool! Seems effectivaly different: root at vdcsv1:~# ldbsearch -H /var/lib/samba/private/sam.ldb -b "DC=ad,DC=fvg,DC=lnf,DC=it" "(cn=prova123)" nTSecurityDescriptor # record 1 dn: CN=prova123,CN=Aliases,OU=FVG,DC=ad,DC=fvg,DC=lnf,DC=it nTSecurityDescriptor:

Hello everybody I'm struggling against what seems a really serious trouble: sometimes mail get lost I did all the possible checks, but they seems really lost - I know is absurd, but it seems so it has been noticed by two users on my server: intially I tought that was their mistake (mail deleted, mail into spam, ecc), but it wasn't I deeply checked mail logs, and it seems that

Wed, 15 Jul 2020 16:07:06 +0100 Rowland penny via samba <samba at lists.samba.org>: > On 15/07/2020 15:44, RhineDevil wrote: > > Wed, 15 Jul 2020 15:23:41 +0100 Rowland penny via samba <samba at lists.samba.org>: > >> On 15/07/2020 14:56, RhineDevil wrote: > >>> Wed, 15 Jul 2020 13:56:48 +0100 Rowland penny via samba <samba at lists.samba.org>: >

Hi, i have followed the idealx tutorial to the letter, however i get this error when i try to start slapd: ambepdc# /usr/local/etc/rc.d/slapd start Starting slapd. /usr/local/etc/openldap/slapd.conf: line 74: index type "uidNumber" undefined this is my slapd.conf ambepdc# cat /usr/local/etc/openldap/slapd.conf # # See slapd.conf(5) for details on configuration options. # This file

Hi list! I'm always trying to configure Dovecot to ask our LDAP-Server (AD) in order to authenticate the users. I really don'know what can I do wrong... I configured my Dovecot so: hosts = chimaera.company.local dn = CN=mailproxy,CN=Users,DC=company,DC=local dnpass = SECRET sasl_bind = no tls = no debug_level = -1 auth_bind = yes ldap_version = 3 base = dc=company,dc=local deref =

Hello I'm currently trying to use Active Directory with Unix extensions to store UID, GID and homedir and retrieve them with ldap I don't want to allow anonymous bindings and I would rather not use TLS and manage a PKI. So I'm trying to use SASL to do a Kerberos authentication for Dovecot against AD LDAP. I'm currently getting GSSAPI errors about the lack of "credentials