Displaying 20 results from an estimated 200 matches similar to: "auth debug log entry incorrect"
2005 Sep 27
1
Authentication confusion - may be LDAP related
All;
I think I may have a clue about what's going wrong in my little
environment here, but I could really use a more experienced eye on it.
I've been having some strange authentication problems on a new
install. With some digging, I may have a "clue" about what's going wrong.
Some background: I'm only looking to use samba to share Unix
directories to the Windows
2019 Nov 24
2
Proxy GSSAPI + PLAIN authentication
Hi,
I try to configure a proxy accepting GSSAPI and PLAIN authentication.
When authenticating with Kerberos, Dovecot uses master user and password to
authenticate to backends (backends can be Cyrus or Exchange servers too)
When authenticating with PLAIN passwords, Dovecot sends user's login and
password to the backend.
For GSSAPI, I use extrafields :
k5principals=principal at REALM proxy=Y
2019 Nov 24
0
Proxy GSSAPI + PLAIN authentication
<!doctype html>
<html>
<head>
<meta charset="UTF-8">
</head>
<body>
<div>
If your dovecot is recent enough you can use mechanisms setting on passdb block. See https://doc.dovecot.org/configuration_manual/authentication/password_databases_passdb/
<br>
</div>
<blockquote type="cite">
<div>
2008 Jan 18
0
Mapping AD domain users to UNIX users
We're using Samba 3.0.23b (binaries downloaded from Sunfreeware) on
Solaris 9 as a member server, using "security = DOMAIN" in an Active
Directory 2003 domain. The server is primarily an application server,
running SAS software, but we have a share to Windows to enable users to
save programs and data from their Windows XP workstations. Historically
we've been using PC Netlink,
2012 Mar 05
1
[PATCH] GSSAPI authorization and virtual users
The attached patch makes it possible for Kerberos principals to be
associated with a password database entry by adding a new "k5principals"
passdb setting. A client that successfully authenticates using GSSAPI
will be able to log in as any user who has been associated with the
client's Kerberos principal. This means that users can now use their
Kerberos identities to access virtual
2008 Jan 23
8
Retry: Mapping AD domain users to UNIX users
I posted this last week but haven't heard anything. I'm not sure if this
is because nobody knows the answer (can't believe that!) or I'm missing
something obvious in the documentation and people are thinking "Read The
Fine Manual". Whatever the reason, if anyone has any insights into this
problem I'd be very grateful for their comments.
We're using Samba 3.0.23b
2015 Jan 22
1
Postfix Dovecot LDAP setup
[EDIT]: Sorry about the second mail. ignore the first one - it had try &
and error mistakes in. Problem is still the very same as explaned below.
Thanks a lot.
Hi,
since days I'm trying to substitude my SQL based Postfix/Dovecot mail
server by a LDAP based setup. Everything seems to go smooth so far -
thanks to the many how to and Dovecot wiki. Unfortunately I'm
struggeling,
2015 Jan 22
0
Postfix Dovecot LDAP setup
Hi,
since days I'm trying to substitude my SQL based Postfix/Dovecot mail
server by a LDAP based setup. Everything seems to go smooth so far -
thanks to the many how to and Dovecot wiki. Unfortunately I'm
struggeling, since I have to create individual a LDAP schema which suits
the currently used LDAP structure. The current tructure looks like this:
=> dc=MyDomain,dc=TLD
==>
2004 Dec 31
4
PLAIN-MD5 passwords?
After I found out that {CRYPT} doesn't support passwords longer than 8
characters, I decided to switch over to MD5 for user passwords in my LDAP
database. However, while I have no problem with Postfix + SASL, Dovecot fails
to authenticate.
Relevant bits from /etc/dovecot-ldap.conf:
user_attrs = mailAddress,,,,,
# The search string is identical to what's found in /etc/saslauthd.conf:
2016 Dec 29
1
dovecot-ldap.conf.ext for FreeIPA usage
Hello,
I'm figuring out how to auth users against FreeIPA and I wonder if
someone did this without GSAPI.
My users are stored in a mysql DB where I wonder what I shall use as
authname, the username or the mailaddress. As the mailaddress is
always unique it could be best but if a user has multiple
mailaddresses under seperate domains username might be better.
