Re: Qmail-ldap + dovecot
Nickitas <immortal <at> internet.gr>
2011-08-31 10:13:16 GMT
Thank you Nicolas , I will keep this in mind when I get the time to
properly test it on a live system .. Thats an issue I would had never
ever thought off :)
On 08/31/2011 11:00 AM, Nicolas de Bari Embriz Garcia Rojas wrote:
> Hi, I am running dovecot2 under FreeBSD, I had some issues with users
> that create imap mailboxes with dots, at the end I solve this with a
> namespace and plugging listescape, here my final configuration, hoping
> it can help
>
> file /usr/local/etc/dovecot/dovecot.conf
> --
> base_dir = /var/run/dovecot/
>
> first_valid_uid = 200
> last_valid_uid = 200
> first_valid_gid = 200
> last_valid_gid = 200
> mail_uid = 200
> mail_gid = 200
>
> syslog_facility = local1
> log_path = /var/log/maillog
> log_timestamp = %Y-%m-%d %H:%M:%S
> debug_log_path = /var/log/dovecot.debug
> mail_debug = no
> #auth_verbose = yes
> #auth_debug = yes
> #mail_debug = yes
>
> login_greeting = INBOX.IM
>
> mail_location = maildir:~/Maildir
> maildir_very_dirty_syncs = yes
> maildir_copy_with_hardlinks = yes
> maildir_stat_dirs = no
>
> userdb {
> args = /usr/local/etc/dovecot/dovecot-ldap.conf
> driver = ldap
> }
>
> passdb {
> args = /usr/local/etc/dovecot/dovecot-ldap.conf
> driver = ldap
> }
>
> protocols = imap pop3
>
> service imap-login {
> service_count = 1
> chroot = login
> inet_listener imap {
> address = *
> port = 143
> }
> inet_listener imaps {
> address = *
> port = 993
> ssl = yes
> }
> }
>
> service pop3-login {
> service_count = 1
> chroot = login
> inet_listener pop3 {
> address = *
> port = 110
> }
> inet_listener pop3s {
> address = *
> port = 995
> ssl = yes
> }
> }
>
> ssl_cert =</usr/local/etc/dovecot/mail_inbox_im.pem
> ssl_key =</usr/local/etc/dovecot/mail_inbox_im.key
>
> disable_plaintext_auth = no
> #auth_verbose = yes
>
> plugin {
> quota = maildir:User quota
> }
>
> protocol imap {
> mail_plugins = quota imap_quota listescape
> }
>
> protocol pop3 {
> mail_plugins = quota
> }
>
> namespace {
> inbox = yes
> list = yes
> prefix =
> separator = /
> hidden = no
> subscriptions = yes
> type = private
> }
> --
>
> file /usr/local/etc/dovecot/dovecot-ldap.conf
>
> --
> hosts = 192.168.1.2:389
>
> auth_bind = no
> dn = cn=dovecot,dc=inbox,dc=im
> dnpass = xxxxxxx
>
> base = ou=vusers,dc=inbox,dc=im
>
> ldap_version = 3
>
> deref = never
>
> # mailMessageStore = domain/user
> # storate : Quota limit in kilobytes
> # bytes : Quota limit in bytes
> user_attrs = mailMessageStore=home=/home/qmail/maildirs/%$,qmailUID=uid,qmailGID=gid,mailQuotaSize=quota=maildir:bytes
> user_filter = (&(objectClass=qmailUser)(uid=%u)(accountStatus=active))
>
> pass_attrs = mail=user,userPassword=password
> pass_filter = (&(objectClass=qmailUser)(uid=%u))
> --
>
> Now if you want to give an extra to qmail-ldap (nothing related to
> dovecot) but you can help to test, consider also installing this
> patch: (smtpauthuser + SRS)
>
> http://code.google.com/p/qmail-ldap-smtpauthuser/wiki/SETUP?tm=6
>
> regards.
>
>
>
> 2011/8/30 Nickitas<immortal <at> internet.gr>:
>> Hi ,
>>
>> This configuration seems to work for me .
>>
>> Thanx a lot :)
>>
>>
>> On 08/26/2011 04:54 PM, ismail.yenigul <at> endersys.com wrote:
>>> Hi
>>>
>>> here is my working config.
>>> The key part is passdb.
