Бранко Мајић-2 wrote:
Now, this answer won't help you, but you might find it useful (I've been fiddling with slapd access controls and what-not, so this helped me a lot). :)
The best thing to debug the LDAP issues is to set the olcLogLevel in the slapd configuration tree to 256 - this way you'd get enough information to see what's going on when Dovecot tries to talk with the slapd server, and you won't get overwhelmed by the debugging information. On Debian Squeeze you'll also have to make sure you've set-up the log facility for slapd (by default it uses local4). You could add a file /etc/rsyslog.d/slapd.conf with the following line:
local4.* /var/log/slapd.log
Did you try logging-in by hand as well to the LDAP server? You could do it with, say:
ldapwhoami -W -D cn=prueba,ou=Users,dc=royoleal,dc=com -H ldap://localhost/
On Wed, 13 Jun 2012 13:46:20 -0700 (PDT) arleal nairda91@hotmail.com wrote:
i have debian squeeze. i have installed mds with ldap integration and i want to use dovecot/LDAP but i have problems with login. I have dovecot 1.2.
I try all of dovecot wiki but i dont know how to configure it good
dovecot.conf
protocols = imap imaps pop3 pop3s listen = *, :: auth_verbose = yes auth_debug = yes auth_debug_passwords = yes mail_debug = yes verbose_ssl = yes login_greeting = royoleal.com mailserver ready. mail_location = maildir:/home/users/%u/Maildir disable_plaintext_auth = no ssl_cert_file = /etc/ssl/certs/mail.pem ssl_key_file = /etc/ssl/private/mail.key log_path = /var/log/dovecot.log info_log_path = /var/log/dovecot.log
# IMAP configuration protocol imap { mail_plugins = quota imap_quota }
# POP3 configuration protocol pop3 { pop3_uidl_format = %08Xu%08Xv mail_plugins = quota }
# LDA configuration protocol lda { postmaster_address = postmaster auth_socket_path = /var/run/dovecot/auth-master mail_plugins = quota }
# LDAP authentication
auth default { mechanisms = plain login
passdb ldap { args = /etc/dovecot/dovecot-ldap.conf }
userdb ldap { args = /etc/dovecot/dovecot-ldap.conf }
socket listen { master { path = /var/run/dovecot/auth-master mode = 0660 user = dovecot group = mail }
client { path = /var/spool/postfix/private/auth mode = 0660 user = postfix group = postfix } } }
And this is dovecot-ldap.conf
hosts = 127.0.0.1 auth_bind = yes ldap_version = 3 dn = cn=admin,dc=royoleal,dc=com dnpass = royoleal base = dc=royoleal,dc=com auth_bind_userdn = cn=%u,ou=Users,dc=royoleal,dc=com scope = subtree user_attrs = uidNumber=uid,gidNumber=gid user_filter = (&(objectClass=mailAccount)(mail=%u)(mailenable=OK)) pass_attrs = mail=mail,userPassword=password pass_filter = (&(objectClass=mailAccount)(mail=%u)(mailenable=OK)) default_pass_scheme = CRYPT
When i try login with telnet or other program i have this problem in dovecot.log
Jun 13 22:45:13 auth(default): Info: client in: AUTH 1 PLAIN service=imap secured lip=127.0.0.1 rip=127.0.0.1 lport=14 3 rport=55040 resp=AHBydWViYUByb3lvbGVhbC5jb20AcHJ1ZWJh Jun 13 22:45:13 auth(default): Info: ldap(prueba@royoleal.com,127.0.0.1): invalid credentials (given password: prueba) Jun 13 22:45:13 auth(default): Info: new auth connection: pid=2613 Jun 13 22:45:15 auth(default): Info: client out: FAIL 1 user=prueba@royoleal.com Jun 13 22:45:20 imap-login: Info: Aborted login (auth failed, 1 attempts): user=prueba@royoleal.com, method=PLAIN, rip=127.0.0.1, lip= 127.0.0.1, secured
Thanks.
-- Branko Majic Please use only Free formats when sending attachments to me.
Бранко Мајић Молим вас да додатке шаљете искључиво у слободним форматима.
I forgot see the ldap log. In the ldap.log i cant see nothing about that user trying to login with user prueba.
That autenticate good.
root@mds:~# ldapwhoami -W -D uid=prueba,ou=Users,dc=royoleal,dc=com -H ldap://localhost/ Enter LDAP Password: dn:uid=prueba,ou=Users,dc=royoleal,dc=com
With telnet error of authentication.
View this message in context: http://old.nabble.com/Auth-password-problem-tp34008289p34013987.html Sent from the Dovecot mailing list archive at Nabble.com.