[Dovecot] dovecot auth ldap attributes - unused?
Please explain the following dovecot (2.2.13) behaviour: I run dovecot in ldap auth debug mode and log file excerpt follows:
2014-05-21T08:22:01+02:00 dovecot/ip dovecot: auth: Debug: ldap(user@domain,pcip,<bdKvA+P5HQCbnmFI>): bind search: base=o=tree,dc=do,dc=ma,dc=in filter=(&(objectClass=MailAccount)(accountActive=TRUE)(mail=user@domain)) 2014-05-21T08:22:01+02:00 dovecot/ip dovecot: auth: Debug: ldap(user@domain,pcip,<bdKvA+P5HQCbnmFI>): result: mail=user@domain; mail unused 2014-05-21T08:22:01+02:00 dovecot/ip dovecot: auth: Debug: ldap(user@domain,pcip,<bdKvA+P5HQCbnmFI>): result: mail=user@domain 2014-05-21T08:22:01+02:00 dovecot/ip dovecot: auth: Debug: client passdb out: OK 24 user=user@domain
2014-05-21T08:22:01+02:00 dovecot/ip dovecot: auth: Debug:
ldap(user@domain,pcip,<bdKvA+P5HQCbnmFI>): user search:
base=o=tree,dc=do,dc=ma,dc=in scope=subtree
filter=(&(objectClass=MailAccount)(accountActive=TRUE)(mail=user@domain)) fields=mail,quota,mailbox
2014-05-21T08:22:01+02:00 dovecot/ip dovecot: auth: Debug:
ldap(user@domain,pcip,<bdKvA+P5HQCbnmFI>): result:
mailbox=maildir:/mail/domain/user/mail/ quota=1G mail=user@domain;
mail,mailbox,quota unused
2014-05-21T08:22:01+02:00 dovecot/ip dovecot: auth: Debug:
ldap(user@domain,pcip,<bdKvA+P5HQCbnmFI>): result:
mailbox=maildir:/mail/domain/user/mail/ quota=1G mail=user@domain
2014-05-21T08:22:01+02:00 dovecot/ip dovecot: auth: Debug: master userdb
out: USER 3606315009 user@domain quota_rule=*:bytes=1G
mail=maildir:/mail/domain/user/mail/ home=/mail/domain/user
Question: why are there two ldap result log lines while the first line shows unused attributes and the second doesn't. Does the first occurence show some code being excessive somehow?
Thanks.
MU
Maciej Uhlig:
Please explain the following dovecot (2.2.13) behaviour: I run dovecot in ldap auth debug mode and log file excerpt follows:
filter=(&(objectClass=MailAccount)(accountActive=TRUE)(mail=user@domain))
fields=mail,quota,mailbox
Hello,
no solution but a comment:
ldap.conf define two ldap queries. pass_filter and user_filter
when debugging authentication I use to change my ldap filter:
pass_filter = (whatever) vs. pass_filter = (|(PASSDB=1)(whatever)) user_filter = (whatever) vs. user_filter = (|(USERDB=1)(whatever))
The result is the same, but the debug log is easier to understand.
Andreas
participants (2)
-
Andreas Schulze
-
Maciej Uhlig