Re: Authenticate users using their firstname

Why not authenticate users by email address? Using firstname as user identifier does not sound very long term solution...

Anyways...

if you insist on using firstname only, you'll need to use Lua auth database to split the username (or perform the whole deal)

passdb { driver = lua args = file="/etc/dovecot/username.lua" blocking=no }

passdb { driver = ldap args = /ldap.config }

and put into username.lua

function auth_passdb_lookup(req) firstname = req.username:gsub("^([^.]+)[.].*", "%1") return dovecot.auth.PASSDB_RESULT_OK, {firstname=firstname, noauthenticate="y"} end

Aki

On 29 September 2018 at 11:42 Fady AL HAYALI codeforger@outlook.com wrote:

Hi,

I'm setting up a Postfic and Dovecot with LDAP email server. My users in LDAP is like this:

dn: uid=firstname,ou=People,dc=domain,dc=com
uid: firstname
uidNumber: 4025
gidNumber: 4025
givenName: firstname
objectClass: top
objectClass: person
objectClass: posixAccount
objectClass: shadowAccount
objectClass: organizationalPerson
objectClass: inetOrgPerson
loginShell: /bin/bash
homeDirectory: /home/firstname
cn: firstname lastname
mail: firstname.lastname@domain.com<mailto:firstname.lastname@domain.com>

This is how I connect Dovecot with LDAP

hosts = ldapserver
ldap_version = 3
base = ou=People,dc=domain,dc=com
deref = never
scope = subtree
user_attrs =
user_filter = (&(objectclass=inetOrgPerson)(uid=%n)
pass_attrs = uid=user,userPassword=password
pass_filter = (&(objectclass=inetOrgPerson)(uid=%n))
default_pass_scheme = SSHA

When I enter a user's email address and password as the following: email: firstname.lastname@domain.commailto:firstname.lastname@domain.com password: password

and according to my setting which I used "%n" as you see above, the username used to authenticate is "firstname.lastname". I checked the Dovecot variables but I couldn't find something useful in this case to manipulate the "%n" variable.

I would like to keep using email addresses as "firstname.lastname@domain.com"mailto:firstname.lastname@domain.com but authenticate users using their first name. I really hit a wall here and any help will be much appreciated.