>>>
>>> # 2.0.13: /usr/local/etc/dovecot/dovecot.conf
>>> # OS: Linux 2.6.32-71.el6.x86_64 x86_64 CentOS Linux release 6.0 (Final)
>>> auth_debug = yes
>>> auth_verbose = yes
>>> base_dir = /var/run/dovecot
>>> disable_plaintext_auth = no
>>> first_valid_gid = 500
>>> last_valid_gid = 65000
>>> last_valid_uid = 65000
>>> listen = *
>>> log_path = /var/log/dovecot
>>> mail_debug = yes
>>> mail_location = maildir:~/Maildir
>>> passdb {
>>> args = /var/qmail/bin/auth_dovecot ./Maildir/
>>> driver = checkpassword
>>> }
>>> plugin {
>>> mail_log_events = delete undelete expunge copy mailbox_delete
>>> mailbox_rename
>>> mail_log_fields = uid box msgid from subject
>>> mail_log_group_events =
>>> mechanisms = plain login
>>> quota = maildir
>>> quota_rule = *:storage=10240000
>>> quota_rule2 = Trash:storage=1024000
>>> quota_rule3 = SPAM:ignore
>>> trash = /usr/local/etc/dovecot/dovecot-trash.conf
>>> }
>>> protocols = imap pop3
>>> service imap-login {
>>> inet_listener imaps {
>>> port = 993
>>> ssl = yes
>>> }
>>> process_min_avail = 1
>>> }
>>> service pop3-login {
>>> inet_listener pop3s {
>>> port = 995
>>> ssl = yes
>>> }
>>> process_min_avail = 1
>>> }
>>> ssl_cert =</etc/ssl/certs/mailcertificate.pem
>>> ssl_cipher_list = ALL
>>> ssl_key =</etc/ssl/private/mailcertificate.pem
>>> userdb {
>>> driver = prefetch
>>> }
>>> verbose_proctitle = yes
>>> verbose_ssl = yes
>>> protocol imap {
>>> mail_plugins = quota mail_log notify imap_quota
>>> ssl_cert =</etc/ssl/certs/mailcertificate.pem
>>> ssl_key =</etc/ssl/private/mailcertificate.pem
>>> }
>>> protocol pop3 {
>>> mail_plugins = quota mail_log notify
>>> ssl_cert =</etc/ssl/certs/mailcertificate.pem
>>> ssl_key =</etc/ssl/private/mailcertificate.pem
>>> }
>>>
>>> -sent via mobile device
>>>
>>> -- orijinal mesaj --
>>> Konu: Re: Qmail-ldap + dovecot
>>> Kimden: Nickitas<immortal <at> internet.gr>
>>> Tarih: 26.08.2011 15:19
>>>
>>> Thank you Russel , I am definitely gonna try it when I get the chance
>>> cause your setup is almost identical to ours :)
>>>
>>> On 08/26/2011 02:47 PM, Russell Simpkins wrote:
>>>> On 8/26/11 7:12 AM, Nickitas wrote:
>>>>> Thanx all for the answers :)
>>>>>
>>>>> I added strsalloc.o at both sections in Makefile and it worked ok
>>>>> (for the compilation) . I keep getting an error 111 though using this
>>>>> method (test pop connection) ..
>>>>>
>>>>> I ve also tried the Felipe's implementation , but I can't pass the
>>>>> authentication , think there is something that has to do with ldap
>>>>> config , will look more in this later ..
>>>>>
>>>>> Thank you again :)
>>>> I too use dovecot for imap and simply configure dovecot to auth
>>>> against the ldap server. I do not use the patch you listed, I use
>>>> stock qmail-1.0.3 with qmail-ldap-1.03-20060201.patch. I use a similar
>>>> method to Felipe, configuring dovecot to auth directly against LDAP
>>>> and configuring qmail to use auth_smtp. If you can login using qmail,
>>>> then there's no reason you shouldn't be able to log in with dovecot,
>>>> it may just be a case of making sure you have the correct password
>>>> scheme configured for dovecot.
>>>>
>>>> ## dovecot.conf
>>>> protocols = imap imaps
>>>> syslog_facility = mail
>>>> ssl_cert_file = /etc/httpd/conf/certs/mail.crt
>>>> ssl_key_file = /etc/httpd/conf/keys/mail.key
>>>> mail_location = maildir:%h
>>>> namespace private {
>>>> prefix = INBOX.
>>>> inbox = yes
>>>> }
>>>> mail_debug = yes
>>>> maildir_copy_with_hardlinks = yes
>>>> protocol imap {
>>>> }
>>>> protocol pop3 {
>>>> }
>>>> protocol lda {
>>>> postmaster_address = postmaster <at> cttechhosting.net
>>>> }
>>>> auth_verbose = yes
>>>> auth default {
>>>> mechanisms = plain
>>>> passdb ldap {
>>>> args = /etc/dovecot-ldap.conf
>>>> }
>>>> userdb ldap {
>>>> args = /etc/dovecot-ldap.conf
>>>> }
>>>> }
>>>> dict {
>>>> }
>>>> plugin {
>>>> }
>>>>
>>>> ## dovecot-ldap conf
>>>>
>>>> hosts =YOUR_LDAP_SERVER_IP:389
>>>> dn=cn=Manager,dc=cttechhosting,dc=net
>>>> auth_bind = yes
>>>> # this should match up to how you did your ldap accounts
>>>> auth_bind_userdn = uid=%u,ou=accounts,dc=cttechhosting,dc=net
>>>> ldap_version=3
>>>> base = ou=accounts,dc=cttechhosting,dc=net
>>>> # tell dovecot what fields to use
>>>> user_attrs =
>>>> mailMessageStore=home,qmailUID=uid,qmailGID=gid,mailMessageStore=mail
>>>> user_filter = (&(objectClass=qmailUser)(uid=%u))
>>>> pass_attrs = mail=user,userPassword=password
>>>> pass_filter = (&(objectClass=qmailUser)(uid=%u))
>>>> default_pass_scheme = LDAP-SHA
>>>>
>>>>
>>>>
>>>
>>>
>>
>
RSS Feed