[Dovecot] Different PROXY for IMAP and POP3 using LDAP-auth
Hello everybody!
I'm trying to configure dovecot 1.1.1 with different proxy hosts and/or ports for different protocols (IMAP, POP3). I'm using LDAP for authentication.
I've tried:
- Variable in "auth default" configuration:
[dovecot.conf]
passdb ldap { args = /usr/local/etc/dovecot-ldap-%Ls.conf } userdb ldap { args = /usr/local/etc/dovecot-ldap-%Ls.conf }
With results in dovecot not starting with error message: Can't open configuration file /usr/local/etc/dovecot-ldap-%Ls.conf: No such file or directory So %Ls was not replaced.
Variable in pass_attrs
[dovecot-ldap.conf]
pass_attrs =
uid=user,userPassword=password,homeDirectory=userdb_home,
uidNumber=userdb_uid,gidNumber=userdb_gid,
dovecotProxy%Ls=proxy,dovecotHost%Ls=host,dovecotPort%Ls=portWith results in this LDAP server log entries: SRCH attr=uid userPassword homeDirectory uidNumber gidNumber dovecotProxy%Ls dovecotHost%Ls dovecotPort%Ls
So %Ls was not replaced also.
mmmh...
Would it be an option to use multiple "auth" sections? E.g: auth pop3 { ... passdb ldap { args = /usr/local/etc/dovecot-ldap-pop3.conf } userdb ldap { args = /usr/local/etc/dovecot-ldap-pop3.conf } ... }
auth imap { ... passdb ldap { args = /usr/local/etc/dovecot-ldap-imap.conf } userdb ldap { args = /usr/local/etc/dovecot-ldap-imap.conf } ... }
I'm in doubt because of http://markmail.org/message/rcpcm67g56kxxdyq
Any ideas?
Regards, Ralf Becker
--
Dipl.-Inform. (FH) Ralf Becker Rechenzentrum (r/ft) der FH Trier (Network|Mail|Web|Firewall) University of applied sciences Administrator Schneidershof, D-54293 Trier
Mail: beckerr@fh-trier.de Fon: +49 651 8103 499
Web: http://www.fh-trier.de/~beckerr Fax: +49 651 8103 214
PubKey: http://www.fh-trier.de/~beckerr Crypto: GnuPG, S/MIME
Wenn Gott gewollt haette, dass E-Mail in HTML geschrieben wuerden, endeten Gebete traditionell mit </amen>. (Tom Listen)
Ralf Becker wrote:
Hello everybody!
I'm trying to configure dovecot 1.1.1 with different proxy hosts and/or ports for different protocols (IMAP, POP3). I'm using LDAP for authentication.
I've tried:
Refer to this thread: http://marc.info/?l=dovecot&m=121376558429308&w=2
-- Best Regards.
Zhang Huangbin
- iRedMail: Mail Server Solution for Red Hat(R) Enterprise Linux & CentOS 5.x: http://iRedMail.googlecode.com/
On Jul 4, 2008, at 2:15 PM, Ralf Becker wrote:
- Variable in "auth default" configuration:
[dovecot.conf]
passdb ldap { args = /usr/local/etc/dovecot-ldap-%Ls.conf } userdb ldap { args = /usr/local/etc/dovecot-ldap-%Ls.conf }
With results in dovecot not starting with error message: Can't open configuration file /usr/local/etc/dovecot-ldap-%Ls.conf: No such file or directory So %Ls was not replaced.
This is a lot of work to implement.
- Variable in pass_attrs
[dovecot-ldap.conf]
pass_attrs =
uid=user,userPassword=password,homeDirectory=userdb_home,
uidNumber=userdb_uid,gidNumber=userdb_gid,
dovecotProxy%Ls=proxy,dovecotHost%Ls=host,dovecotPort%Ls=portWith results in this LDAP server log entries: SRCH attr=uid userPassword homeDirectory uidNumber gidNumber dovecotProxy%Ls dovecotHost%Ls dovecotPort%Ls
So %Ls was not replaced also.
This probably wouldn't be difficult to implement, but I'm not sure
when I have time for it. If you want to try yourself, src/auth/passdb-
ldap.c and/or db-ldap.c see the existing var_expand() calls.
Would it be an option to use multiple "auth" sections? E.g: auth pop3 { auth imap {
Multiple auth sections don't work in any reasonable way currently.
I don't think you really have any working solutions for LDAP
currently, other than running two separate Dovecot instances.
Hi Timo,
Timo Sirainen schrieb am 04.07.2008 11:08:
- Variable in pass_attrs
[dovecot-ldap.conf]
pass_attrs =
uid=user,userPassword=password,homeDirectory=userdb_home,
uidNumber=userdb_uid,gidNumber=userdb_gid,
dovecotProxy%Ls=proxy,dovecotHost%Ls=host,dovecotPort%Ls=portWith results in this LDAP server log entries: SRCH attr=uid userPassword homeDirectory uidNumber gidNumber dovecotProxy%Ls dovecotHost%Ls dovecotPort%Ls
So %Ls was not replaced also.
This probably wouldn't be difficult to implement, but I'm not sure when I have time for it. If you want to try yourself, src/auth/passdb-ldap.c and/or db-ldap.c see the existing var_expand() calls.
Thanks for the hint. I'll have a look to the source.
--
Dipl.-Inform. (FH) Ralf Becker Rechenzentrum (r/ft) der FH Trier (Network|Mail|Web|Firewall) University of applied sciences Administrator Schneidershof, D-54293 Trier
Mail: beckerr@fh-trier.de Fon: +49 651 8103 499
Web: http://www.fh-trier.de/~beckerr Fax: +49 651 8103 214
PubKey: http://www.fh-trier.de/~beckerr Crypto: GnuPG, S/MIME
Wenn Gott gewollt haette, dass E-Mail in HTML geschrieben wuerden, endeten Gebete traditionell mit </amen>. (Tom Listen)
participants (3)
-
Ralf Becker
-
Timo Sirainen
-
Zhang Huangbin