[Dovecot] Authentication to Active Directory
Has anybody managed to have Dovecot authenticate to Microsoft Active Directory?
I've tried to get it to work using LDAP and the following settings
dovecot.conf:
userdb = ldap /etc/dovecot-ldap.conf passdb = ldap /etc/dovecot-ldap.conf
dovecot-ldap.conf:
hosts = rdg-home.ad.rdg.ac.uk dn = cn=bind-user,cn=users,dc=rdg-home,dc=ad,dc=rdg,dc=ac,dc=uk dnpass = XXXXX ldap_version = 2 base = dc=rdg-home,dc=ad,dc=rdg,dc=ac,dc=uk user_filter = (sAMAccountName=%u) pass_filter = (sAMAccountName=%u)
I've also tried things like "(&(objectClass=sAMACcountName)(cn=%u))" to no avail. It appears to bind properly, but never finds the account, so login fails.
I've had Active Directory authentication working with Squid and with Cyrus SASL/IMAP.
Best Wishes, Chris
--+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+-- Christopher Wakelin, c.d.wakelin@reading.ac.uk IT Services Centre, The University of Reading, Tel: +44 (0)118 378 8439 Whiteknights, Reading, RG6 2AF, UK Fax: +44 (0)118 975 3094
On Tue, Mar 15, 2005 at 09:25:51AM +0000, Chris Wakelin wrote:
Has anybody managed to have Dovecot authenticate to Microsoft Active Directory?
I've tried to get it to work using LDAP and the following settings [...] I've also tried things like "(&(objectClass=sAMACcountName)(cn=%u))" to no avail. It appears to bind properly, but never finds the account, so login fails.
If it doesn't find the account then it means it either didn't bind properly or the filter expression is wrong.
Try to find the right expression manually using ldapsearch first.
Regards,
Dominik 'Rathann' Mierzejewski
participants (2)
-
Chris Wakelin
-
Dominik 'Rathann' Mierzejewski