[Dovecot] Multiple LDAP authentication servers
Romer Ventura
rventura at h-st.com
Mon Oct 3 18:27:44 EEST 2011
-----Original Message-----
From: dovecot-bounces at dovecot.org [mailto:dovecot-bounces at dovecot.org] On
Behalf Of Romer Ventura
Sent: Monday, October 03, 2011 9:30 AM
To: dovecot at dovecot.org
Subject: [Dovecot] Multiple LDAP authentication servers
Hello,
We are performing a Domain migration and I was wondering if there was any
way to get Dovecot to authenticate to more than 1 LDAP server? Currently
dovecot is configure to query the "mail" attribute from Active Directory and
when found it binds with the credentials the user provided.
This works fine, but when migrating user accounts, they get disabled in the
source domain so that the user can no longer log on to it. But disabling the
account in the source domain, causes the user to be unable to use his email
account.
Is there any way to get dovecot to try a second LDAP server if the first one
fails to authenticate..?
~# dovecot -n
# 1.2.11: /etc/dovecot/dovecot.conf
# OS: Linux 2.6.29-xs5.5.0.15 i686 Debian 5.0.4 ext3
log_timestamp: %Y-%m-%d %H:%M:%S
protocols: imaps imap
ssl_cert_file: /etc/ssl/certs/smtpd.crt
ssl_key_file: /etc/ssl/private/smtpd.key
login_dir: /var/run/dovecot/login
login_executable: /usr/lib/dovecot/imap-login
login_user: postfix
mail_privileged_group: mail
mail_uid: vmail
mail_gid: vmail
mail_location: maildir:/srv/mail/vmail/%Ud/%Ln/Maildir
mbox_write_locks: fcntl dotlock
imap_client_workarounds: delay-newmail outlook-idle netscape-eoh
lda:
postmaster_address: postmaster at h-st.com
auth_socket_path: /var/run/dovecot/auth-master
log_path: /var/log/dovecot-deliver.log
info_log_path: /var/log/dovecot-deliver-info.log
auth default:
mechanisms: plain login
passdb:
driver: ldap
args: /etc/dovecot/dovecot-ldap.conf
userdb:
driver: ldap
args: /etc/dovecot/dovecot-ldap.conf
socket:
type: listen
client:
path: /var/spool/postfix/private/auth-client
mode: 432
user: postfix
group: postfix
master:
path: /var/run/dovecot/auth-master
mode: 384
user: vmail
group: vmail
**************************************************
Also I forgot to mention that these are different domains, we are not
authenticating to DOMAIN-AAA.COM and we would like to authenticate to
DOMAIN-BBB.LAN while still allowing authentication to DOMAIN-AAA.COM. The
Base DNs and domains are different.
Possible?
Thanks
More information about the dovecot
mailing list