[Dovecot] Use 1 userdb and LDAP passdb for mailbox without allow_all_users

VALLIN Quentin Quentin.VALLIN at cnrs.fr
Fri Apr 4 06:47:52 UTC 2014


Hello everybody,

I have a little pb with dovecot. I have been read on archive of dovecot mailing list that it's possible to have 1 static userdb with LDAP passdb (http://www.dovecot.org/list/dovecot/2010-November/055193.html)   but when I try it I have an error message and my message is on the queue  with "temporary failure"

auth: Debug: master in: USER#0111#011quentinv#011service=lda
auth: Debug: password(quentinv): passdb doesn't support credential lookups
auth: Error: static(quentinv): passdb doesn't support lookups, can't verify user's existence
auth: Debug: userdb out: FAIL#0111
lda: Error: user quentinv: Auth USER lookup failed
lda: Fatal: Internal error occurred. Refer to server log for more information.
auth: Debug: master in: USER#0111#011quentinv#011service=lda
auth: Debug: password(quentinv): passdb doesn't support credential lookups
auth: Error: static(quentinv): passdb doesn't support lookups, can't verify user's existence
auth: Debug: userdb out: FAIL#0111
lda: Error: user quentinv: Auth USER lookup failed
lda: Fatal: Internal error occurred. Refer to server log for more information.


My imap connexion havn't any pb but LDA yes.

Here is my dovecot.conf
# 2.2.10: /usr/local/dovecot/etc/dovecot/dovecot.conf
# OS: Linux 2.6.32-5-686 i686 Debian 7.4 ext3
auth_debug = yes
base_dir = /var/run/dovecot/
disable_plaintext_auth = no
first_valid_gid = 8
first_valid_uid = 15
listen = *
login_greeting = Bienvenue sur courriel
login_log_format_elements = user=<%u> method=%m rip=%r lip=%l %c
mail_fsync = never
mail_gid = 8
mail_location = maildir:/var/mail/%n:CONTROL=/var/mail/%n/control:INDEX=/var/mail/%n/index
mail_log_prefix = "%Us(%u): "
mail_privileged_group = mail
mail_uid = 15
passdb {
  args = /usr/local/dovecot/etc/dovecot-ldap.conf
  driver = ldap
}
plugin {
  quota = maildir
  quota_rule = *:storage=3145728
  quota_rule2 = Trash:storage=+102400
  quota_warning = storage=90%% /usr/local/dovecot/bin/quota-warning.sh 90
}
protocols = imap
service auth {
  executable = /usr/local/dovecot/libexec/dovecot/auth
}
service imap-login {
  chroot = login
  executable = /usr/local/dovecot/libexec/dovecot/imap-login
  process_limit = 400
  process_min_avail = 3
  service_count = 1
  user = dovecot
  vsz_limit = 32 M
}
service imap {
  drop_priv_before_exec = no
  executable = /usr/local/dovecot/libexec/dovecot/imap
  process_limit = 512
}
service pop3-login {
  chroot = login
  process_limit = 256
  process_min_avail = 3
  service_count = 1
  user = dovecot
  vsz_limit = 32 M
}
service pop3 {
  drop_priv_before_exec = no
  process_limit = 512
}
ssl_cert =
ssl_cipher_list =
ssl_key = </
userdb {
  args = uid=vmail gid=mail home=/var/mail/%n
  driver = static
}
valid_chroot_dirs = /var/mail
protocol imap {
  imap_logout_format = bytes=%i/%o
  imap_max_line_length = 64 k
  mail_max_userip_connections = 5
  mail_plugins = quota imap_quota
}
protocol lda {
  deliver_log_format = msgid=%m: %$
  hostname = courriel2.coria.fr
  mail_fsync = optimized
  mail_plugins = quota
  postmaster_address = postmaster at coria.fr<mailto:postmaster at coria.fr>
  rejection_reason = Your message to <%t> was automatically rejected : %n%r
  rejection_subject = Automatically rejected mail
  sendmail_path = /usr/lib/sendmail
}

And my dovecot-ldap.conf

tls = no
uris            = ldap://x.x.x.x:389
ldap_version    = 3
auth_bind       = yes
dn              = userdn
dnpass          = pass
base            = ou=Users,dc=quentin,dc=local
scope           = subtree
deref           = never
pass_filter     = (&(SamAccountName=%n)(objectClass=person)(!(userAccountControl=514)))
pass_attrs      =uid=user, userPassword=password
default_pass_scheme = CRYPT

Sincerly,

Quentin.



[signature]

-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 14295 bytes
Desc: image001.png
URL: <http://dovecot.org/pipermail/dovecot/attachments/20140404/f6e10ed6/attachment-0001.png>


More information about the dovecot mailing list