Attempting the impossible?

I've quickly perused the documentation, and I think I'm trying to accomplish
the impossible.  Which means this isn't going to be fun.

We have a customer.  This customer runs their own Windows NT-style domain,
and they handle all their accounts in that.  However, they refuse to run
Exchange.  Normally I would congratulate them, but it's causing me a
headache.

I'm trying to use Jamm to create a web frontend to the mail system.[1]
Essentially, manual synchronization is done between their domain listing,
and the mail system (Jamm/postfix/courier).

However, we can't authenticate against the LDAP database, as the user
passwords are all stored on the domain.  We've been running quite
successfully with pam_winbind.so for some time with qpopper, and I can
confirm that it works just as well with courier.  The problem is, since
courier authenticates via authpam and *not* authldap, it doesn't pick up the
virtual domain configuration stuffs.

So, in short, we need to combine the two systems.  Is it possible to have
courier authenticate via PAM, yet pull mail routing information from LDAP?
Or, if this is not possible, can we tell the LDAP server to authenticate via
PAM (I'm still an LDAP noob)?  Or are we fubar'ed, and should we just
maintain a separate set of passwords for everyone within LDAP, and tell them
to suck it up?

In an Ideal World, we could use NSS+Samba to map all domain users directly
into the mail server, but I know there's problems with it in 4.x.  That, and
they're running an NT4 domain, and last I checked, there were still some
quirks.

None of this might make sense.  It's late, I only got about three hours
sleep last night (working on a Jamm setup for another customer, but that one
isn't as complicated), and I've been working on this for about five hours
straight now.  Let me know if you need clarification.

  - Damian

[1] For a few months now, every account change went through me.  That's not
what you might call an ideal working environment.


-------------------------------------------------------
SF.Net is sponsored by: Speed Start Your Linux Apps Now.
Build and deploy apps & Web services for Linux with
a free DVD software kit from IBM. Click Now!
http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click