[Dovecot] LDAP auth improvements

[Christoph Bußenius]

On 02.02.2012 14:54, Timo Sirainen wrote:
> user_attrs {
>    home = %{ldap:homeDirectory}
>    uid = %{ldap:uidNumber}
>    gid = %{ldap:gidNumber}
>    mail = %{ldap:mailboxFormat}:%{ldap:homeDirectory}
> }
>
> Any ideas for further improvements before I do this change?

One thing I was recently missing was something like this:

If the user is in LDAP group "group1", then use
    host = imap1
otherwise use
    host = imap2

However this would require a separate LDAP query since most LDAP servers 
do not list any group information in the user table.

Another nice feature: Use some sort of script to compute the lookup 
result, e.g. an external shell script:

#!/bin/bash
if [[ $ldap_uid == fred ]]; then
   echo "quota_rule = storage=3G"
else
   echo "quota_rule = storage=100M"
fi

Stuff like this is possible for SQL user databases, however LDAP does 
not have such flexible queries.

Cheers,
Christoph

-- 
Christoph Bußenius
Rechnerbetriebsgruppe der Fakultäten Informatik und Mathematik
TU München
+49 89-289-18519 <> Raum 00.05.055 <> Boltzmannstr. 3 <> Garching