Dear sirs,
In the configuration of Dovecot I canīt get autentication of the users.
My work environment is:
OpenBSD 3.8
Postfix 2.2.5 (instaled thru ports with ldap and sasl support)
Opendap 2.2.27 (instaled thru ports with sasl support)
Dovecot 0.99.14 (instaled thru source with ldap support)
I have two domains in ldap, the postfix is just autenticating in ldap
(sending e-mails to users of 2 ldap domains), I have one vmail user and
one vmail group with uid e gid 800 to e-mail delivery and one dovecot
user for dovecot itself.
The Dovecot is not autenticating:
# telnet localhost 143
* OK dovecot ready
0 login user@domain.com password
0 NO Authentication failed.
ldapīs LOGS:
Jan 11 13:48:56 ldap slapd[6397]: conn=6 op=4 SRCH
base="cn=dovecot,o=organization,c=com" scope=2 deref=0
filter="(&(objectClass=qmailUser)(mail=user@domain.com))"
Jan 11 13:48:56 ldap slapd[6397]: conn=6 op=4 SRCH attr=uid userPassword
Jan 11 13:48:56 ldap slapd[6397]: conn=6 op=4 SEARCH RESULT tag=101 err=32 nentries=0 text=
my slapd.conf:
include /etc/openldap/schema/core.schema
include /etc/openldap/schema/cosine.schema
include /etc/openldap/schema/inetorgperson.schema
include /etc/openldap/schema/nis.schema
include /etc/openldap/schema/qmail.schema
include /etc/openldap/schema/openldap.schema
pidfile /var/run/slapd/slapd.pid
argsfile /var/run/slapd/slapd.args
access to dn.base=""
by * read
access to attr=userPassword
by dn="uid=vmail,o=organization,c=com" read
by dn="cn=dovecot,o=organization,c=com" read
by anonymous auth
by self write
by * none
database ldbm
checkpoint 1024 5
cachesize 10000
suffix "o=organization,c=com"
rootdn "cn=administrator,o=organization,c=com"
rootpw {CRYPT}xxxxxxxxxxx
directory /var/openldap-data
index objectClass eq
my user.ldif
dn: cn=user,ou=domain1.com,o=organization,c=com
cn: user
ou: domain1.com
sn: user
objectClass: top
objectClass: person
objectClass: inetOrgPerson
objectClass: posixAccount
objectClass: qmailUser
homeDirectory: /var/vmail/domains/domain1.com/user
mail: user@domain1.com
mailHost: mail.domains.com
mailQuotaSize: 0
mailQuotaCount: 0
deliveryMode: normal
uid: user
uidNumber: 2000
gidNumber: 2000
accountStatus: active
userPassword: {CRYPT}xxxxxxxxxxxx
mailMessageStore: domain1.com/user
mailAlternateAddress: user@domain1.com
my dovecot.conf
protocols = imap
imap_listen = *:143
ssl_disable = yes
login_dir = /var/dovecot/login
login_executable = /usr/local/libexec/dovecot/imap-login
login_user = dovecot
first_valid_uid = 800
last_valid_uid = 800
first_valid_gid = 800
last_valid_gid = 800
valid_chroot_dirs = /var/vmail/domains/
default_mail_env = mbox:/var/vmail/domains/%d/%u/Maildir
auth = default
auth_mechanisms = plain
auth_userdb = ldap /etc/dovecot-ldap.conf
auth_passdb = ldap /etc/dovecot-ldap.conf
My dovecot-ldap.conf
hosts = localhost
dn = uid=dovecot,o=organization,c=com
dnpass = password
ldap_version = 3
base = o=organization,c=com
deref = never
scope = subtree
user_attrs = uid,homeDirectory,,uid,uidNumber,gidNumber
user_filter = (&(objectClass=qmailUser)(mail=%u))
pass_attrs = uid,userPassword
pass_filter = (&(objectClass=qmailUser)(mail=%u))
default_pass_scheme = CRYPT
user_global_uid = 800
user_global_gid = 800