Re: Qmail-ldap + dovecot

Ismail YENIGUL <[email protected]> Thu, 25 Aug 2011 23:55:24 +0300
Newsgroups gmane.mail.qmail.ldap
Organization Endersys Ltd
Message-ID <[email protected]>
Hello,

This is another solution but If you use dovecot-ldap settings you will 
loose session forwarding(proxy) feature of auth_dovecot/auth_imap in 
multi-backend server environments.
With session forwarding feature, it does not matter which imap backend 
server you connect. the server will forward you request to account's 
imap server(mailserver attr).
at retrieve the mails.
Best Regards.

Ismail YENIGUL
Project Manager
Endersys Ltd
Phone :+90 216-4709423 | Mobile:+90 533 747 36 65
SurGATE: West Coast Labs Premium Anti-Spam Certificated
Twitter: http://www.twitter.com/endersys
Blog: http://blog.endersys.com

On 25.08.2011 19:54, Felipe Augusto van de Wiel wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA512
>
> On 25-08-2011 08:02, Nickitas wrote:
>> Hello list ,
>>
>>   I am trying to use dovecot in our qmail-ldap installation . I got the
>> qmail-ldap-1.03-20060201-dovecot.v0.5 patch from
>> "http://www.mail-archive.com/[email protected]/msg07158.html" .
>> The patch was done with some warnings (since our source has a spf patch
>> that is normal) , so i also made the changes by hand just to be sure ..
> [...]
>
> 	I don't use auth_dovecot, but I do use qmail-ldap+dovecot,
> customizing dovecot to take a look at the right parameters in LDAP.
> I'm using Debian 5.0 (a.k.a. Lenny), with dovecot from backports.
>
> dovecot-imapd  1:1.2.10-1~bpo
>
>
> My /etc/dovecot contains:
>
> dovecot.conf
> dovecot-ldap.conf
> dovecot-ldap-userdb.conf ->  dovecot-ldap.conf (yes, it's a symlink)
>
>
> - ----------8<----------8<----------8<----------8<----------
>
> The relevant part of dovecot.conf:
>
> protocols = imap imaps
> disable_plaintext_auth = yes
> log_path = /var/log/dovecot.log
> info_log_path = /var/log/dovecot-info.log
> log_timestamp = "%Y-%m-%d %H:%M:%S "
>
> ssl = required
> login_processes_count = 10
> login_max_processes_count = 512
>
> mail_location = maildir:~/Maildir
> mail_gid = vmail
> mail_privileged_group = mail
>
> protocol imap {
>    mail_plugins = quota imap_quota
>    mail_plugin_dir = /usr/lib/dovecot/modules/imap
> }
>
> protocol pop3 {
>    pop3_uidl_format = %08Xu%08Xv
> }
>
> auth default {
>    mechanisms = plain
>    passdb pam {
>    }
>
>    passdb ldap {
>      args = /etc/dovecot/dovecot-ldap.conf
>    }
>
>    userdb ldap {
>      args = /etc/dovecot/dovecot-ldap-userdb.conf
>    }
>
>    user = root
> }
>
> plugin {
>    quota = maildir:User quota
>    quota_rule = *:storage=2560M
> }
>
> - ----------8<----------8<----------8<----------8<----------
>
> The relevant part of dovecot-ldap.conf:
>
> hosts = YOUR-SERVER-IP
> auth_bind = yes
> auth_bind_userdn = uid=%u,ou=People,dc=example,dc=net
> ldap_version = 3
> base = dc=example,dc=net
> user_attrs = qmailUID=uid,mailMessageStore=home=/var/qmail/maildirs/%$,mailQuotaSize=quota_rule=*:bytes=%$
> user_filter = (&(objectClass=qmailUser)(uid=%u)(!(accountStatus=noaccess))(!(accountStatus=disabled)))
> pass_attrs = mail=user,userPassword=password
> pass_filter = (&(objectClass=qmailUser)(!(accountStatus=disabled))(!(accountStatus=noaccess)))
> default_pass_scheme = SSHA
>
>
> Kind regards,
> - -- 
> Felipe Augusto van de Wiel<[email protected]>
> Tecnologia da Informação (TI) - Complexo Pequeno Príncipe
> http://www.pequenoprincipe.org.br/    T: +55 41 3310 1747
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.11 (GNU/Linux)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
>
> iQIcBAEBCgAGBQJOVn5bAAoJECCPPxLgxLxP41IP/RRW+zeylXSDlmfinbu9D7un
> 0ALwsmTKJkv05RIAPlyCvInEHa0Gfh9MS6+kUE0LmOifblJYok9X/cRhTnREf1Up
> 2Z4T8y7TVsOI0MOuEKs4smXixGMLMi7XaSDkxPWO5mHlQ6CZdmw8hPa2JkIVSGKx
> /DQmd87uwcRc9+6P0+WU8baQsMG/6og8+jvM6iE/QL4A1csHyYo1IJ82NnMnrhuX
> QtYiSijRV+WhSvq8CzPxcRImara0ZBckMsTF5AQPXiFutqWepDVNtbLVwK3gINJp
> rKJ+Yr/hL3Qj/4sdU2Sh/oSs2glAoNNW5xUy8IQkQItNKsEoTxM+v5W5C9UIoMol
> d0WLGuLFSLo+HEGN9wrjeNW9KKZs2cjqwfHKaKaUkiQRhmjMCRcMgQu+bO7PDSCQ
> FCKoaNqTRqytb76DvYq6f8211M1UPl63wCa5rCPEr8LvC6tBM0O/KG63q0DLfiMz
> /W4c0XalxaTbu1+b4h154wThcxmze5QjGMorhnpyQtp18zy76jJx8PvBW8lpSqVe
> EvwEP09/f6c6pdmVVG7uyOZAG9aUwfMRU7+7mpnWFXugG2IJE6ffc8/DoBMslelr
> LOlzGN04q4y3qpwPj+687u//A7SdmP9FcStrtO2h7zgIzxRTHGilYHxhlitXpDwf
> Trgc67TIbjG8j/AAUZgZ
> =Y5QH
> -----END PGP SIGNATURE-----
>