Any clue here and maybe an
2012 Apr 04
2
Modifying LDAP search results for user_attrs
I need to authenticate users via LDAP either by mailaddress or login name.
In both cases the mailbox location is /src/mail/%d/%n. I can easily deduct
that path from the mailaddress, but not so from the login name.
Can I get the mail address as part of fetching user_attrs and modify it on the
fly? Something along the lines of this:
user_attrs =
2015 Apr 17
1
userdb username changed
Hi!
I'm playing with a postfix + dovecot + mysql test setup, and noticed
something strange. It seems that despite the "username changed" line,
auth returns the original username:
Apr 17 09:27:34 imap21 dovecot: quota-status: Debug: Loading modules
from directory: /usr/lib64/dovecot
(...)
Apr 17 09:27:34 imap21 dovecot: auth-worker(27661): Debug:
sql(ppp at example.net): SELECT
2015 Jan 26
0
imap-login: Fatal: pipe() failed: Too many open files
What is the OS?
On 01/25/15 18:50, Leander Sch?fer wrote:
> Hi
>
> I keep on getting errors and can't connect/login to Dovecot. I did my
> research but unfortunately without success. It is for sure not ulimit
> because ulimit is set to unlimited per default already. Still , it
> complains about "Too many open files" but this is a test system and
> the
2015 Jan 26
0
imap-login: Fatal: pipe() failed: Too many open files
I just checked my ulimit again and it really seems like it hhas more
than enough - so I still don't understand what I've configured wrong here ;/
root at WM-01 [~]$ su -m dovecot -c "ulimit -a"
socket buffer size (bytes, -b) unlimited
core file size (blocks, -c) unlimited
data seg size (kbytes, -d) 33554432
file size (blocks, -f)
2009 Nov 24
2
Problem using LDAP generating Userhome
Hi there,
I'm trying to let dovecot generate the userhome directory dynamicly via
user_attr.
If "uid" is returned from LDAP before "mail" everything is fine, but if
"mail" is delivered
before "uid" the localpart of the mailaddress is used in home path.
e.g.:
Mail: testuser at domain.de
UID : test123
sometimes home is /mail/store/testuser and
2014 Feb 07
3
lda+ldap multiple users
Hi list and timo,
I use dovecot lda with ldap to do a email => user lookup.
I experienced that if a Mailaddress matches several users the delivery
is aborted.
----------------
dovecot: auth: Error: ldap(christian.test at securepoint.de): LDAP search
returned multiple entries
dovecot: auth: ldap(christian.test at securepoint.de): unknown user
dovecot: lda: Error: user christian.test at
2008 Apr 07
0
Questions about Active Directory Password Cache overlay
Thanks to Buchan Milne, I'm looking into the Active Directory Password
Cache overlay for OpenLDAP, which seems to offer more or less what I'm
trying to do. Is anyone here experienced with it? Is this the right
place to ask or is there an openLDAP overlays list?
I understand this description of ADPC:
Active Directory Password Cache
===============================
Active
2020 Jan 25
0
Lookup master userdb used with GSSAPI causes auth-worker to report "Error: BUG: PASSL had invalid passdb ID"
Hello to everybody,
I'm in the process of setting up test mail server (Ubuntu 19.10 amd64
running as VM under Hyper-V) and got stuck on configuring master user
authentication. I use GSSAPI authentication in parallel with PLAIN/LOGIN
(pam backend that authenticates against my Active Directory domain) and
this works as intended. I then tried adding simple static master passdb
that simply
2014 Aug 11
1
Frequent error: unknown namespace Trash
Hello to all of you! ;-)
My first post on this list. I frequently get this error in dovecot.log
every time a user logs in and out:
=============================
imap(mailaddress): Error: quota: Unknown namespace: Trash
=============================
When I change my conf.d/90-quota.conf from "Trash" to ".Trash" (as this is
the imap/maildir folder name, the error stays the
2013 Jan 26
2
[PATCH] Various website edits
Hi all,
One again a few patches that are too large to send directly over the
mailing list (because of the blobs, large differences etc.)
1) Removes the russian part of the website, because it is 10 years out
of date (FLAC 1.1.0)
2) Gives the website a maximum width, because at large screens it tends
to become unreadable
3) Completely overhauls the links pages: new devices that support FLAC