Re: qmail-ldap and auth_smtp handling usernames differently between versions.

On Wed, Nov 11, 2009 at 01:01:34PM -0500, Edward Capriolo wrote:
> Hello list,
> 
> I have servers running an older version of qmail-ldap and (built from
> source, build from FreeBSD ports?). I am in the middle of an upgrade
> and have noticed that qmail-ldaplookup is working differently (latest
> build). This manifests on the user end as mail clients were configured
> for '[email protected]'
> But qmail-auth is only accepting 'ecapriolo'
> 
> New Server:
> [root@nymail1 /service/qmail-smtpd-5190]# qmail-ldaplookup -u ecapriolo
> Searching ldap for: (&(objectClass=qmailUser)(uid=ecapriolo))
> under dn: o=domain,c=US
> Found 1 entry:
> 
> dn: [email protected],ou=user,ou=domain.com,o=domain,c=US
> -------------------------------------------------------
> objectClass: top
> objectClass: person
> objectClass: qmailUser
> objectClass: inetOrgPerson
> objectClass: shadowAccount
> objectClass: sambaSamAccount
> objectClass: posixAccount
> objectClass: ldapPublicKey
> objectClass: ciscoVPNUser
> mail: [email protected]
> uid: ecapriolo
> 
> 
> Old server....
> [root@mail2 smtpalt]# /var/qmail/bin/qmail-ldaplookup -u [email protected]
> Searching ldap for: (&(objectClass=qmailUser)([email protected]))
> under dn: o=domain,c=US
> Found 1 entry:
> 
> dn: [email protected],ou=user,ou=domain.com,o=domain,c=US
> -------------------------------------------------------
> objectClass: top
> objectClass: person
> objectClass: qmailUser
> objectClass: inetOrgPerson
> objectClass: shadowAccount
> objectClass: sambaSamAccount
> objectClass: posixAccount
> objectClass: ldapPublicKey
> objectClass: ciscoVPNUser
> mail: [email protected]
> mail: [email protected]
> 
> Side note here: mail= is our naming attribute in openldap.  All the
> control/ldap related files are identical between the old and the new
> servers.
> 
> What changed?
> Is this something I can fix with a control file?
> Recompile?
> 

You modified you're local version. -u does a uid lookup and in the first
case [email protected] is used, in the other case
[email protected] is used for searches.
Have a look at qmail-ldap.h and the LDAP_UID definition to change it to
mail (at least I hope it is the place you need looking). Afterwards
recompile.

-- 
:wq Claudio