dovecot

dovecot@dovecot.org

August 2012

136 participants
162 discussions

[Dovecot] ntlm auth / usernames with white spaces
by Matthias Lay 01 Aug '12

01 Aug '12

Hi, we experienced some problems with white spaces in usernames (this was NOT our idea) authenticated bei dovecots ntlmhelper I wrote a little patch fixing this, if you would like. patch applies on 2.1.7 and 2.1.8 (tested those) diff -up ./src/auth/mech-winbind.c.username ./src/auth/mech-winbind.c --- ./src/auth/mech-winbind.c.username 2012-07-27 09:52:33.422553807 +0200 +++ ./src/auth/mech-winbind.c 2012-07-27 14:23:03.718619388 +0200 @@ -239,8 +239,16 @@ do_auth_continue(struct auth_request *au return HR_FAIL; } else if (strcmp(token[0], "AF") == 0) { const char *user, *p, *error; + int ti=1; + + if(gss_spnego) + ti=2; + /* some braindead administrators like spaces in usernames */ + user = token[ti]; + while(token[++ti]){ + user = t_strconcat(user, " ", token[ti], NULL); + } - user = gss_spnego ? token[2] : token[1]; i_assert(user != NULL); p = strchr(user, '\\');

2 2

[Dovecot] BUG: LDAP extension failed to authenticate if 'base' DN configuration is empty ''
by Hendy Irawan 01 Aug '12

01 Aug '12

Dear Dovecot developers, We have several context entries and want to authenticate a user against the whole LDAP server. However when setting "base = " Dovecot LDAP fails with following message: Jul 29 10:50:59 nitik1 dovecot: auth: Error: ldap(hendy(a)staging.member.berbatik.com,127.0.0.1): ldap_search((virtualMail=hendy(a)staging.member.berbatik.com)) failed: Other (e.g., implementation specific) error This limits the search to only one base DN, e.g. base = dc=staging,dc=berbatik,dc=com The ldap client library is able to search entries using an empty base DN, so it should be possible for Dovecot LDAP to do the same. An even more elegant solution will be the ability to specify multiple base DNs, but if Dovecot can search the "root DN" (empty string) it would be great. Thank you. Hendy ----- http://www.Soluvas.com/ Soluvas - Making eCommerce Work for You -- View this message in context: http://old.nabble.com/BUG%3A-LDAP-extension-failed-to-authenticate-if-%27ba… Sent from the Dovecot mailing list archive at Nabble.com.

2 4

Jump to page: