Raw backtrace multiple passwords not allowed

Leon Kyneur leon at f-m.fm
Sun Jul 10 13:37:06 UTC 2016


> You sure you're not returning multiple password attributes from LDAP?
>
> Aki

pass_attrs   =  'mail=user, userPlaintextPassword=password_noscheme, 
=proxy=y, =pass=%{ldap:userPlaintextPassword}, =host=%{ldap:mailstoreHost}'

I am returning the same password attribute into different fields :
password_noscheme - to auth the user
pass = to send plaintext password to backend

This is the only workable solution I could muster to terminate encrypted 
passwords on the proxy layer.




More information about the dovecot mailing list