LDAP users issue

[Dmitry Donskih]

I suggest you try adding extra attributes to LDAP replies:

https://wiki.dovecot.org/AuthDatabase/LDAP/Userdb#Attribute_templates_.28v2.1.2B-.29

Primarily, define "mail=" explicitly.

And then compare auth userdb outputs in logs for both LDAP and non-LDAP.

Hope this helps.


18.03.2019 12:25, Anushka Uditha Bandara wrote:

>     Hi,
>
>
> Here is my "/etc/dovecot/dovecot-ldap.conf.ext". I couldn't find a fix.
>
> hosts = ldap
> dn = cn=ro,dc=mail,dc=mail,dc=lk
> dnpass = roadmin
> auth_bind = yes
> auth_bind_userdn = uid=%n,ou=Users,dc=mai,dc=mail,dc=lk
> ldap_version = 3
> base = ou=Users,dc=mail,dc=mail,dc=lk
> deref = never
> scope = subtree
> user_attrs = homeDirectory=home,uidNumber=uid,gidNumber=gid
> user_filter = (&(objectClass=posixAccount)(cn=%n))
> pass_attrs = mail=user,userPassword=password
> pass_filter = (&(objectclass=inetOrgPerson)(uid=%n))
>
> tls_ca_cert_file = /etc/letsencrypt/live/mail.lsf.mail.lk/.fullchain.pem
> <http://mail.lsf.mail.lk/.fullchain.pem>
> tls_ca_cert_dir = /etc/letsencrypt/live/mail.lsf.mail.lk/
> <http://mail.lsf.mail.lk/>
> tls_cipher_suite = SECURE256:-VERS-SSL3.0
> tls_cert_file =/etc/letsencrypt/live/mail.lsf.mail.lk/.fullchain.pem
> <http://mail.lsf.mail.lk/.fullchain.pem>
> tls_key_file =/etc/letsencrypt/live/mail.lsf.mail.lk/.privkey.pem
> <http://mail.lsf.mail.lk/.privkey.pem>
> tls_require_cert = try
> debug_level = -1
>
>
>
>